Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/A6DC22C63C7D11ECB08DFD13C4F9AE02.roa
File:                     A6DC22C63C7D11ECB08DFD13C4F9AE02.roa (raw, json)
Hash identifier:          mu1mKwNxbL7+Qz6oyXzuFah+meolf6goLYumQsj+R3w=
Subject key identifier:   72:32:59:87:30:24:DB:2F:00:7D:41:FB:27:EA:12:68:96:C6:2F:E7
Certificate issuer:       /CN=A9184017/serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4
Certificate serial:       0429
Authority key identifier: 1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/A6DC22C63C7D11ECB08DFD13C4F9AE02.roa
Signing time:             Wed 07 Aug 2024 01:22:43 +0000
ROA not before:           Wed 07 Aug 2024 01:22:43 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     9744
IP address blocks:        103.70.76.0/23 maxlen: 24
                          103.71.252.0/23 maxlen: 24
                          103.194.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl
                          rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1065 (0x429)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184017/serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4
        Validity
            Not Before: Aug  7 01:22:43 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66b2cc63-182a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:83:70:0d:b6:e8:ac:09:1c:29:a9:67:86:04:
                    f9:ab:94:ee:a2:d8:46:ab:cf:a8:b0:3c:9d:b7:78:
                    70:80:94:de:1f:8e:b5:f3:49:43:c2:be:44:c5:79:
                    63:b1:4d:f7:68:9b:be:bf:a9:69:26:11:f4:ec:3e:
                    f9:06:d9:29:be:d7:22:33:99:78:2d:a5:8b:66:54:
                    dc:f0:59:e3:32:0c:bb:8e:6d:fc:1b:4d:e0:73:d1:
                    b2:0c:d1:cc:31:cf:cf:80:61:16:c2:5d:dd:75:06:
                    ae:dc:77:99:20:3a:c0:c5:07:18:96:3e:e0:f7:8f:
                    f9:f4:54:7c:10:52:98:63:71:c6:69:89:61:80:0c:
                    c7:75:e8:ba:6b:d2:95:ce:b7:4c:32:2e:6a:5f:72:
                    6b:ce:22:ce:6b:db:3c:22:92:32:0d:8b:32:f0:eb:
                    09:3a:92:fe:3e:cb:4e:ef:0d:34:68:19:5c:e6:ec:
                    c4:c7:8d:5f:d1:99:77:46:a7:ef:86:47:b7:be:34:
                    b8:01:7f:cb:32:54:fa:d6:15:a6:f0:ed:f1:8f:de:
                    20:4c:fd:af:27:e2:69:2b:9b:27:b8:d6:6e:0d:69:
                    c1:7d:1b:5b:d7:0a:a7:27:f6:3b:35:b9:8f:25:c5:
                    fd:bd:7c:bf:09:db:eb:fe:74:8c:e9:22:71:b9:0b:
                    91:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:32:59:87:30:24:DB:2F:00:7D:41:FB:27:EA:12:68:96:C6:2F:E7
            X509v3 Authority Key Identifier:
                keyid:1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/A6DC22C63C7D11ECB08DFD13C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.76.0/23
                  103.71.252.0/23
                  103.194.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:0d:45:24:6e:82:6e:ab:19:54:cc:a9:6c:21:1a:62:d3:5b:
         80:1c:90:0d:3b:07:4a:07:f8:23:b1:c4:49:02:c2:6a:76:45:
         c0:17:84:bd:15:1e:5f:ab:ad:cc:65:78:53:ba:ab:c8:74:6e:
         9d:ce:48:bc:95:fc:c8:50:36:e2:61:c9:a9:0d:fb:3a:1c:f1:
         b9:a7:a5:ed:e0:46:a5:0f:bc:c4:bb:3b:8c:b0:f2:ab:42:1d:
         d2:5a:19:99:f7:a8:e9:13:db:70:a7:18:66:dc:63:ae:21:78:
         7b:43:f8:55:8d:49:2b:31:92:cc:a4:d0:74:b3:78:78:59:ca:
         e7:56:64:42:4e:e7:71:ae:a7:06:ba:0a:bf:27:45:8b:db:6e:
         58:cd:b4:5d:42:e2:a9:9b:83:c8:8f:cf:0e:78:5c:e1:36:37:
         29:68:80:77:cd:16:34:0c:99:29:48:c8:11:76:dd:ce:18:c7:
         29:06:78:2e:00:e5:2e:7f:79:35:8c:2e:6d:e8:77:5c:0e:73:
         5a:e6:15:a4:3e:4c:15:43:2e:ef:e7:a3:f4:8b:76:35:07:0d:
         c7:2a:be:55:b1:33:31:b4:d8:27:c3:92:23:53:50:f9:d0:4e:
         2f:d8:73:fc:71:cf:09:24:b0:ca:31:7f:cb:a6:f0:74:e7:76:
         19:47:72:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:35 2024 by rpki-client on console-fra.rpki-client.org