Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/007AE4426C9311EEBEA0EB63C4F9AE02.roa
File:                     007AE4426C9311EEBEA0EB63C4F9AE02.roa (raw, json)
Hash identifier:          GQbESOYUtUaZ94Yc1FDzYQHcOOIJVDWv/UCKcDQ3h8E=
Subject key identifier:   CD:67:11:CD:FA:FD:75:19:C3:8B:9F:7C:88:D4:CE:D2:18:8F:CE:7A
Certificate issuer:       /CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3
Certificate serial:       3A
Authority key identifier: 82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/007AE4426C9311EEBEA0EB63C4F9AE02.roa
Signing time:             Wed 17 Jan 2024 21:19:24 +0000
ROA not before:           Wed 17 Jan 2024 21:19:24 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     135403
IP address blocks:        103.180.48.0/23 maxlen: 23
                          103.180.48.0/24 maxlen: 24
                          103.180.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl
                          rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3
        Validity
            Not Before: Jan 17 21:19:24 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65a8445c-9f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:51:f9:66:17:51:1f:e0:e2:ee:1d:ad:41:64:
                    84:df:bf:04:4d:6d:6f:82:db:1a:df:f7:74:6a:3c:
                    c9:f4:00:6d:c9:ae:ab:46:b4:85:83:ca:72:ec:e1:
                    29:4f:03:84:6e:1b:a3:86:da:54:2b:4d:6d:e1:89:
                    55:6a:95:5b:8c:e0:0c:3d:fd:b2:79:3f:e1:90:92:
                    3a:d2:cb:65:46:37:d1:a0:98:63:51:c3:81:e6:ea:
                    f9:f7:f0:5f:31:3b:6a:5d:b9:fe:28:67:ef:c0:a3:
                    42:cd:7c:8b:d5:07:a7:8e:b5:43:52:e8:5b:cb:c1:
                    10:8b:6a:39:db:e0:30:0a:79:9f:85:37:f5:ad:55:
                    2b:63:11:1f:fb:64:9b:fb:01:e9:46:10:4b:be:d3:
                    88:f3:66:c9:c9:3b:df:78:cf:6c:8d:fe:8c:98:9a:
                    0d:e9:47:a9:c0:7a:9a:b6:7a:2f:8c:77:fd:15:89:
                    b0:3b:0e:48:3d:cc:0e:de:f8:e9:f5:a6:8f:34:3e:
                    36:c4:f7:12:e9:c3:c7:1c:4a:92:f0:22:88:56:f5:
                    90:18:39:d8:75:41:e3:91:39:00:69:f3:53:59:9d:
                    c1:d0:4a:12:08:1c:00:6a:ec:92:09:c0:61:20:59:
                    39:48:23:3c:4f:e4:a6:e5:4e:35:38:e2:92:40:6b:
                    70:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:67:11:CD:FA:FD:75:19:C3:8B:9F:7C:88:D4:CE:D2:18:8F:CE:7A
            X509v3 Authority Key Identifier:
                keyid:82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/007AE4426C9311EEBEA0EB63C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:93:45:f6:8a:9e:dd:16:61:9f:5e:fb:fc:25:63:b5:1b:1e:
         1e:02:83:42:3e:12:ed:f7:e4:9d:9c:08:21:a0:a6:82:a8:e0:
         fa:e9:80:17:7b:1c:84:9f:97:55:9a:06:65:df:57:36:d5:d3:
         76:d6:0a:58:08:ec:d9:5f:24:1c:0e:60:ab:3a:18:3d:33:15:
         07:cb:6e:9b:80:1e:2d:e1:73:5c:2c:c0:d9:f1:59:8b:1e:e0:
         71:1d:1b:c5:dd:e0:3c:bf:fc:b3:46:57:d2:43:f1:58:6a:ca:
         58:f3:c7:f0:5d:29:b2:55:d3:5b:86:b3:5a:34:ea:f0:08:a7:
         8d:2b:a1:65:6e:d7:15:ef:bb:6b:e3:73:63:06:e8:43:2f:52:
         d9:b5:f0:01:f1:b4:a2:6f:a5:b2:e8:f6:99:a3:45:ab:bf:a6:
         db:41:93:6a:10:c2:08:20:53:65:96:8e:88:b4:c6:1d:1e:78:
         e3:20:c0:4b:0b:c7:83:49:6f:8d:e8:8e:03:bf:e5:46:62:cf:
         07:20:86:3f:e9:f7:0e:72:10:e3:42:52:46:ee:26:26:40:66:
         c2:0e:dc:3d:cc:68:f2:05:43:cd:90:2b:06:49:7c:ca:39:32:
         eb:ae:1d:33:38:d2:53:0e:99:75:14:42:8f:1b:b6:8d:a7:ba:
         be:9e:10:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:55 2024 by rpki-client on console-fra.rpki-client.org