Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/E018A9F237A011EBBF397436C4F9AE02.roa
File:                     E018A9F237A011EBBF397436C4F9AE02.roa (raw, json)
Hash identifier:          cXalsjKWAOtUPp8AnjktbIHrzMdXeUvyHoVuwFoJyJc=
Subject key identifier:   00:69:D2:4F:F8:21:E9:B9:32:4A:D2:FF:DD:8A:FB:06:83:B5:3A:C3
Certificate issuer:       /CN=A9187856/serialNumber=E8DA5BF01C7943F1AEC248610C5C4D1BE44B704F
Certificate serial:       06A6
Authority key identifier: E8:DA:5B:F0:1C:79:43:F1:AE:C2:48:61:0C:5C:4D:1B:E4:4B:70:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/E018A9F237A011EBBF397436C4F9AE02.roa
Signing time:             Mon 12 Aug 2024 22:41:31 +0000
ROA not before:           Mon 12 Aug 2024 22:41:31 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     140973
IP address blocks:        103.154.12.0/23 maxlen: 23
                          103.154.12.0/24 maxlen: 24
                          103.154.13.0/24 maxlen: 24
                          2001:df1:ffc0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.crl
                          rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1702 (0x6a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187856/serialNumber=E8DA5BF01C7943F1AEC248610C5C4D1BE44B704F
        Validity
            Not Before: Aug 12 22:41:31 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66ba8f9b-89b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:14:7a:ef:ef:6c:a9:81:6d:a3:60:0a:b0:33:
                    80:dd:88:cf:94:c9:24:b4:bd:05:d8:a6:0d:9b:85:
                    dc:83:95:d8:3d:bf:21:f6:e9:65:1b:ff:9c:81:13:
                    9b:e3:eb:8d:8a:06:ac:6f:da:89:24:2c:55:23:c7:
                    61:9f:cc:65:bb:08:04:cb:91:76:2d:64:b0:5a:14:
                    b8:e4:41:85:19:de:c7:cb:52:d3:d0:22:d8:ef:94:
                    62:ab:07:90:6f:f4:e6:64:33:86:3e:a5:86:a5:78:
                    90:8c:21:42:35:e1:df:8e:8b:af:15:fc:9a:67:c1:
                    5a:49:9e:5a:b4:3a:f8:97:24:09:51:4c:d9:65:9b:
                    ad:1c:c4:e9:c2:6f:f4:55:8c:5e:db:71:09:b4:7b:
                    fc:f2:ce:cc:1a:5a:7d:55:54:76:51:00:69:db:b5:
                    fb:8d:7c:a2:1b:dc:cf:2e:7c:36:48:15:4b:a8:9a:
                    96:14:28:d4:2b:d4:f7:3d:5e:98:3c:61:21:b3:75:
                    4f:31:d0:66:3c:6f:63:ef:21:e0:a8:93:7b:40:b7:
                    73:d9:1c:85:32:ea:3a:04:06:bf:48:b2:b7:5a:8f:
                    fd:06:07:10:ce:c6:77:51:2a:05:c9:b1:f7:c9:5b:
                    eb:70:e9:d8:56:f8:92:b7:d9:81:63:6d:44:e0:90:
                    e8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:69:D2:4F:F8:21:E9:B9:32:4A:D2:FF:DD:8A:FB:06:83:B5:3A:C3
            X509v3 Authority Key Identifier:
                keyid:E8:DA:5B:F0:1C:79:43:F1:AE:C2:48:61:0C:5C:4D:1B:E4:4B:70:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/E018A9F237A011EBBF397436C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.12.0/23
                IPv6:
                  2001:df1:ffc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:35:48:59:0e:26:e9:58:46:52:03:c2:3c:35:99:81:68:ca:
         3c:2b:63:35:7d:3c:ce:42:82:bb:47:ed:da:ca:27:c5:f9:26:
         64:55:b2:b1:58:13:71:9a:33:0c:25:7d:9c:2b:2d:5a:4e:46:
         1c:df:6e:d3:f6:a1:a8:f6:cb:b7:6f:c5:20:18:d9:08:50:31:
         27:10:b2:0b:dc:18:df:af:72:5d:a0:f6:f5:8a:37:01:c4:14:
         06:8b:c9:a1:3b:e2:00:35:c8:b8:c2:bd:01:f9:98:cc:10:0e:
         89:c8:a7:b8:bd:dd:48:1a:9b:31:30:77:68:53:db:6c:67:2c:
         82:46:c5:7f:2d:73:fc:28:61:d6:27:00:8a:f9:73:ea:16:05:
         78:26:46:7d:85:5a:3b:68:ca:35:0c:23:09:e7:f0:2d:99:0a:
         28:c9:84:7b:13:e9:49:c8:3a:8c:7a:ad:d1:13:b0:a1:f3:46:
         b2:fd:b1:5e:61:7f:cd:10:e6:05:6a:13:e4:97:18:67:c3:97:
         b8:b1:8e:09:4b:a0:99:b4:17:0e:7d:b0:cc:55:38:15:ba:90:
         87:54:03:db:d7:0a:20:9e:d3:c6:0b:08:63:50:84:7a:a0:7f:
         17:80:fd:fb:af:e0:71:27:e7:c0:2d:82:fe:c6:f8:cb:37:dc:
         57:b4:52:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:10 2024 by rpki-client on console-fra.rpki-client.org