Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/2A84118CE0A311EC9CF2B738C4F9AE02.roa
File:                     2A84118CE0A311EC9CF2B738C4F9AE02.roa (raw, json)
Hash identifier:          bIUk6ZZ/A1xldg4HDw1gT54BgctTYwC/Te7zgetsISU=
Subject key identifier:   C5:D3:44:87:89:59:04:AD:E5:91:11:66:51:26:B9:24:F2:46:C9:1A
Certificate issuer:       /CN=A9117817/serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432
Certificate serial:       033C
Authority key identifier: 12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/2A84118CE0A311EC9CF2B738C4F9AE02.roa
Signing time:             Fri 13 Oct 2023 01:53:40 +0000
ROA not before:           Fri 13 Oct 2023 01:53:40 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     134357
IP address blocks:        103.175.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.crl
                          rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 May 2024 02:27:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 828 (0x33c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117817/serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432
        Validity
            Not Before: Oct 13 01:53:40 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6528a324-fbe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a7:43:df:da:e9:6b:68:63:0c:47:5a:0c:8c:
                    3c:f1:06:7b:fe:a7:ba:69:ee:ca:59:7d:9d:dd:27:
                    07:cc:19:bd:c7:3f:e0:bf:8b:26:17:c6:26:32:b8:
                    3e:bb:4e:1b:70:5f:bd:60:33:da:cb:55:77:36:cd:
                    69:8c:89:e3:41:ea:c0:b6:29:9d:e0:9c:9c:29:22:
                    28:46:be:aa:af:a2:93:ee:47:8b:d6:0e:5c:8b:16:
                    48:57:21:d4:7e:d8:60:c0:07:7d:a3:4f:17:d6:e3:
                    91:3a:c5:72:85:f6:9e:47:b5:76:fa:22:06:de:69:
                    05:52:a1:5d:65:75:7f:c5:8d:dc:e5:24:b5:e4:57:
                    b4:57:9c:6a:55:11:95:67:8b:b0:bb:2a:de:ee:e2:
                    ea:5d:c9:5c:eb:1f:33:5d:56:4e:f3:e5:30:92:15:
                    1c:f4:55:aa:7c:79:cc:f0:07:33:a5:5d:20:7a:e0:
                    14:88:4c:34:22:05:e5:35:51:9c:ea:ba:ac:82:68:
                    18:9d:04:30:96:33:03:84:ea:b7:a0:7a:12:bd:40:
                    62:fa:49:1a:9f:f4:a8:9a:73:66:32:73:53:97:e5:
                    ec:57:96:8d:80:ed:67:c7:eb:c3:34:62:51:b9:ed:
                    c8:b6:9e:ff:ca:82:12:fc:54:b6:c3:cf:df:e7:88:
                    37:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D3:44:87:89:59:04:AD:E5:91:11:66:51:26:B9:24:F2:46:C9:1A
            X509v3 Authority Key Identifier:
                keyid:12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/2A84118CE0A311EC9CF2B738C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:dd:84:fa:22:c7:92:6e:35:c6:bf:20:2e:00:bb:2b:ef:59:
         2c:ef:10:2d:ff:bc:f0:64:a8:33:1c:7f:61:0f:de:14:4f:14:
         8b:f7:f8:d6:29:20:1b:89:bc:25:d8:3c:b9:e1:fd:38:54:57:
         03:64:66:94:54:42:08:09:6b:62:0c:df:d3:88:df:ca:91:a7:
         db:a9:0f:8b:6a:77:72:4c:a0:b2:ed:2a:88:f1:25:c4:6e:47:
         0b:dd:c8:a6:1f:e6:9f:84:d6:42:03:6a:54:c5:9b:d6:69:c7:
         72:df:b4:31:52:ac:6b:aa:50:4c:67:a7:9d:69:b8:d7:01:6b:
         66:b2:6c:be:f3:cf:97:99:13:b9:47:e0:91:9e:59:fc:37:b7:
         93:15:a0:ac:0d:93:94:a9:0c:e7:b7:ff:d6:94:0b:66:c6:58:
         03:55:86:bd:81:ce:93:47:cf:39:68:03:34:05:86:25:36:50:
         fc:6d:00:b7:ca:61:42:5e:0b:9e:63:e2:7b:fe:9c:1b:00:ca:
         f9:a0:38:46:d0:60:e4:41:e7:c1:cb:b1:0b:52:c3:9a:6b:72:
         b5:22:f0:b7:4a:a0:3f:a7:6b:3f:fd:00:05:df:d4:8f:f9:1a:
         37:05:d4:99:22:7d:73:42:b4:b8:b5:91:46:22:bf:f2:8f:3a:
         dd:83:9d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 04:26:51 2024 by rpki-client on console-ams.rpki-client.org