Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/B6C75D94084711EEB760A583C4F9AE02.roa
File:                     B6C75D94084711EEB760A583C4F9AE02.roa (raw, json)
Hash identifier:          LstT+eSPsxOVFpV2OMu8Jy/4bTbA0FS/hFEXozEyEvc=
Subject key identifier:   7A:83:E3:84:A3:5B:AF:79:B5:BD:EB:E5:8E:69:15:59:7E:63:BC:A6
Certificate issuer:       /CN=A9178E49/serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4
Certificate serial:       0747
Authority key identifier: 2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/B6C75D94084711EEB760A583C4F9AE02.roa
Signing time:             Sun 30 Jul 2023 21:38:15 +0000
ROA not before:           Sun 30 Jul 2023 21:38:15 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     139008
IP address blocks:        103.152.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl
                          rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1863 (0x747)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178E49/serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4
        Validity
            Not Before: Jul 30 21:38:15 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64c6d846-a937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2a:9a:a1:d0:df:a8:cb:09:68:4d:85:d1:fa:
                    fa:67:f4:e8:b0:e4:a1:cf:86:ec:b7:55:f3:5a:a3:
                    06:4e:ed:8d:29:7a:62:4f:27:3c:63:0e:4e:7c:d4:
                    4e:48:70:68:c1:a8:e2:2f:3b:1f:da:9f:28:d0:3c:
                    d8:45:5e:a1:4d:fe:74:1f:2e:87:11:12:7a:82:a6:
                    b6:6e:1c:71:9f:22:1a:8f:51:0c:bd:3f:d9:ff:5d:
                    08:a3:7f:8a:92:36:14:a2:7d:b8:93:5c:0b:e2:ca:
                    45:f1:e6:58:42:dd:07:54:88:17:f1:a8:c7:9c:ee:
                    8f:fa:88:9a:28:89:29:cc:e1:02:31:5b:43:31:02:
                    ac:dc:dd:f9:99:c3:31:09:57:95:66:a6:38:00:0c:
                    76:65:8d:b9:77:13:dc:cd:c0:d0:90:68:bd:c6:dc:
                    f7:be:c7:56:83:17:fb:4d:0f:81:46:96:9c:d0:e8:
                    ce:de:2b:23:e4:74:1d:f3:81:b4:da:11:02:6a:cc:
                    98:70:c2:17:98:cb:ff:10:e9:52:4d:c9:27:0c:8b:
                    fd:bb:30:68:7e:a7:61:0e:58:16:ee:ff:7d:b5:ae:
                    57:90:12:98:aa:5a:62:6e:07:72:fa:d4:3e:fa:6b:
                    46:d4:c0:d6:4a:e3:90:84:10:d7:f2:03:d6:7a:7a:
                    81:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:83:E3:84:A3:5B:AF:79:B5:BD:EB:E5:8E:69:15:59:7E:63:BC:A6
            X509v3 Authority Key Identifier:
                keyid:2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/B6C75D94084711EEB760A583C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:c1:50:3c:56:ab:df:f6:5d:f5:19:3d:76:d2:09:b6:37:59:
         ba:b2:2e:67:61:1c:3d:e5:99:55:6a:da:7d:be:10:9c:ff:b5:
         df:0f:3c:da:f0:2e:15:8b:3e:9f:ae:25:88:81:e7:8e:ce:e9:
         4e:a0:7c:57:fe:fc:ef:b7:64:ac:77:99:ca:51:7b:e2:2c:d0:
         06:b3:cd:0a:91:a2:0f:8e:19:d1:b3:d4:65:ec:c3:e6:fd:c6:
         0d:19:d8:eb:54:75:2d:34:ce:18:b8:2e:3b:af:74:97:3f:8e:
         e7:df:a8:72:f5:7b:f3:cf:e0:bc:db:77:f8:6d:dd:9a:0e:e1:
         5d:ab:56:ec:1f:2c:85:63:cb:05:dc:c3:06:0b:df:d1:49:ac:
         af:0c:dc:be:73:86:10:af:0e:3c:7f:da:02:ae:0b:5c:59:cd:
         4e:83:73:cb:15:f1:8a:de:eb:9d:53:95:fa:bf:3e:a8:ce:00:
         5e:1e:2f:1e:d2:67:7f:f7:3a:ee:37:dc:ec:1d:64:5e:ce:98:
         5c:24:9b:69:b4:b1:9b:16:b5:ca:4d:0f:6d:fc:08:dd:a2:5a:
         c4:d8:ff:9d:40:f4:86:7f:63:14:fe:b2:40:1f:2e:a9:ac:86:
         25:c8:91:35:df:48:b3:c9:94:8b:c1:89:0a:3c:2f:12:ca:52:
         0a:4e:43:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:16:16 2024 by rpki-client on console-fra.rpki-client.org