Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/819150603F3411EF85BAC749C4F9AE02.roa
File:                     819150603F3411EF85BAC749C4F9AE02.roa (raw, json)
Hash identifier:          vXAV2SBkTLIbHNT/9VeFhe5uaUo3f7QWYs/PlYgCY+4=
Subject key identifier:   64:3E:32:01:4C:47:98:FC:40:6D:D6:9F:85:88:73:27:9E:67:42:01
Certificate issuer:       /CN=A9168126/serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7
Certificate serial:       0355
Authority key identifier: D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/819150603F3411EF85BAC749C4F9AE02.roa
Signing time:             Thu 11 Jul 2024 03:20:22 +0000
ROA not before:           Thu 11 Jul 2024 03:20:22 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     149483
IP address blocks:        103.180.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl
                          rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 853 (0x355)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168126/serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7
        Validity
            Not Before: Jul 11 03:20:22 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=668f4f75-be5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4b:38:d6:e6:e1:c6:74:11:7b:15:bb:06:0e:
                    db:9c:c9:ad:c5:d7:0f:ba:a8:b4:b2:40:fa:a6:fa:
                    49:91:15:56:b0:eb:dc:a3:41:1d:2f:f5:ed:34:9f:
                    16:a3:a9:47:c8:7d:f6:d5:4c:1a:fa:ee:db:4c:49:
                    bb:22:ff:e1:3e:75:86:d7:8a:f9:ac:a0:c2:e2:f5:
                    27:47:0e:4b:b7:c8:6f:24:ba:2e:1c:02:38:1d:95:
                    69:80:f8:c8:e4:53:e0:fa:0a:fd:cf:50:78:05:b6:
                    87:99:5f:ac:8f:ec:56:b7:a3:4c:c1:69:fc:3d:b3:
                    4b:3f:77:f0:9d:73:f2:65:39:21:39:12:73:a1:0a:
                    1f:32:69:15:da:6f:6f:72:09:28:6b:97:c1:81:f5:
                    3d:2b:11:87:6e:cf:35:69:ff:fb:a6:ef:7f:74:a2:
                    ea:d7:82:9f:b9:32:37:a9:99:74:7e:bb:44:c1:a1:
                    c4:3d:b4:49:37:1e:e1:5a:8c:7c:e3:1c:73:2b:36:
                    d9:5a:4c:26:b5:22:9f:9d:f3:c4:aa:87:a5:63:f7:
                    96:4f:82:19:1f:52:1a:dc:a0:df:6e:38:02:78:9d:
                    f0:58:27:57:62:05:55:6e:f8:f4:e2:5c:0b:bc:30:
                    55:fb:6d:a7:3b:de:83:cc:d0:88:17:f7:81:41:6d:
                    58:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:3E:32:01:4C:47:98:FC:40:6D:D6:9F:85:88:73:27:9E:67:42:01
            X509v3 Authority Key Identifier:
                keyid:D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/819150603F3411EF85BAC749C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:b0:8f:84:19:40:1f:a4:2a:cc:4f:0d:71:44:76:67:b5:ed:
         84:e1:2e:da:c4:5a:ad:c4:50:f2:08:b9:5f:38:88:e3:a0:f3:
         e3:1c:84:9e:88:e8:93:8c:e6:85:c6:7f:7b:c7:b9:ca:31:73:
         8c:7b:d1:4e:d5:e8:68:74:d7:0d:ab:4d:58:51:d0:c9:e5:ff:
         c0:01:48:44:6b:40:7e:a0:e2:a5:a1:4d:32:05:b3:21:aa:2d:
         81:15:bb:e4:69:3a:7b:50:09:f8:89:b2:c3:40:e5:b1:38:50:
         64:fe:a5:6f:d3:49:c1:0c:61:89:06:29:3f:1b:15:8e:22:77:
         4f:db:bf:e4:23:53:7b:67:70:00:ba:82:b1:7a:03:1b:17:03:
         5e:f0:b8:3b:21:a1:5b:a3:7f:1f:f1:7f:06:a7:c2:35:aa:f4:
         7e:e8:47:fb:f9:cb:3f:86:bd:3d:eb:a4:f1:c3:c8:7b:08:71:
         b6:fd:11:b7:1d:f8:16:7e:3b:4b:1d:86:44:81:54:43:2a:b6:
         b3:74:3b:11:ef:12:e9:f5:06:8b:e3:45:91:7f:61:e8:f6:21:
         e4:ec:25:36:70:5b:e9:e0:1f:2a:49:5f:fa:fc:9a:1d:5f:dc:
         59:39:e1:85:75:cf:7e:70:f9:36:e9:ab:27:e9:2a:dc:b7:ba:
         c3:7e:84:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:38 2024 by rpki-client on console-fra.rpki-client.org