Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/AD532D26090211EAAD8D5786C4F9AE02.roa
File:                     AD532D26090211EAAD8D5786C4F9AE02.roa (raw, json)
Hash identifier:          zMbxVtz2dv4BRq8dK++ZIDeWN8B3kY7lSogxQf54mCs=
Subject key identifier:   94:00:1B:C7:1E:36:AF:FF:95:CE:62:62:A9:FB:C2:47:F3:E7:05:75
Certificate issuer:       /CN=A91116D1/serialNumber=DDEBA46CC7A892D2A7FF6AB64377C7ECFFD8ADBB
Certificate serial:       0BB5
Authority key identifier: DD:EB:A4:6C:C7:A8:92:D2:A7:FF:6A:B6:43:77:C7:EC:FF:D8:AD:BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/AD532D26090211EAAD8D5786C4F9AE02.roa
Signing time:             Thu 26 Sep 2024 18:47:20 +0000
ROA not before:           Thu 26 Sep 2024 18:47:20 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     63826
IP address blocks:        103.40.82.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl
                          rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:32:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2997 (0xbb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91116D1/serialNumber=DDEBA46CC7A892D2A7FF6AB64377C7ECFFD8ADBB
        Validity
            Not Before: Sep 26 18:47:20 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66f5ac37-4d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:73:5c:0c:00:7b:81:1f:d5:bc:00:a3:5b:79:
                    d0:d1:f8:9c:0b:7b:68:e7:a7:90:7f:7b:bb:f5:fd:
                    e6:8c:7c:3d:db:fd:49:f7:70:89:f9:64:af:da:e8:
                    91:d9:b3:30:34:73:96:1f:a2:7b:29:ec:0e:9e:0e:
                    19:00:d2:93:ed:6a:66:5b:4a:8e:2a:59:40:8b:6a:
                    a6:3f:38:7c:f5:49:2a:29:aa:d6:48:c0:77:0f:63:
                    b7:ed:bc:1e:5f:eb:b9:64:d8:e3:c1:ef:2b:f5:26:
                    70:7d:ab:d8:31:40:f9:e8:c4:af:00:56:66:59:52:
                    e6:93:f9:5c:db:cc:7c:aa:2f:3a:1b:e2:45:40:b5:
                    2d:94:0c:61:ac:9f:60:b7:0f:ce:aa:53:6e:b9:88:
                    60:40:69:22:aa:ac:24:22:a4:6b:66:32:09:95:9d:
                    19:de:b5:f4:6a:fd:5f:1f:96:d3:cd:26:d3:5a:d3:
                    43:70:fb:04:c6:34:16:d5:f6:f6:0d:7e:e2:da:8a:
                    2b:2e:d5:b7:8f:62:fa:7b:7a:52:99:ff:a3:a2:1a:
                    9c:f4:ff:7c:0d:bd:5a:fd:72:9c:af:0b:c9:9a:97:
                    1d:c5:02:dc:37:8d:19:69:62:e6:f4:87:01:7d:56:
                    bb:89:cf:78:98:de:fb:87:2b:fd:69:f2:b9:86:81:
                    bd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:00:1B:C7:1E:36:AF:FF:95:CE:62:62:A9:FB:C2:47:F3:E7:05:75
            X509v3 Authority Key Identifier:
                keyid:DD:EB:A4:6C:C7:A8:92:D2:A7:FF:6A:B6:43:77:C7:EC:FF:D8:AD:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/AD532D26090211EAAD8D5786C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.40.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:66:41:3c:66:7a:71:3c:da:7f:6b:b4:0c:dd:71:6e:79:89:
         39:cf:cc:ed:33:3b:89:2a:a5:a8:f7:b0:16:75:e0:c6:75:b0:
         ce:7d:62:a7:39:71:6d:53:2b:65:6d:ba:76:16:ea:a4:64:59:
         48:c9:be:d4:dd:76:9d:94:03:56:6f:4a:97:8f:a6:eb:53:69:
         b0:c8:fd:82:ed:8b:09:ae:1b:a6:7a:34:9b:2b:21:d9:d1:ae:
         00:7b:f5:ea:0d:a9:04:25:0e:28:34:0b:cf:0f:d2:f0:49:2a:
         22:9f:44:de:5b:be:92:03:cb:e6:3c:03:28:87:46:9b:bc:8e:
         7d:83:a0:3e:a7:57:f0:d7:b7:da:20:8c:e3:7a:28:a8:90:5c:
         0b:66:de:ed:79:f7:1b:8a:0a:07:f8:f2:dc:26:1f:49:d6:3f:
         e8:2d:51:fa:00:3e:3b:73:d3:e0:28:0a:ca:2a:59:9f:ab:c8:
         96:69:bd:d7:81:22:67:83:9b:5e:5e:0f:4e:a2:86:5a:f4:91:
         30:69:a2:31:e4:0f:7f:9f:b9:2f:2f:48:d5:d7:25:cc:a3:62:
         dd:89:ea:ef:a1:de:c7:05:23:36:f8:e1:a5:66:ee:6e:04:fa:
         d5:f1:1e:99:bd:cc:e4:e1:21:c3:c6:cc:26:51:39:dd:aa:fc:
         df:51:87:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:55 2024 by rpki-client on console-fra.rpki-client.org