Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/F8769F9AA4B111EF8F61B261C4F9AE02.roa
File:                     F8769F9AA4B111EF8F61B261C4F9AE02.roa (raw, json)
Hash identifier:          ag01obMxFpg/O5gJ9bwqUFDlT3J7Wgcr8Z3EtzVjPn0=
Subject key identifier:   CA:B9:A6:97:D6:CD:27:84:ED:62:B7:53:AD:84:F8:EE:DE:7A:EF:C7
Certificate issuer:       /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial:       052C
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/F8769F9AA4B111EF8F61B261C4F9AE02.roa
Signing time:             Sun 17 Nov 2024 07:02:56 +0000
ROA not before:           Sun 17 Nov 2024 07:02:56 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     396073
IP address blocks:        103.172.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl
                          rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1324 (0x52c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
        Validity
            Not Before: Nov 17 07:02:56 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=6739951f-5200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:87:7b:f2:8f:e8:88:6b:b6:b5:7a:5c:02:99:
                    d8:3a:e4:17:59:7c:1f:ab:b9:2a:db:c0:14:c5:c3:
                    b2:4e:61:4c:c7:93:2c:20:2f:09:1e:2e:96:8c:47:
                    f4:87:64:4a:f1:f5:95:87:b9:e7:f0:80:d9:71:b8:
                    c1:93:dc:76:39:78:15:f4:96:a7:5b:b0:0a:73:fd:
                    09:e6:1a:7f:2c:62:d3:97:50:39:1c:fb:c3:ba:33:
                    2f:a9:25:b9:b4:12:13:50:ca:51:25:8c:b9:da:cd:
                    c4:6b:72:b7:c0:29:b2:09:9d:bd:2b:08:48:c6:61:
                    40:ad:c0:fb:e0:45:a9:ce:4e:1b:a6:2e:a8:6f:fd:
                    7d:0f:8e:54:6f:26:2e:5d:ed:8e:67:50:e9:26:51:
                    95:7f:ae:76:e6:e2:85:f8:a9:58:9a:1a:8d:e8:b8:
                    ae:44:fb:76:68:51:7c:96:9c:bb:bc:98:e5:c9:a2:
                    be:6a:aa:97:25:c6:34:90:50:28:e7:79:ca:8d:f4:
                    1f:de:0e:61:6a:9b:26:ea:43:e5:c6:28:81:6a:09:
                    ba:d0:3f:39:77:ab:30:0a:78:80:45:6c:05:06:fb:
                    ed:07:d0:ab:b6:46:88:62:29:c6:ca:15:9e:29:b4:
                    23:ba:92:5c:7e:ec:30:e9:1e:57:07:77:03:70:ab:
                    0c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B9:A6:97:D6:CD:27:84:ED:62:B7:53:AD:84:F8:EE:DE:7A:EF:C7
            X509v3 Authority Key Identifier:
                keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/F8769F9AA4B111EF8F61B261C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:ed:f0:1d:8f:93:40:4e:02:e6:3a:be:54:8b:08:85:ff:94:
         0e:13:9b:cd:77:09:b8:fe:c9:85:93:39:e0:b8:40:6c:f4:89:
         d3:36:19:9a:ec:8c:a0:72:29:4e:74:72:6a:e5:fe:6c:1f:f4:
         43:b0:3d:d9:53:b7:c9:9f:8e:95:3c:8b:95:df:82:a4:5a:40:
         ec:af:07:70:c7:c6:64:34:8c:96:e4:dc:ac:f7:46:0e:e1:b0:
         9d:66:15:69:80:21:df:f2:6e:46:14:b1:27:8b:14:8c:fb:84:
         60:86:b7:d2:41:bf:1a:57:b4:f0:27:e2:1f:8f:08:e4:25:ec:
         5d:f7:71:a8:f3:67:98:2f:e7:96:39:0d:f8:9c:51:4b:85:e5:
         ef:c1:9f:fa:75:80:c7:a2:4a:bd:1b:e4:46:9f:85:64:0f:af:
         62:3e:3b:59:e1:52:31:e6:7c:c3:e1:0f:23:a3:ff:e2:87:d2:
         f1:94:ee:f4:f1:86:f4:0e:23:2f:74:3f:41:89:6a:cd:b9:ff:
         ad:e5:44:2e:1a:85:0a:9e:a3:78:00:e0:ad:12:9d:b9:33:16:
         b1:dd:e7:57:6a:8c:8b:de:8b:58:1b:9f:db:dc:34:53:47:29:
         16:39:50:99:c1:20:c0:a7:a9:d8:63:a7:ed:0f:09:e2:9d:38:
         90:54:bf:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:21:21 2024 by rpki-client on console-fra.rpki-client.org