Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162578/25C39ECC7BE811EBB0B1F63CC4F9AE02/B205FB4E98D211EB86B24441C4F9AE02.roa
File:                     B205FB4E98D211EB86B24441C4F9AE02.roa (raw, json)
Hash identifier:          s4yYKdbzD4Qz/eCvBbl+89u0HjoJcUQCLbSASXxUJaE=
Subject key identifier:   FF:F7:39:20:1B:05:6B:BD:59:B2:A8:04:6C:A9:A2:53:AF:48:FC:DF
Certificate issuer:       /CN=A9162578/serialNumber=2D91AD316BC5EEFF7EDC25253834EBE3AD5641BD
Certificate serial:       04FB
Authority key identifier: 2D:91:AD:31:6B:C5:EE:FF:7E:DC:25:25:38:34:EB:E3:AD:56:41:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZGtMWvF7v9-3CUlODTr461WQb0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162578/25C39ECC7BE811EBB0B1F63CC4F9AE02/B205FB4E98D211EB86B24441C4F9AE02.roa
Signing time:             Thu 13 Apr 2023 01:41:57 +0000
ROA not before:           Thu 13 Apr 2023 01:41:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     135391
IP address blocks:        103.136.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162578/25C39ECC7BE811EBB0B1F63CC4F9AE02/LZGtMWvF7v9-3CUlODTr461WQb0.crl
                          rsync://rpki.apnic.net/member_repository/A9162578/25C39ECC7BE811EBB0B1F63CC4F9AE02/LZGtMWvF7v9-3CUlODTr461WQb0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZGtMWvF7v9-3CUlODTr461WQb0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 21:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1275 (0x4fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162578/serialNumber=2D91AD316BC5EEFF7EDC25253834EBE3AD5641BD
        Validity
            Not Before: Apr 13 01:41:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=64375de5-5fc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c5:67:a8:97:df:a4:df:cb:cd:28:bc:3e:e0:
                    9a:fd:74:8f:c4:b4:34:27:73:af:c6:ce:0b:12:4e:
                    49:37:53:bc:07:78:a8:87:ed:50:bd:59:0a:bd:87:
                    d5:64:1b:62:98:cb:2c:44:2e:e1:f2:3c:2a:92:8f:
                    40:9a:d6:cd:04:41:0f:db:e9:b1:8a:6f:01:48:76:
                    6a:27:c6:a3:99:4a:33:bf:71:59:6a:b3:80:5a:31:
                    29:db:1d:f9:9b:05:de:a1:de:a2:62:db:f2:75:a4:
                    e6:a8:96:a6:88:78:87:74:16:dd:af:37:27:f6:73:
                    a1:8e:bd:c1:c6:0d:b1:c3:05:00:ff:76:9c:8a:a3:
                    d0:8f:24:c6:5c:32:26:3c:9f:59:a5:c4:e0:0a:50:
                    cc:32:a4:49:5d:e2:cc:ae:3a:83:7f:00:74:db:98:
                    88:28:90:f0:9c:b3:a1:5c:47:1c:35:ab:6e:07:29:
                    a7:7e:45:33:3b:f3:bd:aa:5a:df:b8:02:3e:05:6e:
                    27:7b:42:78:b7:92:90:e9:5c:b4:43:de:6e:b2:5d:
                    b6:ab:9f:82:ae:be:26:a6:51:26:bc:5a:e3:d0:f6:
                    c8:d0:9e:3a:5e:5b:df:c0:2e:24:e5:ed:a1:db:ab:
                    e9:e9:5d:3b:bc:ff:c2:4e:41:79:16:3c:e8:43:2f:
                    5b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F7:39:20:1B:05:6B:BD:59:B2:A8:04:6C:A9:A2:53:AF:48:FC:DF
            X509v3 Authority Key Identifier:
                keyid:2D:91:AD:31:6B:C5:EE:FF:7E:DC:25:25:38:34:EB:E3:AD:56:41:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162578/25C39ECC7BE811EBB0B1F63CC4F9AE02/LZGtMWvF7v9-3CUlODTr461WQb0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZGtMWvF7v9-3CUlODTr461WQb0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162578/25C39ECC7BE811EBB0B1F63CC4F9AE02/B205FB4E98D211EB86B24441C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:67:51:05:29:90:1d:ef:a4:5e:6b:e8:df:65:51:b0:bc:e4:
         4b:0d:4a:2d:43:63:c8:ea:9e:6a:9d:ac:5e:be:34:3f:90:37:
         21:b6:7a:c8:f4:39:c4:f9:d2:59:93:86:76:45:b6:48:ae:dc:
         0e:43:2f:43:c5:f1:c8:36:5c:c6:06:84:21:3b:9c:ae:58:c3:
         38:85:b4:ec:8b:14:a2:7f:d3:f0:24:16:d8:3d:05:3f:78:d8:
         47:58:99:9d:0d:2b:64:bc:11:7c:29:c4:ad:2b:da:d9:c1:ee:
         76:05:12:5d:db:54:e4:97:87:a3:a8:6c:48:26:51:02:a5:4b:
         d2:09:d3:35:11:23:eb:46:90:f3:b4:1a:87:34:06:06:90:41:
         6f:d2:ab:48:f4:1d:76:e9:8b:84:d7:3d:45:94:7d:cc:24:b2:
         70:67:93:59:11:66:57:5c:2b:fa:2a:eb:75:73:b4:fd:90:b8:
         22:e3:f6:50:10:6e:ef:19:73:9f:8f:3d:ff:57:40:32:22:5f:
         1d:2a:c0:21:66:b7:9c:23:23:60:f5:70:82:c7:17:47:5c:0e:
         19:92:ce:c6:2a:6d:b4:94:83:5e:09:ea:a6:90:a0:ce:4a:a6:
         34:5f:42:c1:4c:b2:b8:cc:2e:35:4b:ce:33:44:7c:fd:86:32:
         4d:c1:c6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 01:20:41 2024 by rpki-client on console-fra.rpki-client.org