Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/F9E4E14645AE11EF8870C771C4F9AE02.roa
File:                     F9E4E14645AE11EF8870C771C4F9AE02.roa (raw, json)
Hash identifier:          vqfBcf5vpMBkoptdR186vKEyoOUdk3eFKxuU70CJf2Y=
Subject key identifier:   C6:D0:11:F9:6E:22:27:CA:FA:FB:0F:B9:E5:F8:1E:2D:F4:0B:CA:26
Certificate issuer:       /CN=A91BB1F3/serialNumber=750FA57B59156539CB16E54A60A6CEDB5B10EB9E
Certificate serial:       02
Authority key identifier: 75:0F:A5:7B:59:15:65:39:CB:16:E5:4A:60:A6:CE:DB:5B:10:EB:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/F9E4E14645AE11EF8870C771C4F9AE02.roa
Signing time:             Fri 19 Jul 2024 09:12:09 +0000
ROA not before:           Fri 19 Jul 2024 09:12:09 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     139329
IP address blocks:        103.178.219.0/24 maxlen: 24
                          2001:df0:3ec0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.crl
                          rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Sep 2024 04:46:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB1F3/serialNumber=750FA57B59156539CB16E54A60A6CEDB5B10EB9E
        Validity
            Not Before: Jul 19 09:12:09 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=669a2de9-d4c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:82:78:58:25:5c:91:4a:c5:18:39:7f:9d:e6:
                    16:bb:d2:91:15:7d:cc:a7:69:b6:39:27:c0:92:e8:
                    96:ff:20:75:b4:51:3c:b1:21:6b:88:93:a0:4d:5a:
                    9e:35:96:95:f9:83:34:1a:7b:d4:d7:4a:6b:25:6e:
                    4e:e5:5b:a0:1e:90:25:11:b0:37:57:42:7f:de:5d:
                    82:d6:c1:7e:e5:eb:b8:fd:2b:8f:70:61:33:48:ca:
                    f6:56:8b:e5:34:3b:99:21:0a:12:4f:74:cd:cf:8f:
                    f4:0d:b9:37:10:da:9f:04:dd:ff:bf:fb:0b:fe:fb:
                    c2:9e:2e:98:52:e5:27:45:6a:a9:05:a2:4f:fa:d3:
                    51:e0:12:0d:cc:ee:c4:1c:53:8d:8b:4a:9f:ec:ad:
                    a5:3a:2c:9d:c1:73:69:e0:a3:64:33:b3:d3:b6:b0:
                    b9:67:ea:49:8e:e1:36:6d:c9:f2:ab:41:9b:1a:bc:
                    35:d2:c8:a9:74:dd:4e:7d:4e:6b:55:a8:4a:c8:7f:
                    34:b2:e5:ac:a4:aa:bc:52:a2:51:2c:8e:ea:08:dc:
                    83:88:4a:e6:10:ca:d2:bf:b7:41:ff:f5:78:e5:2c:
                    cc:e2:e6:63:ed:e1:22:1f:64:e7:2f:aa:41:17:23:
                    f3:c9:63:79:1f:4a:96:23:d6:15:e4:a3:36:7a:31:
                    1b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D0:11:F9:6E:22:27:CA:FA:FB:0F:B9:E5:F8:1E:2D:F4:0B:CA:26
            X509v3 Authority Key Identifier:
                keyid:75:0F:A5:7B:59:15:65:39:CB:16:E5:4A:60:A6:CE:DB:5B:10:EB:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/F9E4E14645AE11EF8870C771C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.219.0/24
                IPv6:
                  2001:df0:3ec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:24:9d:48:a6:61:f5:eb:d4:a0:b3:50:8b:2c:df:e2:0e:b3:
         af:5e:5c:66:2e:04:db:8c:58:d1:2c:c8:17:9b:5c:57:d0:35:
         20:5a:e8:44:8f:7b:c8:87:aa:ec:98:94:22:58:c8:2c:13:1a:
         f7:bb:f4:b3:0f:cb:4d:36:dc:56:99:cb:75:92:5d:6e:6d:9b:
         5c:ee:11:04:8f:71:f0:de:59:c2:d8:db:39:3c:b2:56:79:56:
         33:58:80:a9:59:5e:79:4b:41:80:39:a2:02:86:f8:61:42:53:
         10:ae:55:75:5d:24:76:3a:2e:67:ae:f2:e8:87:9e:87:f8:44:
         98:8f:0d:27:e0:4f:ce:1d:e7:cd:9a:7c:67:70:4d:c4:f8:34:
         af:cf:a2:b5:08:8c:8c:ba:10:66:a9:53:ff:75:f7:a6:31:fd:
         06:d8:cd:9d:86:6a:a0:cd:ef:a8:94:79:06:70:7d:5f:a8:36:
         78:fc:01:26:3b:ba:aa:4d:47:84:89:72:0e:da:7f:5f:6e:62:
         b5:65:4a:c8:f5:5e:cb:65:bf:b4:4b:0e:dd:a7:bd:da:59:f9:
         1e:35:9e:c6:64:44:fb:66:82:8c:04:8a:35:c1:8e:33:2a:9e:
         13:39:ae:5c:cc:ff:3d:54:c3:bb:f4:3a:f8:ef:a7:3f:af:ad:
         46:df:cc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 07:38:40 2024 by rpki-client on console-fra.rpki-client.org