Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/8D0DD6C2690811EFAC6DE109C4F9AE02.roa
File:                     8D0DD6C2690811EFAC6DE109C4F9AE02.roa (raw, json)
Hash identifier:          xN0yNaxvlpy2+KQ9qQxtfIWfCyAMMfjKaJ5DUH0Cm+A=
Subject key identifier:   82:DD:FB:47:98:F0:CD:F3:01:97:10:34:67:D9:E8:16:B9:8B:1A:A0
Certificate issuer:       /CN=A9130395/serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
Certificate serial:       0700
Authority key identifier: 62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/8D0DD6C2690811EFAC6DE109C4F9AE02.roa
Signing time:             Mon 02 Sep 2024 08:51:32 +0000
ROA not before:           Mon 02 Sep 2024 08:51:32 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     140586
IP address blocks:        103.82.230.0/24 maxlen: 24
                          103.82.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl
                          rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1792 (0x700)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130395
        Validity
            Not Before: Sep  2 08:51:32 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=66d57c94-c708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f5:6e:13:af:d0:e4:c1:34:40:34:82:35:6e:
                    72:c6:cd:39:66:15:5d:c1:36:56:74:36:e3:1f:cf:
                    ce:5b:c4:75:aa:b0:f2:2b:85:6b:24:d1:3f:d5:47:
                    f6:ee:8c:3b:1b:25:fd:55:f7:29:e2:33:c9:48:2b:
                    ef:de:d2:26:2d:30:e2:1a:18:8e:fc:78:b9:cf:73:
                    30:cc:fa:6a:1d:54:91:76:97:0d:93:25:fc:cc:64:
                    95:23:1e:7e:92:23:6a:43:fc:cc:17:60:41:e6:38:
                    89:40:6c:e8:6a:fb:e6:a1:f2:de:fb:e5:2a:bf:a9:
                    a4:bf:ee:7e:86:04:c6:d4:f8:61:a8:f8:92:4b:a9:
                    69:ae:07:9e:2d:f9:68:e0:66:a9:8a:ea:43:09:c2:
                    d9:e9:de:be:fb:d4:f6:8a:04:78:cc:da:a3:66:21:
                    6b:e1:eb:9e:e2:fb:cc:cc:77:51:be:2d:b9:81:f8:
                    55:2f:e7:bd:ce:6a:34:0a:24:e4:c7:69:87:e7:73:
                    d0:05:55:79:0e:08:56:7f:0c:b2:c6:34:0f:3d:be:
                    31:be:ae:c6:ce:d1:ff:a0:38:93:63:35:92:9d:0f:
                    f9:3c:46:79:fc:08:0e:af:59:1a:1a:82:93:c6:2e:
                    72:79:12:64:ae:b4:3f:14:14:25:14:3b:6c:60:2e:
                    38:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DD:FB:47:98:F0:CD:F3:01:97:10:34:67:D9:E8:16:B9:8B:1A:A0
            X509v3 Authority Key Identifier:
                keyid:62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/8D0DD6C2690811EFAC6DE109C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:04:aa:18:50:e0:63:0f:36:f1:6a:0e:76:e4:76:28:12:fb:
         62:e7:76:8e:f7:79:88:68:1d:15:1a:98:e7:3f:18:2a:b3:fa:
         eb:53:1f:6b:b4:0b:42:ff:6c:84:c8:2e:66:07:63:59:a7:d3:
         e4:14:1a:59:2c:13:eb:b8:a5:f1:57:2b:9a:31:0d:a3:0b:9e:
         11:e2:dc:2b:ab:ed:d4:0b:52:72:3d:ee:88:42:41:f3:ac:c3:
         c4:8d:5a:a3:9a:34:e3:a7:d3:63:16:82:57:a6:83:80:af:41:
         ec:ac:a2:47:ee:af:f9:5e:b9:2b:7f:01:60:a5:26:77:64:ec:
         d0:00:b2:f3:75:fc:88:70:8b:bc:05:78:37:e2:0e:ef:ec:e9:
         cd:83:3c:a9:7a:2d:cd:75:d0:ca:db:8e:0b:cf:70:c5:ce:4a:
         78:89:62:62:57:87:d2:92:64:11:72:e1:aa:db:f4:57:b8:79:
         46:ff:69:f2:5b:f3:b0:b0:45:d9:f2:7a:d3:c9:81:ab:59:d4:
         a1:78:34:07:9b:9f:a8:b3:6a:c5:7f:b9:f8:97:d4:38:ae:46:
         ef:34:53:ea:80:bc:ef:56:30:d9:50:ad:99:92:19:a7:52:72:
         96:84:1e:d4:10:83:0c:f1:14:9c:8b:39:c0:0e:c1:8c:e8:f4:
         25:88:67:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:03 2025 by rpki-client