Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/AF506F14630811EC97879243C4F9AE02.roa
File:                     AF506F14630811EC97879243C4F9AE02.roa (raw, json)
Hash identifier:          ADZe52n7KpNwXGtA9lVaGhND4dnFjDyI/3kJIZzzGgs=
Subject key identifier:   7F:66:50:7E:2C:DF:D8:4B:A9:F8:2C:83:44:D5:36:E6:B7:74:25:B6
Certificate issuer:       /CN=A9125A95/serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD
Certificate serial:       0337
Authority key identifier: FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/AF506F14630811EC97879243C4F9AE02.roa
Signing time:             Sat 27 Jan 2024 02:24:46 +0000
ROA not before:           Sat 27 Jan 2024 02:24:46 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     149169
IP address blocks:        103.177.200.0/24 maxlen: 24
                          103.177.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl
                          rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 823 (0x337)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125A95/serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD
        Validity
            Not Before: Jan 27 02:24:46 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65b4696d-afba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6a:33:1c:61:29:a7:02:5d:d8:04:db:5e:3c:
                    1a:26:a0:f0:ad:a4:74:d0:0e:e4:28:cd:5b:3c:95:
                    50:70:a6:88:b4:b8:cb:ca:c3:65:97:29:3c:94:3b:
                    f7:34:3d:74:9c:d4:ed:a7:f8:af:4b:3e:c7:bb:57:
                    7e:d4:5d:16:3e:76:60:74:5e:a6:4b:a5:c4:9d:65:
                    3d:79:5d:36:a1:6c:69:29:61:06:c7:55:74:1b:fd:
                    84:7e:17:d4:86:95:39:9f:be:04:0d:06:ea:00:f9:
                    c3:ba:99:ca:ee:53:7f:24:99:c0:c5:2d:2a:b8:78:
                    df:c2:6f:50:90:fc:73:7b:2d:7f:6f:a7:2b:8f:b5:
                    ec:c4:db:0a:6d:83:92:8d:ad:f8:96:45:92:07:2a:
                    42:a3:0a:5b:48:61:e3:db:fb:92:26:04:d3:c7:9d:
                    35:43:85:49:48:a0:f6:26:78:ae:f9:a2:3f:68:35:
                    d5:26:20:66:66:c7:41:fe:b4:96:5f:0c:db:99:ee:
                    24:08:01:dc:20:b8:d7:65:31:54:58:40:6e:ba:07:
                    ef:e3:52:44:3f:b7:47:ca:cb:c3:d7:b7:f9:35:12:
                    ae:ff:d7:7a:1f:03:57:50:50:f4:08:7e:93:59:7c:
                    29:63:46:eb:4c:2a:d0:fe:ce:31:18:7d:67:79:31:
                    68:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:66:50:7E:2C:DF:D8:4B:A9:F8:2C:83:44:D5:36:E6:B7:74:25:B6
            X509v3 Authority Key Identifier:
                keyid:FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/AF506F14630811EC97879243C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:df:cf:0e:5a:0d:39:9f:cc:56:40:0c:b1:e9:81:05:e1:2d:
         ac:c3:27:89:db:c9:2c:16:82:49:62:ae:d0:26:1b:93:eb:43:
         69:5d:b8:b1:65:a4:49:16:a5:30:35:51:72:fd:5f:2a:d4:38:
         3b:52:c4:9a:8f:7d:a7:d2:e6:0e:ee:c4:0f:73:da:f8:e2:4c:
         01:17:de:a0:f7:47:de:92:bf:f4:5a:c8:55:3b:97:cc:4e:fc:
         92:49:88:9b:a1:8d:3f:2c:7b:a9:02:b1:3f:3d:74:b7:a9:14:
         0a:65:38:2f:57:ec:d8:6d:10:79:66:10:6c:4c:da:1d:ce:38:
         38:e6:f5:2b:7d:72:84:44:02:23:47:fd:5f:b3:cc:39:94:09:
         a9:d3:b9:13:6d:32:7a:3a:2d:34:02:62:02:43:dd:b9:8f:fb:
         00:ac:36:bd:c0:40:f6:bb:0e:29:1a:72:16:10:47:f3:5e:d3:
         2b:83:83:76:14:56:7a:5c:cc:ec:21:42:d9:ef:7a:7e:a1:e6:
         78:2f:b6:98:9d:a0:34:79:9c:f6:80:e9:07:40:95:54:d2:33:
         ef:ea:8c:4c:a1:ff:12:c5:84:f0:8a:cf:49:f9:1d:92:36:ca:
         bc:58:2a:e6:be:5c:71:6a:73:af:56:2a:9d:a9:52:70:26:b1:
         33:6c:44:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 03:45:26 2024 by rpki-client on console-fra.rpki-client.org