Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/2EBCD6C6CCF311EC86719729C4F9AE02.roa
File:                     2EBCD6C6CCF311EC86719729C4F9AE02.roa (raw, json)
Hash identifier:          erIavO1BEA6yuxW1Ddxiq0YuolkG7uHYxff0nzGvNyU=
Subject key identifier:   44:D8:A0:35:BB:D8:B0:33:D4:6F:AA:BB:E2:75:80:B6:A2:3B:49:09
Certificate issuer:       /CN=A9180386/serialNumber=B83E0AE8F82BFA061E8C4BC7BE73E9B803540D63
Certificate serial:       0283
Authority key identifier: B8:3E:0A:E8:F8:2B:FA:06:1E:8C:4B:C7:BE:73:E9:B8:03:54:0D:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uD4K6Pgr-gYejEvHvnPpuANUDWM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/2EBCD6C6CCF311EC86719729C4F9AE02.roa
Signing time:             Sat 13 Jul 2024 03:24:28 +0000
ROA not before:           Sat 13 Jul 2024 03:24:27 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     135391
IP address blocks:        45.255.124.0/22 maxlen: 24
                          103.65.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.crl
                          rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uD4K6Pgr-gYejEvHvnPpuANUDWM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 643 (0x283)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180386/serialNumber=B83E0AE8F82BFA061E8C4BC7BE73E9B803540D63
        Validity
            Not Before: Jul 13 03:24:27 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=6691f36b-bbe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ca:75:09:35:a6:4b:aa:be:90:ac:5c:ac:9e:
                    45:0b:51:ce:98:a6:e1:18:64:1d:24:ca:93:63:d0:
                    49:37:94:4d:ed:94:3c:07:74:16:86:ae:20:d1:61:
                    2f:83:f3:c6:59:30:4d:53:94:2f:b7:40:32:56:b4:
                    87:1b:10:e3:12:e5:a4:7c:ba:4c:3b:6f:97:50:a6:
                    71:ae:c2:20:a3:42:3b:45:4a:27:2a:cc:5d:4c:a9:
                    14:aa:bf:b4:da:b6:1e:94:da:86:e3:bc:8c:55:d6:
                    74:30:50:8d:f0:0a:e5:95:c0:41:24:4d:63:f2:0d:
                    90:cd:2f:e6:18:fe:60:17:ac:68:91:3a:b4:7f:93:
                    91:75:b7:29:2b:2f:28:bf:ea:63:52:20:39:12:0a:
                    37:85:db:f9:00:63:cd:a7:cc:84:1d:4e:43:0a:4d:
                    2e:cf:43:d5:92:a8:2a:0f:38:28:13:9b:1f:bd:e2:
                    c8:91:f9:13:a1:dc:de:89:8a:64:d3:fa:c3:1a:0e:
                    fd:50:e1:89:c2:8f:22:22:a8:23:79:44:18:bf:a6:
                    0a:5f:da:09:96:e5:25:2b:ff:24:08:1e:87:26:31:
                    be:1b:f1:ab:8d:97:84:59:a1:74:ea:df:75:55:8c:
                    29:12:98:ab:be:a6:87:9f:4b:31:2f:9b:01:df:e0:
                    83:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D8:A0:35:BB:D8:B0:33:D4:6F:AA:BB:E2:75:80:B6:A2:3B:49:09
            X509v3 Authority Key Identifier:
                keyid:B8:3E:0A:E8:F8:2B:FA:06:1E:8C:4B:C7:BE:73:E9:B8:03:54:0D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uD4K6Pgr-gYejEvHvnPpuANUDWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/2EBCD6C6CCF311EC86719729C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.255.124.0/22
                  103.65.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:6d:e8:8b:33:4e:32:20:63:ac:c1:bb:df:d4:21:e5:7c:2b:
         4a:dd:53:a4:7e:27:f0:09:17:34:2a:c6:48:e0:ae:90:a9:db:
         b5:62:92:2c:04:e2:6e:db:6e:b7:b4:96:91:56:f4:69:6f:70:
         27:ea:9b:4a:4c:2b:3e:1b:21:dc:74:e4:26:66:d5:e4:07:f3:
         d4:ec:4e:ef:c4:02:50:57:a1:6c:28:7b:0a:6a:ef:56:1e:2c:
         a4:e8:4f:c0:de:08:18:c7:fc:da:ee:82:99:8c:a3:3b:b1:dd:
         51:50:26:55:4c:20:26:41:d7:c1:66:30:da:a8:db:d5:fa:84:
         c1:ad:ef:12:61:de:dd:1d:5c:95:a5:c4:1e:e5:b4:c8:09:a8:
         32:27:b8:8b:03:1c:ca:e2:00:b4:31:21:d8:c3:ac:d9:63:8e:
         00:b3:ee:76:22:c7:f4:e1:74:59:c9:81:16:5b:d0:16:82:50:
         c6:bc:da:87:fa:7a:68:8c:c8:16:ec:a8:52:0c:61:93:63:aa:
         1f:29:72:fb:19:17:13:57:b7:05:47:ab:f8:e6:bb:c0:1f:cd:
         68:66:99:e8:5a:a8:ce:cb:0b:ad:f8:78:1b:e0:74:d0:66:ce:
         a4:9f:ad:16:c0:99:3e:06:25:0d:9f:d5:a2:1d:e2:5e:f9:5d:
         83:1a:63:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:47 2024 by rpki-client on console-ams.rpki-client.org