Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/05A179C2B02E11ECA990305CC4F9AE02.roa
File:                     05A179C2B02E11ECA990305CC4F9AE02.roa (raw, json)
Hash identifier:          0ScW7DGAXWsmix/8Yzb69ngaD0iNqJaf2YwWQN6POrM=
Subject key identifier:   1F:AF:F2:D6:BD:D9:34:6E:A4:22:8E:09:4F:3E:CF:7D:3A:61:38:4F
Certificate issuer:       /CN=A914189D/serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105
Certificate serial:       02C2
Authority key identifier: 10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/05A179C2B02E11ECA990305CC4F9AE02.roa
Signing time:             Tue 31 Oct 2023 02:34:01 +0000
ROA not before:           Tue 31 Oct 2023 02:34:01 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     141181
IP address blocks:        103.155.184.0/23 maxlen: 23
                          103.155.184.0/24 maxlen: 24
                          103.155.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.crl
                          rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 706 (0x2c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914189D/serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105
        Validity
            Not Before: Oct 31 02:34:01 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65406798-7084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a3:55:43:9c:0f:7b:6a:ff:28:32:38:e4:d5:
                    58:52:21:7c:00:30:62:20:91:53:2b:53:a7:d5:9d:
                    83:92:90:8e:8d:8d:a4:0a:ea:98:ed:1f:37:a5:65:
                    f7:1a:92:eb:04:ba:11:97:28:42:8d:71:f6:08:9c:
                    0d:14:54:04:5d:aa:ed:4b:c2:b6:87:2b:70:ea:c7:
                    86:e3:66:94:94:80:db:ec:b9:2f:b9:d4:31:8c:72:
                    dc:b9:88:8d:48:d8:69:34:a9:4f:20:97:ae:49:ba:
                    9b:cc:34:26:fc:e6:98:57:5a:a9:76:a8:08:6e:b0:
                    db:b1:98:68:87:6c:da:1a:b3:33:ab:26:25:a0:9f:
                    b8:38:df:8e:d7:19:97:32:9e:4b:72:ff:0d:9b:ed:
                    81:0b:3f:e2:f4:f5:52:85:1a:88:6f:11:c3:19:30:
                    b8:75:0a:59:65:ea:02:11:53:4f:89:16:7d:c7:b3:
                    6d:70:e7:bb:d9:fb:24:5a:57:39:84:1b:0b:1b:7d:
                    52:0c:4a:54:71:31:fb:c3:4a:19:d6:a0:b1:35:a1:
                    85:1e:77:31:9e:8c:3d:cc:97:76:fc:fa:74:eb:4a:
                    3c:b4:87:c2:ef:9d:7c:ba:69:30:3d:ea:95:ea:84:
                    c2:74:32:9a:91:4d:77:cc:94:93:12:d2:53:f7:9a:
                    a1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AF:F2:D6:BD:D9:34:6E:A4:22:8E:09:4F:3E:CF:7D:3A:61:38:4F
            X509v3 Authority Key Identifier:
                keyid:10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/05A179C2B02E11ECA990305CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:9f:d9:90:51:b3:d5:7a:ef:78:27:73:b9:95:01:56:87:59:
         68:66:a4:f3:e8:f7:31:ca:7b:1a:f7:9a:6b:0b:0e:5a:8d:eb:
         0f:be:32:3b:a7:bb:ed:b0:e5:2f:ab:f3:21:24:58:47:50:56:
         ec:05:85:30:ae:65:ee:8f:64:42:d4:a1:25:82:92:7c:97:49:
         75:77:94:b6:56:19:9b:ef:a0:67:3d:98:59:01:21:fb:c8:1d:
         70:c9:64:7f:08:c4:87:1f:d2:75:23:11:fb:22:71:ff:81:c6:
         5e:90:18:99:6f:06:07:53:a0:21:2f:fa:65:df:84:6a:aa:91:
         ff:a7:fe:df:ef:5e:23:21:1f:79:b1:6b:2d:62:63:8f:ab:53:
         8e:cd:2a:3b:aa:96:ef:57:09:c8:97:07:97:25:fd:42:9d:ba:
         20:6b:cd:dc:db:46:ee:99:7d:ef:a4:43:d9:97:a5:c8:09:31:
         a7:f9:ec:ff:88:92:9d:1a:31:d8:98:60:b7:49:13:af:dc:de:
         b7:31:63:c6:c3:47:3f:6e:04:3f:10:39:d4:42:e1:9e:8c:23:
         dc:05:71:b8:2e:f3:ed:68:6f:d4:9c:6a:6a:af:43:91:c5:cd:
         43:ad:7f:85:d8:f7:88:b2:ff:c8:b1:43:25:71:af:dc:a7:07:
         93:02:93:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:21 2024 by rpki-client on console-ams.rpki-client.org