Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/C44DEE8E584111EE85E40820C4F9AE02.roa
File:                     C44DEE8E584111EE85E40820C4F9AE02.roa (raw, json)
Hash identifier:          3dgzTKNADS6dTaZ4Dns/R7NlRBp8ohyzR8flEwmQcfM=
Subject key identifier:   90:49:1E:40:F5:EA:D1:1D:16:EF:97:75:DB:8A:FE:30:B2:F4:12:25
Certificate issuer:       /CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388
Certificate serial:       BD
Authority key identifier: F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/C44DEE8E584111EE85E40820C4F9AE02.roa
Signing time:             Sun 25 Aug 2024 01:43:59 +0000
ROA not before:           Sun 25 Aug 2024 01:43:59 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     136038
IP address blocks:        103.151.172.0/24 maxlen: 24
                          103.151.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl
                          rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388
        Validity
            Not Before: Aug 25 01:43:59 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66ca8c5f-fc41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a3:4e:79:cd:0f:3a:2f:76:ef:38:9b:25:b1:
                    97:8b:20:78:da:65:43:03:4e:f6:a3:24:d7:28:56:
                    f8:b9:ec:d8:84:bd:cf:97:75:4f:43:b7:f6:07:07:
                    0f:6b:ab:19:32:6a:70:80:fc:bd:5e:23:ef:b0:31:
                    5e:a2:af:f1:40:c2:6a:dd:af:ed:55:51:70:16:67:
                    3f:cb:02:cf:35:3d:05:e4:2d:d7:91:56:c2:01:97:
                    24:62:9b:35:9d:a9:d6:f4:86:56:94:18:99:d1:21:
                    0b:c9:8d:ce:95:ac:10:49:34:b3:3d:07:50:c0:1d:
                    04:67:d7:3e:d9:30:56:21:b6:ba:f2:98:40:8c:86:
                    5b:a5:99:ec:05:c9:6e:b0:9f:91:d2:2e:7c:8e:4b:
                    a1:db:4b:6e:c8:8b:de:c2:c7:7a:1c:d8:71:46:4c:
                    56:c8:bb:14:b7:41:56:21:a3:fd:32:08:bf:c7:a0:
                    ad:8f:55:6e:ab:d3:a0:b8:8f:c0:74:ca:26:8a:f4:
                    f9:35:c8:ab:53:24:76:e9:d8:f4:8b:79:a8:dc:1f:
                    ce:e3:6c:b1:8a:e2:26:bf:fb:89:22:75:a4:01:42:
                    e5:f1:9c:5b:f0:d3:19:63:aa:72:41:eb:26:59:08:
                    72:1d:44:c4:1d:b3:30:64:b9:f2:bc:b0:38:cb:5f:
                    03:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:49:1E:40:F5:EA:D1:1D:16:EF:97:75:DB:8A:FE:30:B2:F4:12:25
            X509v3 Authority Key Identifier:
                keyid:F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/C44DEE8E584111EE85E40820C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:f3:29:cd:c1:31:bf:29:1b:fb:14:77:57:80:87:92:be:33:
         9c:c6:e8:51:1a:a1:79:49:76:96:c8:8d:cc:69:a6:16:2c:83:
         43:84:30:bd:a6:b7:7f:98:94:0b:6c:e7:d0:28:38:d2:32:30:
         77:f5:25:d8:1b:b9:1a:e3:8a:56:ea:ac:ba:63:4b:39:a7:47:
         8d:40:98:92:8e:3d:e3:ba:45:c2:3a:e2:f7:6a:f3:be:28:f7:
         4f:1f:7e:34:3c:f4:90:26:cd:c5:e2:91:0e:e1:96:62:b5:b4:
         c8:58:32:80:b3:aa:00:67:17:19:61:37:41:d9:58:60:56:2e:
         cf:a4:d4:a4:d2:11:aa:24:7c:ee:23:20:7c:8a:9d:87:60:49:
         de:38:f7:c1:2c:8b:81:36:b6:88:5e:4d:45:18:df:c2:4a:ed:
         bb:a2:e2:ae:81:48:1c:3e:72:b1:1c:c9:d0:38:2c:e2:fa:30:
         96:cd:51:00:ee:9c:8c:43:9c:f6:b5:b6:5f:39:21:a0:a0:c4:
         5e:ec:d1:3a:46:f1:b7:81:5b:31:dd:a5:45:74:13:7e:63:c8:
         41:32:df:ce:ab:cc:cf:de:2a:fa:ab:64:b5:3d:ca:55:74:a3:
         2c:3a:03:37:ce:28:c5:86:ba:6c:ad:56:05:47:60:3d:fb:bf:
         05:34:de:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:55 2024 by rpki-client on console-fra.rpki-client.org