Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/A045C92CB46611EEAFEE8758C4F9AE02.roa
File:                     A045C92CB46611EEAFEE8758C4F9AE02.roa (raw, json)
Hash identifier:          VlIb3exIwpSPjFwHyuIwV8wlOpGvSIVB8uNPjyxZHoM=
Subject key identifier:   A3:F0:4D:10:48:E6:E8:5F:10:F2:C2:93:F2:25:72:E0:78:B3:FE:8F
Certificate issuer:       /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Certificate serial:       BC
Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/A045C92CB46611EEAFEE8758C4F9AE02.roa
Signing time:             Fri 05 Jul 2024 06:07:43 +0000
ROA not before:           Fri 05 Jul 2024 06:07:43 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     9009
IP address blocks:        103.115.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
                          rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:36:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
        Validity
            Not Before: Jul  5 06:07:43 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66878dae-319c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1c:8a:45:6a:ab:d6:b2:7f:e3:3f:98:80:58:
                    ce:02:d6:50:95:03:58:72:af:fe:59:d2:ab:34:ae:
                    04:22:3b:6b:85:31:d6:da:60:92:38:42:0a:c7:73:
                    06:8e:bc:3e:b6:a4:65:6a:07:a4:f7:19:7e:3a:af:
                    e2:2c:7b:32:d7:01:d5:71:4c:38:d3:78:35:00:6f:
                    c8:d8:15:8b:91:22:7d:28:be:b5:3d:85:97:a2:11:
                    a3:e5:ef:86:7d:b8:ef:a3:cd:4d:02:e8:50:04:6d:
                    28:d8:9a:d5:6a:24:04:b1:72:24:46:d0:35:27:29:
                    7e:98:f2:95:80:d7:86:4f:99:14:3d:86:8a:d6:1a:
                    ee:5e:17:6c:2b:26:cf:3c:77:03:33:e1:ff:3f:42:
                    64:fd:7e:9c:f7:ec:28:f5:75:83:c7:65:14:df:4b:
                    e3:45:4a:da:a9:13:24:8f:44:7a:8f:7d:eb:9b:cf:
                    c6:3c:92:ce:80:00:8c:72:c2:7f:1b:b1:ec:d9:66:
                    70:09:53:fd:a9:03:6a:95:e5:9e:9e:27:5f:ab:53:
                    b4:2f:1d:a0:b0:4e:04:ef:a4:49:8b:4f:e6:1a:79:
                    b8:3f:b7:80:ab:27:06:01:f9:5c:a3:76:56:db:a4:
                    3f:4d:14:bb:b7:ba:c6:c9:a8:7c:53:7a:47:56:ed:
                    d7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F0:4D:10:48:E6:E8:5F:10:F2:C2:93:F2:25:72:E0:78:B3:FE:8F
            X509v3 Authority Key Identifier:
                keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/A045C92CB46611EEAFEE8758C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:4e:0e:b1:45:5b:10:d8:6d:81:f1:1e:a7:22:c0:da:c7:74:
         2b:1e:97:ec:24:d6:5b:9d:08:8a:ab:44:99:f0:2d:40:62:79:
         44:19:5b:57:71:47:e8:7c:45:f8:d7:3a:7e:fb:79:de:d2:84:
         02:0d:89:21:5c:e0:13:04:19:9a:30:0c:db:f6:d6:35:c4:7e:
         77:1b:27:4c:b9:f4:48:78:cd:5a:a9:4e:c1:01:14:0b:94:8b:
         a4:8a:e3:ef:71:99:06:7f:9d:17:2b:a2:b8:2d:30:d4:16:0e:
         ee:f2:3b:e3:35:6e:12:13:58:fd:09:a9:81:a9:63:7b:41:16:
         7b:6b:2e:48:1c:e1:bd:06:6f:d7:20:02:12:8e:4d:31:7a:33:
         bc:01:d7:f2:e3:8a:5a:b7:ce:e7:44:3d:5a:99:77:17:ee:92:
         c9:eb:4c:38:b7:5e:0b:dc:53:9f:e8:3a:8e:ff:02:64:ab:80:
         b5:b7:3f:0f:cc:52:ac:38:30:6a:97:28:df:52:f2:32:55:9f:
         12:6f:35:ae:b8:89:b4:0d:d6:57:d4:9d:81:13:7d:bb:ff:44:
         05:3e:2a:e9:6b:f2:f0:67:3e:8a:ff:b6:67:6f:36:98:dc:4b:
         79:83:a6:0f:ac:10:29:1c:78:ce:89:6a:15:35:14:d5:0a:6a:
         ac:79:b5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:06:00 2024 by rpki-client on console-fra.rpki-client.org