Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/62B575B8104C11ED8CE56267C4F9AE02.roa
File:                     62B575B8104C11ED8CE56267C4F9AE02.roa (raw, json)
Hash identifier:          LJhv9R+LostgKj3I2cWW/yrIOe+4xlAQa1Sq/wPUOsQ=
Subject key identifier:   95:F5:76:79:30:F9:F7:16:26:56:39:D3:04:03:01:45:FA:17:8F:2A
Certificate issuer:       /CN=A9187364/serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E
Certificate serial:       01E2
Authority key identifier: C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/62B575B8104C11ED8CE56267C4F9AE02.roa
Signing time:             Sat 03 Aug 2024 03:54:46 +0000
ROA not before:           Sat 03 Aug 2024 03:54:46 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     150116
IP address blocks:        103.191.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl
                          rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:32:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 482 (0x1e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187364/serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E
        Validity
            Not Before: Aug  3 03:54:46 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66adaa05-2e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:63:4f:60:64:f1:00:20:0b:84:a6:35:8b:8e:
                    9a:0a:31:4c:8f:24:09:6d:0d:c6:dd:49:97:a4:92:
                    96:47:65:43:e2:74:29:5b:57:e8:99:09:24:57:45:
                    5a:56:0c:1a:50:71:61:51:ea:35:1c:57:ac:4c:c0:
                    a7:d6:94:75:a7:d4:5d:4a:42:b8:6e:b4:dd:c3:81:
                    13:71:6f:c3:ce:13:8e:28:24:cc:c6:d4:4b:a7:8e:
                    b3:7c:35:b6:14:b2:09:2e:d2:3a:0f:72:2e:4c:c1:
                    83:11:da:0f:28:36:d6:27:79:71:1d:bd:be:3f:61:
                    f1:02:20:f3:59:1c:9e:27:b4:c3:62:e6:b4:c0:4f:
                    75:19:62:f6:9b:fd:7e:e0:b0:76:da:cb:50:76:7a:
                    60:35:c0:a7:5d:76:26:66:85:4d:86:f3:c2:01:1c:
                    c1:c5:1d:49:0b:2e:d2:a0:43:b4:3b:2b:e0:ed:30:
                    e6:79:ca:8f:a3:cd:9f:08:33:a6:62:59:ab:14:b4:
                    ae:4a:26:55:5b:aa:e3:ef:ea:e4:1c:b2:7c:c5:82:
                    27:35:6d:4b:ba:73:22:f2:70:93:fb:ab:44:64:18:
                    33:92:86:97:6c:86:79:f5:4f:b2:59:b8:32:e3:2d:
                    e2:36:20:fb:b3:51:7e:85:d6:a6:88:3a:06:89:fa:
                    bf:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F5:76:79:30:F9:F7:16:26:56:39:D3:04:03:01:45:FA:17:8F:2A
            X509v3 Authority Key Identifier:
                keyid:C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/62B575B8104C11ED8CE56267C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:9d:ad:a2:06:53:f8:fb:3b:ec:b9:32:2c:d8:7f:8b:f9:94:
         aa:57:4b:69:ee:f6:d4:56:cb:d5:e9:6a:ff:55:2a:8a:9e:c1:
         bd:c8:9e:9d:0a:dc:e0:3e:e6:f8:e0:fe:2b:26:f6:ca:7d:4e:
         81:4d:e4:17:bb:bb:e7:25:79:d5:2f:65:0c:05:f2:d5:e1:2f:
         52:51:a2:3e:0a:5c:3c:63:3a:6e:69:07:b8:7c:f7:06:66:49:
         b1:00:58:96:a0:1d:d9:48:82:91:b7:c0:e8:61:a9:e4:d0:d2:
         9e:cf:9e:11:f5:e2:e1:03:cf:88:df:d2:b3:f9:6a:82:f7:0d:
         ad:fd:00:c1:6b:4d:16:61:3e:66:7b:6c:ab:89:1c:1c:80:fb:
         12:a7:15:77:ef:fb:5e:66:d6:b0:63:7b:80:d9:7b:9d:19:07:
         9c:b6:6a:59:02:b1:69:2e:2b:43:35:a5:24:1a:57:cf:cd:ab:
         cf:44:bb:cf:0b:17:43:46:26:00:7e:53:46:96:72:8e:f6:9e:
         e6:80:90:b4:9f:00:de:55:95:60:2d:32:68:c0:3c:3d:bc:da:
         c9:58:3e:bb:5f:ae:56:d2:89:a6:6a:8a:35:a7:48:64:5f:a1:
         f0:b2:7d:ff:21:cd:85:d6:a5:9e:a4:85:67:15:98:c4:a0:ff:
         7a:a2:ff:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:44 2024 by rpki-client on console-ams.rpki-client.org