Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/B6C75D94084711EEB760A583C4F9AE02.roa
File:                     B6C75D94084711EEB760A583C4F9AE02.roa (raw, json)
Hash identifier:          oZyUncr+V1VDeenInWB5+uoD9bagI701mEfkjI7iiLs=
Subject key identifier:   99:A0:C7:DD:36:A5:C8:CF:0B:28:16:79:C6:08:48:E5:E2:7F:7F:68
Certificate issuer:       /CN=A9178E49/serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4
Certificate serial:       081E
Authority key identifier: 2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/B6C75D94084711EEB760A583C4F9AE02.roa
Signing time:             Fri 06 Sep 2024 21:41:41 +0000
ROA not before:           Fri 06 Sep 2024 21:41:41 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     139008
IP address blocks:        103.152.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl
                          rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:30:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2078 (0x81e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178E49/serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4
        Validity
            Not Before: Sep  6 21:41:41 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66db7715-f753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:32:43:7d:79:4f:2a:29:b6:1c:74:c7:bb:d4:
                    63:ac:6b:b8:6c:1c:19:d4:2c:85:45:9b:06:5b:c2:
                    15:72:20:73:56:0d:14:57:81:b3:d1:35:54:81:c1:
                    1e:e6:ba:48:77:45:98:2a:6d:b3:b4:38:5f:0b:2c:
                    a9:8e:50:78:d3:c2:45:43:b8:02:1a:a4:31:1c:73:
                    a2:43:66:e0:0f:c2:e6:72:ec:b1:e9:d4:f0:f9:c3:
                    70:6a:fa:9f:1b:d3:91:00:b4:61:aa:a2:5b:e2:64:
                    f3:60:68:39:87:18:83:06:9f:b2:bb:4a:cb:e4:51:
                    df:04:e9:ee:f1:b0:5f:f0:f2:8e:58:ac:87:a4:83:
                    b7:36:25:c3:3f:2b:ce:0e:1f:6b:3b:95:87:d6:dc:
                    d5:3f:24:f8:f6:d5:f3:5d:b3:f6:df:33:bd:0e:9f:
                    76:61:f0:1c:64:5c:d0:ad:20:7c:ea:71:4e:ed:84:
                    e6:62:98:b6:12:43:2a:f4:64:e2:1c:6d:e7:25:a4:
                    84:35:62:c6:3b:ef:86:40:9d:39:e1:49:ea:ed:fc:
                    20:00:d7:bf:74:8d:c1:ef:6c:df:b0:11:c7:df:5e:
                    da:b9:b4:bd:cf:14:2d:be:1a:05:43:bb:dd:89:81:
                    c5:22:d5:4c:7a:2f:fc:96:e6:28:54:19:d6:40:7e:
                    09:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A0:C7:DD:36:A5:C8:CF:0B:28:16:79:C6:08:48:E5:E2:7F:7F:68
            X509v3 Authority Key Identifier:
                keyid:2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/B6C75D94084711EEB760A583C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:28:24:0c:a2:3b:40:3e:b8:39:5a:b6:f7:84:55:d6:d3:88:
         c9:79:ce:34:d5:0a:f8:f5:49:9c:af:b6:39:1d:c1:6f:47:e2:
         b7:97:f6:ef:a1:16:df:2f:de:d4:65:fd:92:a2:97:20:60:a7:
         32:df:0f:57:26:3c:fc:a8:c2:56:00:e0:df:57:f2:b5:cd:5f:
         cd:45:9f:a4:55:86:8f:f2:c3:95:c5:d5:81:94:ba:b0:55:8d:
         2e:ff:fd:78:63:18:e1:74:b5:de:38:6b:6c:e2:f1:2d:96:58:
         77:45:2f:29:a9:b2:5e:b9:af:70:ae:f8:81:08:33:bb:4a:6f:
         cc:b3:87:dc:e5:3e:68:89:1c:eb:79:3d:bd:29:ec:a5:a0:ed:
         86:c5:d0:ee:1d:5c:ce:e4:09:dc:fc:2f:b5:ee:bd:45:98:8e:
         a2:ff:b7:66:6f:34:11:8b:8d:07:a8:b1:60:7d:43:4d:e6:33:
         6a:d6:20:9f:4a:78:9b:27:df:47:f4:23:05:a3:73:94:50:e6:
         63:9d:f2:04:a5:b5:1c:bf:06:72:48:e1:77:52:58:5d:0f:d1:
         be:e5:c0:81:98:ed:0d:aa:9f:5f:4a:66:5b:2a:01:f0:7a:f6:
         fe:51:bc:05:eb:cd:23:fe:0f:b1:9c:ab:f2:5a:fd:58:f5:e5:
         5a:22:af:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:09 2024 by rpki-client on console-fra.rpki-client.org