Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/077A609E183911EB9C11C27CC4F9AE02.roa
File:                     077A609E183911EB9C11C27CC4F9AE02.roa (raw, json)
Hash identifier:          lHNUn3qhCDMLjYun5pZyzjQa0Wgz5yYNFudFtXTHv5s=
Subject key identifier:   7B:64:EC:38:40:7F:75:65:03:21:77:3F:4D:3A:27:DA:87:5C:33:6B
Certificate issuer:       /CN=A9180758/serialNumber=D0A3A69E2AC10C2C1053F72F749947EC22B9C3CD
Certificate serial:       0909
Authority key identifier: D0:A3:A6:9E:2A:C1:0C:2C:10:53:F7:2F:74:99:47:EC:22:B9:C3:CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KOmnirBDCwQU_cvdJlH7CK5w80.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/077A609E183911EB9C11C27CC4F9AE02.roa
Signing time:             Fri 02 Feb 2024 21:18:47 +0000
ROA not before:           Fri 02 Feb 2024 21:18:47 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     136933
IP address blocks:        103.146.178.0/23 maxlen: 23
                          103.146.178.0/24 maxlen: 24
                          103.146.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.crl
                          rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KOmnirBDCwQU_cvdJlH7CK5w80.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Apr 2024 21:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2313 (0x909)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180758/serialNumber=D0A3A69E2AC10C2C1053F72F749947EC22B9C3CD
        Validity
            Not Before: Feb  2 21:18:47 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65bd5c37-1f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2e:0f:08:94:ee:f6:a7:6a:b8:b6:4f:c8:35:
                    e7:d5:2b:d8:c8:a2:00:04:06:e7:38:4e:7e:0a:13:
                    c1:43:e9:e7:29:15:b2:61:ae:b6:9a:a4:57:58:40:
                    93:58:34:0c:c4:c1:fe:c6:03:47:23:39:64:d1:da:
                    f8:7f:51:f3:59:d5:e4:db:10:99:93:1e:19:f0:ae:
                    cb:24:fa:4c:6f:76:b6:51:6a:00:f2:89:c7:d8:95:
                    d5:1c:31:d4:04:cf:a2:39:06:72:39:4a:ce:71:48:
                    80:d9:e2:6b:40:d4:b9:1a:d6:e2:4b:3d:a3:2d:70:
                    1d:94:96:ee:aa:22:ed:7f:62:f5:06:2b:39:e8:23:
                    b5:90:79:14:88:ca:b6:5b:34:0e:e4:6e:14:73:52:
                    86:6f:b9:e5:d6:3d:d2:92:5b:27:aa:f7:88:de:37:
                    62:70:08:74:44:95:c3:60:64:34:4e:3c:c4:c7:c8:
                    fc:a7:47:6d:5b:c0:74:27:1e:f4:1d:03:55:42:86:
                    c5:de:b3:f3:36:2e:2a:5e:a6:e0:b4:93:95:6d:2d:
                    09:63:23:62:82:8b:5d:b3:fd:ca:57:c7:4e:f5:ae:
                    63:f8:d2:ff:c9:8b:e0:74:ae:c3:84:0d:57:3f:3f:
                    31:2c:7e:4b:bc:d5:5d:31:ba:61:89:79:05:d6:50:
                    dc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:64:EC:38:40:7F:75:65:03:21:77:3F:4D:3A:27:DA:87:5C:33:6B
            X509v3 Authority Key Identifier:
                keyid:D0:A3:A6:9E:2A:C1:0C:2C:10:53:F7:2F:74:99:47:EC:22:B9:C3:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KOmnirBDCwQU_cvdJlH7CK5w80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/077A609E183911EB9C11C27CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d7:1a:da:93:25:7a:83:68:28:b0:1d:2e:dd:95:17:fe:50:26:
         db:e4:f4:cb:4c:90:c1:36:62:ce:3b:3c:cb:bc:56:aa:37:70:
         c0:f7:3b:63:ce:65:ca:b4:96:5c:40:69:98:4f:1c:a4:24:a0:
         a4:66:43:2a:06:42:c3:7c:7c:63:be:1f:46:cf:26:47:53:f0:
         50:42:32:be:ec:f0:3e:1e:03:ba:3c:d6:77:f1:45:1d:ee:ce:
         10:3a:40:16:f2:93:d1:a1:e3:db:04:0f:32:17:76:28:50:4f:
         b0:e4:58:3e:26:8c:6c:01:8d:f9:df:a3:a5:d3:5b:69:c7:fd:
         b9:f4:05:50:9f:95:9f:f0:4e:33:2d:40:e3:d0:96:7d:e6:fb:
         31:09:ed:68:da:02:10:77:2e:ca:66:ae:bb:50:8d:7d:5c:80:
         69:fb:d6:38:58:f8:80:5e:54:bc:cb:15:e6:2f:91:b4:1f:3c:
         ab:4b:8c:94:41:e9:b6:1c:5c:88:24:09:7b:e5:91:49:47:13:
         23:00:fd:2f:d3:94:9c:37:ff:99:e0:82:8a:5e:f0:1f:d8:fa:
         d7:e5:21:57:89:14:eb:84:e2:6a:f4:21:75:8a:f1:b6:e1:d4:
         30:4e:68:40:a5:d0:74:0b:17:3f:84:1e:c0:e7:2e:dd:f3:5b:
         0c:a3:0d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 22:46:59 2024 by rpki-client on console-ams.rpki-client.org