Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/B76A1A109B5411EF9756FD79C4F9AE02.roa
File:                     B76A1A109B5411EF9756FD79C4F9AE02.roa (raw, json)
Hash identifier:          S6jwI0TNB7LkuUao3PaiL3XeL9O4azeJDi9r1sukrRg=
Subject key identifier:   59:9F:D5:28:7A:40:53:9B:14:1D:8A:DC:3B:37:71:D7:21:15:E2:1E
Certificate issuer:       /CN=A9185673/serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
Certificate serial:       EE
Authority key identifier: AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/B76A1A109B5411EF9756FD79C4F9AE02.roa
Signing time:             Tue 05 Nov 2024 09:02:43 +0000
ROA not before:           Tue 05 Nov 2024 09:02:43 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     142132
IP address blocks:        103.166.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl
                          rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:25:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185673/serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
        Validity
            Not Before: Nov  5 09:02:43 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6729df33-7e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:33:c9:e6:b7:89:dc:82:24:30:3c:a7:34:f7:
                    27:39:9b:ed:a1:3e:62:9f:6f:f7:8d:bc:33:db:8c:
                    73:3d:9d:98:3a:f4:20:41:7e:48:31:96:26:a0:3d:
                    4b:f3:a1:74:2e:3a:62:6c:7e:e2:19:3e:0b:02:08:
                    25:2f:f8:5a:b0:d0:8e:df:02:aa:f1:fb:ec:f1:e8:
                    d2:78:f8:8a:51:b5:75:37:18:4b:fa:55:58:4a:46:
                    f6:88:47:6a:2f:7c:2b:b8:44:90:bd:df:af:e6:35:
                    2e:ab:2e:cc:27:fc:34:1e:82:f1:99:51:71:da:c6:
                    c7:ea:d2:c6:b7:6c:b2:24:e7:55:83:1c:fc:a7:8c:
                    61:e2:c6:6c:3d:79:0c:de:98:9f:a2:da:6e:a1:ff:
                    0d:7d:d8:9f:67:7c:29:f8:2f:f6:ca:95:9e:d9:5c:
                    11:b1:b3:53:a1:bf:26:ed:7b:0a:5a:99:c2:7b:55:
                    a0:7d:5e:1f:f0:fa:69:1d:27:b5:38:42:f8:91:56:
                    27:df:95:06:1d:0a:84:f6:05:88:87:d7:c0:54:f4:
                    37:37:04:4a:e2:fb:71:c5:2c:34:96:48:c8:43:79:
                    16:a1:63:29:a9:39:e4:30:10:fa:e3:24:83:63:a9:
                    ad:6a:7c:10:b8:88:c4:01:b9:25:5d:15:6e:1d:fd:
                    11:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9F:D5:28:7A:40:53:9B:14:1D:8A:DC:3B:37:71:D7:21:15:E2:1E
            X509v3 Authority Key Identifier:
                keyid:AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/B76A1A109B5411EF9756FD79C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:13:b4:2e:a5:69:5d:30:c8:31:33:46:85:6c:fa:71:d0:e7:
         13:7c:b9:5b:ae:42:e4:d2:e4:e9:a9:cb:cd:21:45:0c:a4:c2:
         02:67:ca:8a:e6:02:5e:eb:36:1c:56:71:cf:22:83:39:7b:04:
         cc:3a:05:05:3c:63:bc:57:d4:f0:cf:e5:fe:66:e4:9a:49:f4:
         89:ca:fc:d8:8a:aa:fa:84:60:4e:d6:2a:d9:16:67:35:e0:fa:
         5d:52:a4:1c:8f:1e:74:93:17:80:06:00:bd:c4:25:65:a8:6e:
         64:ba:e6:3b:23:21:19:c6:0e:20:6e:6f:2f:ee:e0:97:d7:0c:
         4f:2e:5c:81:fd:3e:28:1e:ae:cb:23:e2:f4:68:6c:33:dd:93:
         f2:ad:7a:e2:ed:fd:00:a6:6b:19:c0:06:57:10:eb:b5:55:da:
         ec:ac:17:92:c5:21:76:74:d9:8e:54:40:ae:ba:db:06:c0:bb:
         8e:51:b8:f8:7a:b9:44:e9:2b:ae:ce:0d:77:fc:b4:cb:0b:5d:
         0a:53:77:0f:b2:fe:63:6c:c8:2e:c4:9d:48:8a:72:0f:8d:2e:
         7a:03:44:b9:73:97:c0:a3:b6:41:6e:09:fd:47:68:c3:57:b4:
         00:5b:23:0a:8c:b5:5a:00:d1:4a:a7:d9:f3:fb:2e:7e:1a:6e:
         54:34:05:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:08 2024 by rpki-client on console-ams.rpki-client.org