Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/10C5553891FB11EFB901C22CC4F9AE02.roa
File:                     10C5553891FB11EFB901C22CC4F9AE02.roa (raw, json)
Hash identifier:          v8TD9OsqqUAKPcuAZeMff5sjhWiIKpMzGXGCpndoG2I=
Subject key identifier:   1D:51:5C:0F:53:D7:8A:AE:60:30:79:22:73:98:99:53:F7:F9:98:E2
Certificate issuer:       /CN=A9153944/serialNumber=0BA07A8BD53C2E1FFFF4A24505C43404549509FE
Certificate serial:       08
Authority key identifier: 0B:A0:7A:8B:D5:3C:2E:1F:FF:F4:A2:45:05:C4:34:04:54:95:09:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/10C5553891FB11EFB901C22CC4F9AE02.roa
Signing time:             Thu 24 Oct 2024 11:29:01 +0000
ROA not before:           Thu 24 Oct 2024 11:29:01 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     24440
IP address blocks:        103.150.105.0/24 maxlen: 24
                          202.70.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.crl
                          rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 05:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153944/serialNumber=0BA07A8BD53C2E1FFFF4A24505C43404549509FE
        Validity
            Not Before: Oct 24 11:29:01 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=671a2f7d-3a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ff:c2:83:92:43:6d:05:90:f2:67:04:23:b4:
                    9a:2c:1c:c1:bc:f0:49:a1:32:28:54:ff:8b:5d:91:
                    50:ec:45:30:30:9b:53:e6:29:c9:1a:d0:e2:62:c0:
                    ee:65:40:bb:58:c8:7f:24:1f:c8:a8:dd:46:44:0a:
                    3f:a0:75:aa:5d:7a:41:9e:87:fe:7e:f5:65:fd:fe:
                    e6:8f:1c:13:c5:96:be:dd:da:c0:0c:b6:ba:87:91:
                    8a:b5:cf:8f:87:4f:21:af:7e:2f:46:7c:4b:be:3e:
                    c2:ee:a1:87:d0:5f:74:c3:47:e9:5c:3d:70:21:a4:
                    dc:0c:90:fd:7b:33:9f:01:f0:a4:57:e3:f5:be:ed:
                    58:6f:c3:17:45:20:bc:46:ff:e5:21:a7:2e:18:28:
                    88:e3:72:15:a8:c9:5a:d4:bf:66:b4:65:10:83:fd:
                    85:43:fb:7a:78:04:88:66:f2:ef:63:90:89:fb:1a:
                    31:de:b9:ec:1a:3c:74:7c:ed:13:22:0d:d0:11:c6:
                    73:5c:aa:ea:4c:a9:a5:3a:33:a4:78:55:f2:e5:fe:
                    5a:61:3f:88:24:4a:61:32:c8:c1:3e:20:3f:5d:8f:
                    a6:66:ab:10:7f:f3:f2:38:19:c8:c7:51:c5:ce:c2:
                    2a:44:5e:af:3e:c0:c3:23:00:fa:ea:20:38:f2:33:
                    de:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:51:5C:0F:53:D7:8A:AE:60:30:79:22:73:98:99:53:F7:F9:98:E2
            X509v3 Authority Key Identifier:
                keyid:0B:A0:7A:8B:D5:3C:2E:1F:FF:F4:A2:45:05:C4:34:04:54:95:09:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/10C5553891FB11EFB901C22CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.105.0/24
                  202.70.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:59:8e:71:37:ff:c9:03:af:1d:ad:39:d8:dc:13:c1:8c:ad:
         05:7a:47:9a:5b:34:b7:98:a0:bb:7b:44:2e:b8:cb:af:26:84:
         e8:a4:84:ef:ca:b1:d7:7f:d7:82:81:c6:cb:5f:0c:66:55:b0:
         6a:20:28:ac:0d:42:53:5b:9f:cf:78:51:f7:3d:b4:e4:92:b6:
         f2:8a:64:a8:95:42:c5:9c:e6:ba:6a:7d:9f:01:0d:a3:c1:06:
         cb:0d:d1:9a:cb:dc:31:66:2d:07:6f:47:45:79:91:27:9f:23:
         8b:56:43:6a:03:7e:eb:f3:6e:1c:91:4e:57:24:4c:4b:3f:7a:
         06:44:9b:e4:22:54:59:23:2a:aa:9c:a2:53:a8:f5:80:a3:22:
         c2:76:28:59:45:14:47:9e:0a:41:0b:c5:d6:13:c9:b0:64:bb:
         25:8f:71:00:9d:77:93:a1:3f:33:95:8d:98:df:8e:03:50:10:
         77:33:7d:d1:01:54:51:16:2a:c6:4d:f3:e0:2a:71:d8:64:60:
         43:8f:8d:2a:43:9b:7f:eb:ed:20:2f:7a:32:05:cb:4d:d6:78:
         a4:62:7b:42:22:e4:53:28:a4:a3:b5:5b:c9:8f:d8:bf:5c:89:
         d4:9d:eb:0f:75:74:9d:8a:1a:dd:a0:4a:fd:62:66:2b:cb:f7:
         49:e4:e5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:19:48 2024 by rpki-client on console-ams.rpki-client.org