Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/4E76D152B51411ECB8632A19C4F9AE02.roa
File:                     4E76D152B51411ECB8632A19C4F9AE02.roa (raw, json)
Hash identifier:          pGGWpfbiPGn8WwMdciT4D6WLiykl+fuXJ55aOtSS40w=
Subject key identifier:   8F:7A:78:E4:1E:BD:77:D7:7A:5D:B3:DE:96:7A:05:74:2B:17:82:BF
Certificate issuer:       /CN=A9131067/serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6
Certificate serial:       05B9
Authority key identifier: B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/4E76D152B51411ECB8632A19C4F9AE02.roa
Signing time:             Sat 31 Aug 2024 01:03:34 +0000
ROA not before:           Sat 31 Aug 2024 01:03:34 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     142063
IP address blocks:        103.166.102.0/24 maxlen: 24
                          103.166.103.0/24 maxlen: 24
                          2001:df1:b340::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl
                          rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1465 (0x5b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131067/serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6
        Validity
            Not Before: Aug 31 01:03:34 2024 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=66d26be5-9c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:00:29:c5:35:c6:eb:50:85:42:4f:d1:22:ac:
                    68:9f:2a:bf:20:8c:00:dd:8e:77:e2:9c:c2:68:d8:
                    b0:85:05:0c:fb:32:08:83:5b:d4:12:b0:43:6d:9a:
                    d2:fe:e3:e4:75:c8:09:91:2d:c1:65:c0:03:a8:7d:
                    8c:07:f2:a2:9f:6f:1f:f4:03:94:52:bc:59:8a:27:
                    0c:69:df:7a:29:9f:ce:b6:ab:81:46:36:53:e9:db:
                    43:f2:4e:76:22:e0:40:aa:cc:bf:a6:43:0b:7e:87:
                    44:60:e8:3f:a6:8e:bd:f9:55:5d:62:3a:2d:e3:c7:
                    0c:91:dd:5e:4f:d3:43:38:5e:84:e0:69:1e:0a:77:
                    f9:b4:7a:53:8b:ea:c0:a2:a1:81:e7:24:c2:f0:6e:
                    ac:11:95:45:06:77:b0:6f:f3:4e:3f:a7:49:f7:a8:
                    da:e2:45:5d:c6:4e:ca:a6:8d:dd:85:25:df:89:b8:
                    13:52:6b:90:31:ac:f3:4a:04:d3:a6:6e:ba:2c:f2:
                    b3:2e:8e:01:95:e5:d0:2d:31:42:28:5a:10:8c:a0:
                    b3:5a:c0:1a:41:19:d9:92:fd:6c:a0:3a:3f:0b:21:
                    9e:ba:a4:79:76:be:63:6d:41:fa:9d:c6:4b:00:5a:
                    f8:51:dc:c2:fc:87:33:98:34:c8:d2:fb:91:1a:11:
                    24:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:7A:78:E4:1E:BD:77:D7:7A:5D:B3:DE:96:7A:05:74:2B:17:82:BF
            X509v3 Authority Key Identifier:
                keyid:B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/4E76D152B51411ECB8632A19C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.102.0/23
                IPv6:
                  2001:df1:b340::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:4c:58:b6:4f:60:ef:06:d6:9b:a9:a9:b1:e6:ad:f7:21:fd:
         87:41:b1:eb:d4:22:46:0d:b3:f0:9d:69:10:ac:e7:73:ff:c2:
         1b:fc:1d:41:b3:1b:a6:65:d0:d0:81:7b:f1:0e:32:1c:99:fb:
         b7:83:2e:70:6b:9a:2e:c2:78:b5:c9:0b:3f:f3:79:0d:88:4f:
         cd:2e:da:20:f9:e0:07:dc:ab:b8:8f:42:1d:4b:e4:4f:f4:e9:
         40:b4:09:e5:0f:dc:fe:59:22:11:2d:bd:5a:05:20:1e:29:ad:
         5d:63:a5:a1:56:69:49:3b:b2:2d:22:ca:71:fd:5e:29:bd:de:
         f8:98:d5:9c:62:78:fb:af:10:bb:68:96:f2:62:bf:5e:c6:1b:
         70:0d:0c:21:d6:b1:46:43:0e:b9:38:2b:4d:90:00:7b:cf:2c:
         ba:ad:51:37:46:8f:a9:08:52:eb:13:98:9b:44:49:c7:93:28:
         2e:6e:4b:09:ac:d5:b5:25:dd:a2:29:98:a2:dd:46:a3:c9:78:
         e4:d8:15:01:ff:74:83:c7:e5:9c:66:d2:c6:28:9c:a5:32:c9:
         e2:c3:0a:9e:30:41:54:21:4b:f6:75:a6:87:20:c9:23:2d:ac:
         4d:dc:70:04:9a:ad:f1:69:94:5b:8b:52:79:79:b4:2e:76:4b:
         7b:e1:36:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:23 2024 by rpki-client on console-fra.rpki-client.org