Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/C8900982059611ECB2896C55C4F9AE02.roa
File:                     C8900982059611ECB2896C55C4F9AE02.roa (raw, json)
Hash identifier:          hg4ELKymdwHyn2QAAvtW6T2bJJMNtTNjpAlYq36iGfA=
Subject key identifier:   50:A9:33:5F:29:65:E5:F6:63:79:C8:50:4C:09:CA:75:CD:4E:E8:B9
Certificate issuer:       /CN=A91193C1/serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727
Certificate serial:       04AC
Authority key identifier: 14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/C8900982059611ECB2896C55C4F9AE02.roa
Signing time:             Tue 01 Oct 2024 00:14:37 +0000
ROA not before:           Tue 01 Oct 2024 00:14:37 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     146953
IP address blocks:        103.172.38.0/24 maxlen: 24
                          2407:cac0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl
                          rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1196 (0x4ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91193C1/serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727
        Validity
            Not Before: Oct  1 00:14:37 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66fb3eed-407e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b6:3c:be:1f:64:59:eb:87:c7:45:e2:f7:b9:
                    50:8a:db:33:e7:78:7b:9b:10:b5:00:3c:b1:4b:89:
                    6b:1b:a9:f8:f9:3a:03:35:43:96:f6:db:bc:64:59:
                    6c:55:1a:3d:8d:94:c3:f9:5c:d8:0f:38:5b:1f:da:
                    85:27:9c:04:74:be:56:dd:61:7a:62:c7:1e:f5:43:
                    2d:f5:58:48:8b:90:22:fa:60:80:aa:99:09:95:3e:
                    41:25:69:12:e8:fb:fa:aa:45:06:a8:6e:b0:d2:15:
                    6d:33:1f:2e:f4:ae:29:b2:de:9a:96:97:fe:7a:bc:
                    48:b3:4a:ae:1d:25:54:27:aa:e3:a6:f1:63:1f:9c:
                    a1:72:aa:7c:cb:2f:81:ef:a2:67:19:34:09:28:27:
                    08:bc:9e:6a:43:af:28:57:17:d1:f2:43:ec:bd:1f:
                    ad:f2:90:9b:3f:9c:ec:d8:e1:02:94:94:6e:23:ee:
                    c4:6b:2f:e5:54:fc:8a:d4:4c:f9:0d:76:74:8e:36:
                    c8:1a:d2:7c:81:cf:30:4d:88:25:a7:8d:fe:2d:89:
                    b0:dd:b3:b2:33:10:b1:fd:b1:52:2c:bc:f8:c3:c0:
                    e4:89:60:0b:8f:82:81:7e:a4:d4:f3:3e:58:dc:76:
                    7e:74:2c:5a:ae:79:70:dc:dd:da:09:07:5f:31:7a:
                    52:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A9:33:5F:29:65:E5:F6:63:79:C8:50:4C:09:CA:75:CD:4E:E8:B9
            X509v3 Authority Key Identifier:
                keyid:14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/C8900982059611ECB2896C55C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.38.0/24
                IPv6:
                  2407:cac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:cb:a4:25:31:fe:c1:e1:08:69:99:f0:a8:6f:c8:c0:8e:92:
         92:6f:a7:c2:40:21:ed:d2:20:ff:47:b6:4b:42:34:ed:2f:1a:
         51:1c:28:22:a4:22:2d:58:a9:48:0d:fb:19:b8:4f:2d:4c:d2:
         b3:c9:fc:e6:07:c4:0e:e3:48:7a:9c:75:7e:d5:cb:04:90:a1:
         97:16:de:29:97:29:7b:91:fb:63:f6:33:ab:61:56:a1:e1:08:
         37:d0:a7:a4:2d:d1:7e:bd:36:43:16:20:42:9a:ef:0c:c0:2a:
         8f:59:8f:d8:8b:10:5e:6e:a1:db:77:85:8d:9f:86:8f:c5:56:
         4a:32:1a:e2:12:ec:47:8b:a5:23:32:f1:37:10:95:52:03:4d:
         05:db:99:7e:e1:dd:58:64:11:2c:9b:07:fc:bc:e4:d4:70:ea:
         f5:cc:7b:00:0a:ee:31:af:24:7b:b1:8b:8b:8a:68:d0:96:f4:
         c1:4b:47:66:79:e9:fa:a2:3c:8b:24:dc:72:14:f6:99:92:11:
         06:27:e4:c4:2a:45:cd:6b:59:54:9f:88:03:1c:33:9b:d7:fb:
         73:e9:2e:8d:66:4e:fd:12:b9:0b:bf:55:91:fb:7f:e0:41:94:
         b4:15:82:78:66:82:d7:6a:61:85:bb:71:53:a3:a9:55:54:93:
         89:d3:5a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:18 2024 by rpki-client on console-ams.rpki-client.org