Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/FDC6BEA491FA11EFA4F0932CC4F9AE02.roa
File:                     FDC6BEA491FA11EFA4F0932CC4F9AE02.roa (raw, json)
Hash identifier:          INAvAHudzPZT0eOcOkMlBnMLdZykePd0YOhNH7KxTi4=
Subject key identifier:   3E:C2:E4:0E:07:8F:CB:7D:23:B8:34:DF:9E:32:01:33:F2:66:F6:0E
Certificate issuer:       /CN=A9153944/serialNumber=0BA07A8BD53C2E1FFFF4A24505C43404549509FE
Certificate serial:       06
Authority key identifier: 0B:A0:7A:8B:D5:3C:2E:1F:FF:F4:A2:45:05:C4:34:04:54:95:09:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/FDC6BEA491FA11EFA4F0932CC4F9AE02.roa
Signing time:             Thu 24 Oct 2024 11:28:38 +0000
ROA not before:           Thu 24 Oct 2024 11:28:38 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     9541
IP address blocks:        103.150.105.0/24 maxlen: 24
                          202.70.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.crl
                          rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153944/serialNumber=0BA07A8BD53C2E1FFFF4A24505C43404549509FE
        Validity
            Not Before: Oct 24 11:28:38 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=671a2f66-ad3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:09:66:89:68:75:92:d0:56:33:b8:70:66:b0:
                    d5:3d:4b:40:67:10:d8:49:0d:9a:c2:24:e4:37:79:
                    e0:32:5b:0e:c2:28:28:92:ad:8f:6d:e9:2b:c7:11:
                    f7:4f:a4:79:bf:be:a0:77:4e:bb:46:ec:9b:9d:36:
                    d5:7c:bf:95:6d:9c:d0:9e:a5:36:47:a7:24:ac:e5:
                    7f:9c:82:a9:dc:50:76:de:fe:bf:db:9c:7c:1c:67:
                    f3:0d:bb:43:50:cf:57:e1:8b:d4:37:9f:b7:e9:db:
                    91:5d:d1:6e:87:ce:c4:49:42:70:18:f0:1a:96:c9:
                    d1:32:dc:10:e5:cd:ae:2d:4e:8c:41:26:0d:dd:ee:
                    4f:8d:52:0c:1a:b1:d4:f7:e1:9e:34:21:cc:b6:9a:
                    1b:68:20:1d:32:27:ce:ae:a9:67:50:21:5a:44:8b:
                    fd:fd:e2:7f:ed:3d:6c:2f:f5:8f:1a:be:19:7a:99:
                    ff:f0:6d:6f:3b:0f:0f:73:33:48:65:03:fc:a8:f1:
                    f5:22:aa:19:79:01:0d:91:d5:97:2a:2b:f8:11:a4:
                    4a:2f:e1:23:fd:ae:98:2a:ba:f7:e1:16:97:5b:cd:
                    18:7f:7b:65:a5:2f:fd:70:be:aa:fe:70:37:c5:94:
                    d9:71:1c:d3:ed:e7:40:30:7b:07:fa:54:de:0d:bb:
                    6a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C2:E4:0E:07:8F:CB:7D:23:B8:34:DF:9E:32:01:33:F2:66:F6:0E
            X509v3 Authority Key Identifier:
                keyid:0B:A0:7A:8B:D5:3C:2E:1F:FF:F4:A2:45:05:C4:34:04:54:95:09:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/FDC6BEA491FA11EFA4F0932CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.105.0/24
                  202.70.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:f7:72:46:5e:35:0d:cb:67:93:1a:d6:2d:27:d5:34:df:83:
         49:ac:ff:76:90:a8:29:c3:7c:dd:25:3b:fb:6e:24:df:8d:39:
         3b:0e:11:6c:e1:f3:dc:b2:42:0a:bf:83:7a:8b:75:6b:f0:80:
         83:a0:3a:2f:83:d5:38:49:8c:7a:66:07:33:83:cd:fd:ca:46:
         d4:0a:73:6c:af:56:9c:27:03:76:d4:d0:ad:c5:fa:c7:d0:b0:
         74:5f:6f:8b:14:71:03:d7:21:3e:2a:40:ba:8b:e0:49:07:c7:
         ca:4c:8b:fe:ed:78:7a:38:e3:7e:0d:a5:c1:97:87:f8:c2:58:
         7b:76:08:eb:e1:23:a3:8b:9e:f5:46:03:03:bb:ef:8f:c7:35:
         39:a2:ad:3e:ac:49:b1:84:b8:b0:89:f4:2c:bd:a7:77:fd:61:
         f1:81:dc:72:81:24:6c:93:9e:92:7d:73:fd:1c:91:56:d6:36:
         a9:5d:4b:9f:b8:11:27:7c:20:1e:ac:67:1d:8c:cf:20:47:e8:
         bc:4f:43:bb:b5:ab:86:f2:8e:91:e4:e4:7f:09:70:e9:7b:31:
         e7:56:77:bf:98:d1:65:ea:56:cf:4b:35:e9:ca:93:35:1f:b0:
         d7:d1:84:12:53:a4:94:dc:bc:bc:38:10:a6:b8:7e:52:08:de:
         fd:c5:e6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:16 2024 by rpki-client on console-fra.rpki-client.org