Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/625827FC74D811EB99569279C4F9AE02.roa
File:                     625827FC74D811EB99569279C4F9AE02.roa (raw, json)
Hash identifier:          nuHbMZ7jdYXMsw/8MYqt1N+pl2yGg3LZQWJTXeLOE+g=
Subject key identifier:   55:4F:D1:A7:09:48:9D:64:CA:A0:D7:A3:FA:80:00:94:3E:6A:7E:A2
Certificate issuer:       /CN=A9181EBC/serialNumber=BD48BAFA32AD2E93B889CF3E3869AC034A172312
Certificate serial:       0606
Authority key identifier: BD:48:BA:FA:32:AD:2E:93:B8:89:CF:3E:38:69:AC:03:4A:17:23:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUi6-jKtLpO4ic8-OGmsA0oXIxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/625827FC74D811EB99569279C4F9AE02.roa
Signing time:             Wed 04 Sep 2024 23:31:41 +0000
ROA not before:           Wed 04 Sep 2024 23:31:41 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     139768
IP address blocks:        103.149.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.crl
                          rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUi6-jKtLpO4ic8-OGmsA0oXIxI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1542 (0x606)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181EBC/serialNumber=BD48BAFA32AD2E93B889CF3E3869AC034A172312
        Validity
            Not Before: Sep  4 23:31:41 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66d8eddd-685e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d9:89:0b:8d:76:01:69:26:50:be:07:a7:95:
                    4d:a1:b2:7b:46:d9:10:66:2f:d2:6c:f0:7f:32:07:
                    f6:cb:ad:a1:32:c5:7b:5d:4d:1e:fc:74:62:99:2e:
                    b5:c8:7f:fb:7f:5e:14:c1:77:18:fa:28:92:a1:3c:
                    a0:67:4a:32:22:b9:ab:06:70:1e:81:0a:f1:ab:ce:
                    eb:28:c5:2e:f2:71:1e:85:72:1f:95:17:a0:4e:68:
                    56:eb:36:61:61:6f:86:ee:42:5e:62:28:1e:f5:81:
                    82:03:28:ef:37:7b:29:22:54:6b:0a:b9:78:44:b4:
                    03:13:d6:71:0c:f7:e1:8e:20:05:f4:ed:eb:69:a0:
                    01:b9:ec:16:15:6f:8b:ff:4d:ce:3b:8b:fd:7e:35:
                    16:7d:e2:49:3a:de:78:08:88:89:d7:96:26:89:e1:
                    a8:67:fe:a7:4b:63:86:fe:7c:92:ee:bb:e2:88:98:
                    89:31:6f:ac:cc:3b:25:6e:d5:0e:6b:e1:51:66:e0:
                    26:2b:16:c4:ea:c9:cf:75:25:80:85:66:ec:a6:89:
                    5b:75:eb:7f:48:b9:ea:8b:49:2a:0d:96:9e:74:29:
                    5c:f0:68:f4:fb:34:b6:8e:ce:33:e2:a1:a9:81:b9:
                    14:aa:7d:72:54:6a:fc:4d:0e:4e:fb:36:dc:96:50:
                    4f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4F:D1:A7:09:48:9D:64:CA:A0:D7:A3:FA:80:00:94:3E:6A:7E:A2
            X509v3 Authority Key Identifier:
                keyid:BD:48:BA:FA:32:AD:2E:93:B8:89:CF:3E:38:69:AC:03:4A:17:23:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUi6-jKtLpO4ic8-OGmsA0oXIxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/625827FC74D811EB99569279C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:85:a3:af:40:d6:9f:83:24:b7:c1:d6:27:8e:fa:d7:8d:71:
         97:d6:28:cc:dc:7a:21:0b:3f:6d:69:52:eb:d5:37:5e:bc:17:
         ef:48:a2:a2:79:d7:f3:7e:74:ca:2b:3b:81:c3:9b:6c:d8:d0:
         0c:e2:77:2f:ff:6e:1c:ea:3e:ca:05:7a:e5:77:4c:95:3b:2b:
         d3:b6:68:b2:ba:70:9d:98:76:16:c7:4b:1b:29:0d:26:23:51:
         29:38:38:d3:5e:92:72:9f:19:db:63:46:8b:81:ad:46:b0:75:
         b9:99:48:53:3f:79:a1:64:4f:18:bf:30:85:db:62:fd:68:2e:
         71:aa:f5:51:12:39:dc:e5:b8:c2:2e:35:51:1c:85:97:bf:36:
         77:e6:3a:b0:31:ae:5f:72:61:39:2e:a2:9f:84:44:02:85:79:
         e4:e5:81:69:ae:9d:57:b7:92:54:29:8d:0a:d3:87:bb:7a:e5:
         ee:bf:30:33:54:05:77:2e:51:f1:d7:a9:16:7f:c4:b5:c6:55:
         58:3d:25:d3:40:3e:e8:dd:b8:20:8c:0c:db:95:dc:11:ee:6b:
         5c:8c:e3:4f:2c:90:34:99:43:47:16:eb:5a:49:4b:14:11:79:
         f0:2a:6c:ef:b4:62:9f:5a:7a:e4:18:6a:65:e8:34:e0:70:9f:
         48:11:a2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:30 2024 by rpki-client on console-fra.rpki-client.org