Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/A6C94076624711EC9B815772C4F9AE02.roa
File:                     A6C94076624711EC9B815772C4F9AE02.roa (raw, json)
Hash identifier:          NA32Il3ooyRG5ZJzSaQY0C1tJ0UNwEBD0xl7vGAZUYs=
Subject key identifier:   B5:61:C4:D8:3C:05:63:AB:1F:6C:5C:91:1D:4A:3B:90:7C:E2:E9:95
Certificate issuer:       /CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500
Certificate serial:       0570
Authority key identifier: 80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/A6C94076624711EC9B815772C4F9AE02.roa
Signing time:             Tue 25 Jun 2024 00:49:19 +0000
ROA not before:           Tue 25 Jun 2024 00:49:19 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     10075
IP address blocks:        103.136.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl
                          rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1392 (0x570)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500
        Validity
            Not Before: Jun 25 00:49:19 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=667a140f-49b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:95:64:51:8d:8f:b6:2c:7a:40:fd:1b:81:d5:
                    fb:84:1b:d9:fc:40:c2:26:9a:4d:21:da:76:e3:27:
                    7f:13:11:32:6b:01:a5:b5:97:6b:c7:45:e7:aa:a6:
                    c8:82:45:85:15:57:a0:4b:c6:7a:69:e5:02:19:7e:
                    2b:5b:cd:61:1f:f4:4d:5b:df:b7:be:fa:44:0b:3a:
                    d5:e6:2b:58:4e:ba:20:75:7a:8c:43:82:e8:64:bd:
                    03:b2:a5:4a:d3:64:74:ff:29:c8:d4:6f:16:90:eb:
                    e7:2a:48:23:0f:10:72:e8:29:df:4f:55:19:b0:12:
                    9a:33:a5:53:9a:d9:c9:29:ed:56:18:c9:94:f6:16:
                    57:6d:0e:c6:46:d9:f3:43:df:fd:82:19:5f:d9:48:
                    55:12:48:9a:84:f6:89:2a:11:74:20:17:09:25:42:
                    bd:de:86:3c:23:ee:41:db:06:ee:f1:45:35:df:59:
                    ed:8f:41:35:c7:79:56:2d:83:1e:43:32:ac:1b:e9:
                    c8:15:b2:43:9c:4c:af:f1:c7:76:37:32:65:5e:1e:
                    42:c7:18:d1:21:bd:c8:a8:d4:aa:f0:a6:91:68:03:
                    54:75:5f:01:56:96:34:cd:22:93:e3:4a:77:e7:05:
                    d2:87:e2:e2:52:f4:d3:4a:55:7c:fe:d5:eb:50:27:
                    30:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:61:C4:D8:3C:05:63:AB:1F:6C:5C:91:1D:4A:3B:90:7C:E2:E9:95
            X509v3 Authority Key Identifier:
                keyid:80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/A6C94076624711EC9B815772C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:57:aa:7d:87:07:e2:d2:95:e0:02:ca:47:03:78:6c:cd:2f:
         66:4d:fa:b6:65:55:93:d0:7f:9b:62:7c:93:7c:1b:9f:3b:1b:
         7b:56:ef:ad:c2:51:a2:b1:34:af:22:73:4e:fc:ab:8b:f1:6e:
         67:30:c2:0d:65:22:0b:c2:45:ef:ee:fe:f6:2e:f9:ae:d9:34:
         36:5e:79:cd:ed:65:3a:ee:af:83:1c:19:53:1f:e8:37:f7:1b:
         af:11:40:03:a9:8f:5a:32:4a:24:85:9f:ba:f9:ab:33:9e:9c:
         e1:72:d2:8a:f5:f7:9d:4b:c0:1d:ef:65:5a:44:98:e6:8e:c6:
         c4:ac:9b:61:2d:22:f9:ce:64:34:2f:94:c4:0e:0a:f5:cc:fa:
         c2:46:49:89:f9:b5:37:cf:7c:5e:cc:57:45:87:a3:27:1e:42:
         a2:ee:a5:43:43:95:7b:f1:9b:12:8e:c2:9e:b5:c2:49:76:a0:
         cd:0e:5e:84:ad:d9:bf:2e:77:eb:a1:00:ec:ab:cb:25:35:75:
         9a:3c:2c:a7:b8:5e:cc:a1:02:86:53:eb:14:e1:2e:a4:06:8d:
         00:f4:6c:85:5c:93:25:b5:0c:55:07:f1:dc:96:86:d1:3a:f0:
         69:11:6b:ce:93:8f:ff:bb:83:c2:2a:fe:86:12:ee:06:5a:5f:
         e6:95:a2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:29 2024 by rpki-client on console-fra.rpki-client.org