Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/027BBBCA12B211EF8197C737C4F9AE02.roa
File:                     027BBBCA12B211EF8197C737C4F9AE02.roa (raw, json)
Hash identifier:          xUzOXANfh6mmG71QxkWCtyjsT3i0ndD8YHqWFZ6MWYE=
Subject key identifier:   34:FF:A6:86:7E:F6:B8:2E:46:0D:D6:19:32:A7:5B:F5:DC:9A:24:CF
Certificate issuer:       /CN=A9182F86/serialNumber=CE6BFB08F952863527A93C10DA3CA7DF9113ACF1
Certificate serial:       02
Authority key identifier: CE:6B:FB:08:F9:52:86:35:27:A9:3C:10:DA:3C:A7:DF:91:13:AC:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/027BBBCA12B211EF8197C737C4F9AE02.roa
Signing time:             Wed 15 May 2024 11:55:23 +0000
ROA not before:           Wed 15 May 2024 11:55:23 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     152857
IP address blocks:        103.159.172.0/23 maxlen: 24
                          2001:df3:d040::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.crl
                          rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Sep 2024 04:46:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182F86/serialNumber=CE6BFB08F952863527A93C10DA3CA7DF9113ACF1
        Validity
            Not Before: May 15 11:55:23 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=6644a2aa-2f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ca:71:de:ec:b2:d8:d9:08:68:74:a7:0c:06:
                    d1:0d:d3:e8:5e:18:80:42:9f:83:39:63:bc:1d:84:
                    81:bc:c2:2f:74:7c:76:90:e0:c6:ca:54:2a:91:bc:
                    fd:39:c4:e1:04:25:c4:9d:42:2f:31:91:b1:0b:16:
                    e5:4c:e8:aa:33:f3:2a:c0:58:df:e4:a2:a2:b5:e8:
                    4d:13:98:0f:e7:da:a8:79:6d:f9:b2:28:72:e5:37:
                    79:6e:8e:7c:ba:ad:2c:cc:30:d2:31:57:08:27:7f:
                    b2:d5:0b:2e:f2:7b:9c:68:d5:59:a9:1c:25:9a:83:
                    45:66:a1:24:63:f8:8e:ce:91:32:55:a6:22:c3:59:
                    b3:e5:ae:ec:1f:b5:83:f1:19:96:71:c1:71:b9:25:
                    67:8d:59:8b:93:6a:04:83:c4:07:be:4b:f3:d9:94:
                    26:e3:86:9d:69:8c:97:bc:99:2c:f5:ea:6b:18:b2:
                    84:c7:2b:9a:05:32:3d:4e:df:11:2a:94:42:cc:b2:
                    8c:cb:88:5b:db:2e:d3:a5:ab:71:20:eb:09:0d:d6:
                    a6:31:16:44:43:c7:01:0c:19:b2:86:24:86:a8:a2:
                    2b:1f:96:66:1a:e8:dc:69:43:93:a6:c2:9d:0a:71:
                    e7:f5:41:b7:33:c6:a1:76:57:ce:a5:70:0b:6c:d0:
                    cb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FF:A6:86:7E:F6:B8:2E:46:0D:D6:19:32:A7:5B:F5:DC:9A:24:CF
            X509v3 Authority Key Identifier:
                keyid:CE:6B:FB:08:F9:52:86:35:27:A9:3C:10:DA:3C:A7:DF:91:13:AC:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/027BBBCA12B211EF8197C737C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.172.0/23
                IPv6:
                  2001:df3:d040::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:2f:71:e3:49:a9:8e:49:6f:89:56:29:3f:0b:9c:ba:ae:64:
         23:85:a6:db:08:be:83:bf:78:7e:1a:d1:c8:b5:c9:39:13:b9:
         db:63:80:c1:0b:1a:60:82:58:3f:58:aa:0e:70:b9:e7:1c:22:
         1b:80:37:09:59:56:af:f2:c6:37:17:60:1e:90:19:11:25:16:
         03:c7:f2:b4:8a:00:95:64:35:1d:6b:3f:fd:62:89:b9:0b:1d:
         30:51:43:57:b7:2e:bf:5d:23:4f:ba:c4:72:4a:1e:a0:f6:51:
         ef:83:e2:88:d8:09:31:80:33:e4:c0:59:77:3e:4e:68:a6:31:
         29:ab:9c:cd:26:0d:82:1f:f9:43:47:26:5f:eb:fa:2f:58:c3:
         fa:8f:57:16:fe:bd:e6:26:aa:2c:3f:fc:55:9d:83:c5:17:39:
         a2:0c:39:a9:17:2c:00:94:13:11:3e:55:93:86:2f:07:a0:72:
         b6:4a:3d:46:8c:c5:68:9e:ca:cd:cf:d6:27:a5:45:85:72:68:
         b1:08:e5:3e:ff:85:ad:a4:84:0a:20:56:d8:4e:ca:8f:e6:00:
         45:09:08:7b:62:4c:c4:5e:97:c8:52:25:cd:9d:b0:24:6d:58:
         1b:33:f9:77:a4:52:95:09:8e:48:d0:98:8f:e3:57:6e:98:ef:
         a3:34:aa:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 08:11:55 2024 by rpki-client on console-ams.rpki-client.org