Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/274A12F696FD11EF88F06237C4F9AE02.roa
File:                     274A12F696FD11EF88F06237C4F9AE02.roa (raw, json)
Hash identifier:          yMa9anpM1Fx5awM2ELLejmDtWuOQ4e92GvLkjwBL1Wg=
Subject key identifier:   BC:41:75:7A:CC:C8:81:9C:4D:10:EE:13:11:12:06:7A:CB:F8:81:0D
Certificate issuer:       /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
Certificate serial:       045E
Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/274A12F696FD11EF88F06237C4F9AE02.roa
Signing time:             Mon 25 Nov 2024 00:03:20 +0000
ROA not before:           Mon 25 Nov 2024 00:03:20 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     26548
IP address blocks:        103.175.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl
                          rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 00:09:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1118 (0x45e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149FAB
        Validity
            Not Before: Nov 25 00:03:20 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=6743bec8-85b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e9:20:4d:0d:48:40:d5:b5:c2:95:ac:fd:bc:
                    51:8d:ac:8b:51:1a:52:81:39:12:b6:03:ac:84:4c:
                    4f:52:98:ba:92:2e:2b:e8:b4:00:67:58:7c:5c:79:
                    b9:31:f8:38:7d:59:a8:89:1c:5c:ad:b0:57:c9:0a:
                    77:0e:8b:c1:06:16:d6:f7:a4:9e:29:9d:57:cf:f2:
                    54:2d:d0:f4:d5:28:06:d8:14:33:9f:89:7d:d3:7c:
                    b8:2c:03:8e:93:20:bc:b4:94:68:55:d9:3a:d2:da:
                    a7:09:dd:a7:da:f7:11:b4:d2:e9:70:ac:88:59:b4:
                    95:54:ae:1f:5e:4c:64:53:80:a0:35:d6:1f:df:7e:
                    54:b5:51:ba:c1:db:7f:c8:61:25:60:a4:4d:72:7b:
                    ce:ba:95:a2:74:8d:07:e3:72:06:f2:8b:79:cc:26:
                    c0:0f:1f:1a:69:39:77:20:a9:49:58:19:eb:bb:d3:
                    43:ae:cc:f2:8e:1a:45:88:96:03:4c:10:8e:00:4f:
                    f2:a7:af:87:80:2b:4d:61:dd:5d:71:a2:be:4e:07:
                    79:1c:0a:37:7c:52:17:b4:9d:4c:ff:d4:e3:35:78:
                    ba:97:01:6a:6f:ba:a9:ab:9b:12:b0:4a:29:3d:75:
                    8c:a0:28:3e:1d:21:26:33:d4:59:8a:fd:dd:be:ae:
                    42:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:41:75:7A:CC:C8:81:9C:4D:10:EE:13:11:12:06:7A:CB:F8:81:0D
            X509v3 Authority Key Identifier:
                keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/274A12F696FD11EF88F06237C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:6b:c1:52:60:19:a6:59:bc:b9:a9:39:98:29:42:e2:25:ad:
         17:3f:b5:03:77:ac:d3:fd:88:73:79:8b:3c:d1:d7:25:e2:4a:
         2c:c9:af:8e:0f:9c:0e:18:28:44:df:e0:11:14:3e:18:d2:eb:
         d2:a8:b9:f0:8f:34:f1:d4:c5:af:ea:4a:b4:6b:d5:c3:b7:72:
         bd:4d:f1:81:c2:55:8a:34:3c:d0:f4:c0:c2:a9:10:53:7c:7c:
         51:04:7c:77:e4:2e:41:ef:fb:c9:3d:43:be:13:b9:24:87:32:
         2f:27:67:a1:e4:7d:a8:47:80:c9:8d:a2:26:c9:47:79:73:7e:
         87:89:9b:df:0a:3e:12:a7:9c:f0:93:b8:1c:7c:51:ed:6b:68:
         b3:0e:c2:80:25:ec:fd:41:40:27:39:7b:c7:54:9c:24:c2:c5:
         ce:ac:bf:3a:20:23:34:ff:34:1c:51:ee:c9:c8:6d:9f:02:5c:
         78:eb:2b:b3:19:ea:9f:33:21:09:95:f7:e9:3c:67:92:87:ca:
         57:3d:e9:3d:43:4e:5d:a6:d0:02:b8:ee:d9:ec:5a:10:d2:30:
         b1:25:e8:47:71:98:b6:63:2e:c5:25:58:27:e7:6a:de:77:64:
         c5:2d:8d:54:fd:0b:dc:79:e6:21:a4:eb:d3:ba:54:ff:e8:f3:
         03:3a:71:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:11:55 2025 by rpki-client