Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/B0EBD14E80D111EFABEC5878C4F9AE02.roa
File:                     B0EBD14E80D111EFABEC5878C4F9AE02.roa (raw, json)
Hash identifier:          2dlgj7DItMuHmtFFxfEMPVxDtbkL2wPq3LttfyLou7E=
Subject key identifier:   91:5C:90:DF:05:F3:D4:0B:0E:26:27:E7:99:55:49:8D:F6:8E:F7:E3
Certificate issuer:       /CN=A9171524/serialNumber=C2FC3E1B1B543EBD48DFDA591DC2518224F95B7F
Certificate serial:       01B3
Authority key identifier: C2:FC:3E:1B:1B:54:3E:BD:48:DF:DA:59:1D:C2:51:82:24:F9:5B:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/B0EBD14E80D111EFABEC5878C4F9AE02.roa
Signing time:             Wed 02 Oct 2024 15:19:18 +0000
ROA not before:           Wed 02 Oct 2024 15:19:17 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     141725
IP address blocks:        103.182.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.crl
                          rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435 (0x1b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171524/serialNumber=C2FC3E1B1B543EBD48DFDA591DC2518224F95B7F
        Validity
            Not Before: Oct  2 15:19:17 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=66fd6475-09b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1c:70:be:dd:d8:da:75:48:0a:84:af:93:c1:
                    17:f6:1a:48:dd:70:2c:99:58:ba:c8:a5:53:b3:cb:
                    76:57:d4:c2:b3:b2:1d:fa:7e:57:4c:e6:27:52:0e:
                    18:63:c1:dc:e2:2f:a3:1e:d6:e8:41:ce:84:8e:0f:
                    40:27:e1:52:9a:cc:6a:6d:c6:0e:84:2e:f1:6a:4b:
                    d1:8a:d1:45:d9:7c:0a:9c:14:2d:6f:19:3b:f0:7f:
                    17:c9:f5:05:f2:87:e4:cd:05:15:fb:49:bd:00:a9:
                    78:4a:8f:12:bf:85:04:fb:8e:54:48:55:50:2c:40:
                    07:49:08:0f:57:60:98:85:e4:ba:a0:c7:00:e7:e3:
                    db:57:f7:6b:88:f5:9f:46:d9:cb:74:df:d1:9f:93:
                    f7:e1:1a:f6:13:79:52:1a:bd:b1:a3:84:ed:34:bc:
                    f7:79:6c:14:77:0f:37:b6:11:74:70:bd:9e:2e:7a:
                    8c:b5:43:35:41:9f:01:06:d3:7c:64:fd:fc:bc:7d:
                    c1:1c:3e:5d:34:76:f9:9d:c9:1a:e7:4a:71:7e:db:
                    8f:f0:1c:21:0a:75:28:b9:98:3c:21:3d:32:b4:db:
                    b9:f6:51:27:7d:08:be:88:c1:db:a3:05:d0:a4:d7:
                    29:de:31:88:e6:81:8d:b4:c4:f6:f7:59:f2:0d:b2:
                    7c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5C:90:DF:05:F3:D4:0B:0E:26:27:E7:99:55:49:8D:F6:8E:F7:E3
            X509v3 Authority Key Identifier:
                keyid:C2:FC:3E:1B:1B:54:3E:BD:48:DF:DA:59:1D:C2:51:82:24:F9:5B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/B0EBD14E80D111EFABEC5878C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:18:cd:32:85:e3:c4:5b:83:4d:5f:ef:66:cc:69:41:6d:f9:
         0a:00:70:83:66:24:cc:44:5e:fd:a3:e4:40:88:37:7e:12:54:
         12:30:df:5f:75:16:4d:be:a1:e6:24:6b:49:c3:34:cb:e4:16:
         35:31:16:80:a2:56:45:95:07:c7:77:9d:22:69:e6:fa:fb:0a:
         b1:cc:f0:47:34:9a:e5:9d:ac:54:ad:34:ea:ef:ea:84:0b:c8:
         fe:92:1c:01:2e:82:34:9b:4a:24:b1:5f:37:14:78:b8:2e:82:
         e3:38:ac:46:f7:2b:c2:c8:7a:8a:8e:28:d2:37:de:14:e2:0b:
         76:8b:7c:ea:8d:78:dc:f6:80:b5:60:7d:4d:00:46:2b:f5:7d:
         51:aa:9e:d5:ba:3e:39:94:f9:04:ad:c2:00:d0:cd:29:8e:d1:
         78:a2:35:71:9b:07:2a:ba:a5:f4:ae:ba:09:c1:f8:b9:75:7c:
         31:f6:33:9c:63:f0:15:f1:63:c3:e5:ce:98:de:e0:5b:88:33:
         0b:d5:de:bd:50:c2:c4:8b:87:88:9f:c4:db:86:f8:a0:22:33:
         2c:b7:ba:70:f2:25:fa:ee:73:1c:6c:07:8b:77:f9:ff:6a:91:
         38:89:e7:14:3d:14:8d:8b:33:6d:32:62:fb:0d:bb:4f:50:cf:
         48:79:88:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:38 2024 by rpki-client on console-fra.rpki-client.org