Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/B84C93B4C2BC11EBBE9DCF73C4F9AE02.roa
File:                     B84C93B4C2BC11EBBE9DCF73C4F9AE02.roa (raw, json)
Hash identifier:          dxA+FsX+z/6QO39P8vpv3U7r3ZQVusg7yiQAQgF0Kjc=
Subject key identifier:   8F:DD:42:DF:65:5C:FA:4D:C7:85:4A:DD:14:3F:84:BB:99:70:57:A5
Certificate issuer:       /CN=A9180FA7/serialNumber=1934D30E868C2B62EA79B79826B21CA3EE3F3743
Certificate serial:       0516
Authority key identifier: 19:34:D3:0E:86:8C:2B:62:EA:79:B7:98:26:B2:1C:A3:EE:3F:37:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/B84C93B4C2BC11EBBE9DCF73C4F9AE02.roa
Signing time:             Sat 15 Jun 2024 01:46:36 +0000
ROA not before:           Sat 15 Jun 2024 01:46:35 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     139278
IP address blocks:        103.140.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.crl
                          rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1302 (0x516)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180FA7/serialNumber=1934D30E868C2B62EA79B79826B21CA3EE3F3743
        Validity
            Not Before: Jun 15 01:46:35 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=666cf27b-ba15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fe:d7:bc:7f:b9:4d:a8:68:54:dd:0f:9e:b5:
                    3b:11:81:b0:c2:c8:2f:e3:86:f4:c3:97:85:26:03:
                    43:ed:c0:e5:ee:e7:07:9e:a3:c5:eb:e0:3f:21:1a:
                    e0:d3:ba:4d:7e:b1:71:32:fd:46:fe:3a:27:99:d4:
                    a3:58:0b:9f:dc:93:2d:9f:03:d2:1b:ff:5f:19:3c:
                    5e:ef:2f:01:64:6e:27:97:08:82:58:2f:58:38:0e:
                    eb:81:4b:71:10:ce:2c:83:e5:b5:c1:be:0b:04:59:
                    c5:fa:12:6d:ec:d5:c1:73:b8:19:c7:a9:39:ae:ee:
                    a9:a3:f1:d2:2e:fc:05:89:50:b3:5e:23:18:92:7f:
                    3c:70:61:f7:e4:0b:0b:e8:fc:0d:bc:a4:45:bd:c5:
                    35:92:66:a2:86:b9:2e:6e:cf:eb:d9:1b:f2:73:8b:
                    09:ed:7c:3e:47:28:33:c2:e2:e3:78:65:29:2c:f8:
                    b6:0e:12:e3:e2:d6:d5:bf:e4:9d:e9:f7:8f:4c:89:
                    f7:ca:59:13:e3:2a:cf:ef:bb:93:b9:d5:e9:9f:93:
                    35:bb:fc:1f:28:06:eb:31:45:15:36:57:e6:19:ef:
                    7a:24:05:ae:fb:e1:40:d8:67:29:90:99:d2:57:6a:
                    ea:3a:ab:a4:6a:69:77:63:42:51:14:af:10:19:d9:
                    f4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DD:42:DF:65:5C:FA:4D:C7:85:4A:DD:14:3F:84:BB:99:70:57:A5
            X509v3 Authority Key Identifier:
                keyid:19:34:D3:0E:86:8C:2B:62:EA:79:B7:98:26:B2:1C:A3:EE:3F:37:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/B84C93B4C2BC11EBBE9DCF73C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:2e:3b:03:00:3c:ff:b3:70:cf:8a:78:4e:e3:17:04:84:6b:
         07:40:81:5e:81:ec:a9:fd:73:2f:26:62:22:98:87:3d:22:e2:
         44:b9:c3:6a:3d:2a:c2:7e:82:b7:f0:91:c8:a3:ed:c3:08:14:
         01:17:ad:99:2e:ca:c1:e5:d9:bb:f3:10:b0:d6:23:73:1e:46:
         cc:14:62:12:28:41:48:2b:37:02:c2:12:e1:22:4a:33:db:cc:
         d7:cf:e7:df:c3:07:6f:c8:49:86:8a:7e:bf:ec:d6:8f:4d:aa:
         6e:00:92:d8:d6:fd:b9:6c:33:17:3a:a4:a9:68:09:cf:7a:0b:
         f6:35:0e:27:97:69:d5:e4:b3:ea:cf:a3:1c:21:a3:80:a6:b7:
         f6:1b:78:c2:a9:24:05:fd:1d:54:79:8b:54:48:44:0e:81:7a:
         5a:a1:e4:7a:60:58:f0:50:f4:51:af:21:a8:80:4d:b5:dd:18:
         73:0e:35:20:02:e1:02:ad:7e:25:3d:0e:d8:61:a7:94:a4:65:
         72:6a:9f:08:fd:27:5c:53:aa:a0:92:ef:77:09:67:67:93:05:
         4e:de:7b:a7:09:10:7a:8d:ab:15:07:f7:b1:df:f0:94:65:f5:
         0b:5d:ae:dd:7f:8e:be:ff:f9:2a:30:08:98:1f:a5:d5:57:6f:
         53:da:8c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:43 2024 by rpki-client on console-ams.rpki-client.org