Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/479B58B21EC111EF9258717EC4F9AE02.roa
File:                     479B58B21EC111EF9258717EC4F9AE02.roa (raw, json)
Hash identifier:          28zunSVd7ij9ph2zm21XD25WtWKX4mVPocMiVSGH248=
Subject key identifier:   36:2E:5E:7B:DE:BE:27:47:7B:D6:8C:6B:51:68:05:47:62:68:AD:56
Certificate issuer:       /CN=A9152B13/serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE
Certificate serial:       05
Authority key identifier: A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/479B58B21EC111EF9258717EC4F9AE02.roa
Signing time:             Thu 30 May 2024 20:20:25 +0000
ROA not before:           Thu 30 May 2024 20:20:25 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     4049
IP address blocks:        103.108.176.0/24 maxlen: 24
                          2001:df4:1300::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl
                          rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Oct 2024 04:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152B13/serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE
        Validity
            Not Before: May 30 20:20:25 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=6658df89-0a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0f:6c:da:75:07:1d:87:a9:7c:a3:b8:6c:9f:
                    0d:21:00:db:79:f9:c8:90:c1:80:64:08:d1:95:62:
                    ac:49:79:f7:a1:d3:2b:7d:7e:21:eb:e9:b9:2a:48:
                    9a:16:fc:bf:8f:9b:17:07:77:b8:43:5d:de:48:7a:
                    af:d4:44:4e:52:d7:ca:0b:24:3d:30:e6:8b:83:dd:
                    16:98:3d:c4:9c:fc:cb:01:40:58:d8:d3:1c:47:2b:
                    3e:e6:9f:b0:43:15:f7:ef:00:07:80:83:a7:a2:f0:
                    13:ee:4d:08:56:bb:be:56:61:ed:f8:37:61:27:be:
                    ab:9b:08:7e:6a:b9:7e:0f:03:ed:fd:67:b0:01:d2:
                    0b:f3:29:a5:8b:3b:15:ad:94:32:c2:93:d7:bb:02:
                    7e:47:9c:96:55:1a:9b:43:3b:fd:ea:ea:d1:a9:5b:
                    31:47:4d:d7:0a:91:80:bc:94:55:ff:e7:ca:28:ea:
                    1a:7c:e8:66:e3:37:47:ee:83:be:4e:39:0f:a4:7a:
                    13:c9:bc:a8:4f:f8:85:2c:3b:f5:7f:f3:7a:40:98:
                    15:a8:98:5e:8b:90:fa:25:45:40:2a:af:fa:39:18:
                    63:a5:32:f9:12:51:19:93:49:19:52:29:f3:29:3d:
                    a8:c8:00:88:7c:9e:6a:0b:f7:ce:3e:50:33:46:2d:
                    34:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:2E:5E:7B:DE:BE:27:47:7B:D6:8C:6B:51:68:05:47:62:68:AD:56
            X509v3 Authority Key Identifier:
                keyid:A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/479B58B21EC111EF9258717EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.176.0/24
                IPv6:
                  2001:df4:1300::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:f6:73:00:53:e4:31:fc:f1:03:2b:a3:c2:72:d0:2e:d1:1d:
         6f:70:8d:3d:54:16:42:ed:49:8f:23:52:3f:74:8f:57:dd:7e:
         d1:ee:30:3f:cf:df:b2:05:3c:ac:b4:a7:e8:3c:7d:14:03:f2:
         86:0a:b4:41:c6:89:0d:d8:dc:87:55:ad:54:7e:9d:f0:7a:b2:
         77:48:71:db:70:2e:3a:00:5e:a8:a0:e8:13:d9:73:78:79:f8:
         bc:89:f5:c4:2e:66:68:33:84:e3:48:ee:15:ba:03:a8:56:40:
         39:43:24:7f:7e:11:c1:e7:b7:68:52:cc:52:c0:56:c1:79:87:
         4d:ef:c9:c2:76:1c:b1:7b:9d:ba:3f:4e:17:75:29:04:66:a9:
         cf:19:4c:b2:cf:aa:99:ec:4c:3e:19:72:82:5b:23:c7:a2:e5:
         a5:4a:2e:c5:c9:e1:c8:a8:e4:69:1a:21:26:2c:11:5f:d9:3d:
         3c:66:a9:0a:11:18:25:b4:9a:de:ed:f3:35:71:ab:79:5d:b2:
         bf:b5:93:40:75:34:e2:95:4e:24:33:b4:78:83:10:84:d7:6e:
         83:d7:d3:4e:9d:c3:bc:f3:3c:71:8b:d8:a3:f9:78:54:5b:c2:
         f4:b2:da:e4:96:4b:79:dc:a1:9b:39:46:49:65:91:9e:0a:14:
         ac:6e:70:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 06:45:46 2024 by rpki-client on console-fra.rpki-client.org