Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/59923F2CA72011EEA63ABF4AC4F9AE02.roa
File:                     59923F2CA72011EEA63ABF4AC4F9AE02.roa (raw, json)
Hash identifier:          jVn5ZxyveGa/F3Z17pqMoq5Bfa+WnZz2iNW6T6RgwPs=
Subject key identifier:   73:5E:11:7A:BE:56:54:B1:70:C0:E3:11:8E:81:41:3D:29:00:12:9F
Certificate issuer:       /CN=A912978E/serialNumber=6DF0935660B524D2A808064368B0AFC56538A69A
Certificate serial:       D4
Authority key identifier: 6D:F0:93:56:60:B5:24:D2:A8:08:06:43:68:B0:AF:C5:65:38:A6:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/59923F2CA72011EEA63ABF4AC4F9AE02.roa
Signing time:             Sun 13 Oct 2024 04:08:53 +0000
ROA not before:           Sun 13 Oct 2024 04:08:53 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     136142
IP address blocks:        103.76.110.0/24 maxlen: 24
                          103.76.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl
                          rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912978E/serialNumber=6DF0935660B524D2A808064368B0AFC56538A69A
        Validity
            Not Before: Oct 13 04:08:53 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=670b47d5-0427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e8:12:ec:31:28:ef:2e:5a:bc:15:36:b8:6e:
                    1e:af:f2:86:9a:fd:8a:20:ee:74:64:b2:f7:b0:a6:
                    d6:cf:45:24:dd:25:a7:7a:48:85:09:22:64:04:48:
                    48:6e:19:5d:01:2d:46:d9:a6:b2:aa:11:7f:45:cb:
                    1a:48:85:89:ef:17:1e:9b:1f:d4:ab:f1:60:c2:74:
                    d7:c2:46:31:1f:d9:3e:62:5b:c5:2c:c4:d6:4f:ab:
                    54:1a:7c:08:42:96:16:ad:56:52:d1:d7:5f:a9:41:
                    18:18:2e:6b:85:96:35:88:e3:a3:3e:36:3e:d3:0d:
                    62:a1:d1:8f:90:bf:c0:c7:ba:20:8a:20:b8:7e:8b:
                    d9:bd:03:83:5d:91:0a:35:36:33:5e:85:a8:3c:6a:
                    50:bc:c2:60:dc:6f:07:a0:ff:d4:74:95:14:5e:56:
                    02:7d:8b:bd:a7:3b:21:19:df:53:8c:41:db:ee:3c:
                    bf:92:47:95:cb:61:af:e1:db:9e:b6:bb:77:20:ea:
                    f3:0a:ce:cf:26:2b:8b:2e:5c:05:93:d3:f2:b8:ce:
                    f2:f7:85:d0:b1:14:74:9a:21:ac:67:db:4f:41:81:
                    92:1e:d5:1a:33:4c:e0:89:84:3e:cb:28:6e:a7:41:
                    ce:1b:65:8f:e5:d1:9c:6d:9b:13:00:d7:a4:be:48:
                    75:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5E:11:7A:BE:56:54:B1:70:C0:E3:11:8E:81:41:3D:29:00:12:9F
            X509v3 Authority Key Identifier:
                keyid:6D:F0:93:56:60:B5:24:D2:A8:08:06:43:68:B0:AF:C5:65:38:A6:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/59923F2CA72011EEA63ABF4AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:de:40:0c:2d:23:78:48:56:f7:cd:e2:79:b3:2b:89:7d:2c:
         aa:70:4d:dd:17:34:76:d5:46:59:6c:3e:56:b8:43:0a:0c:6a:
         a7:67:ad:db:c0:36:ff:cf:8f:bf:f3:a0:fc:6d:b8:98:a2:34:
         9b:57:66:42:93:35:0c:40:3d:0e:c1:c3:23:80:c4:d3:a0:e8:
         25:35:8a:5f:46:59:3d:f3:72:6f:0c:dc:66:c6:76:47:7b:be:
         c0:8e:c8:d5:9c:8b:91:2c:e6:3c:6d:47:fa:3e:b9:40:47:73:
         0f:9b:6b:2d:6f:25:64:a1:e1:dd:7e:dc:1b:91:ca:6d:7d:54:
         72:63:da:11:88:f6:1e:30:70:fe:9e:71:2f:e1:69:9f:b2:68:
         e0:45:4f:48:40:24:d6:a9:91:56:83:44:12:15:d1:b9:0a:39:
         4c:0c:fd:91:58:b2:8c:32:87:30:a0:2d:c8:33:7b:a5:b3:a3:
         4f:c8:37:e2:4b:1a:06:1b:fe:8d:1a:86:f8:0e:29:89:e7:95:
         aa:65:4c:12:e2:8f:ec:67:3c:e6:85:b5:48:d5:d3:fc:6f:91:
         77:5f:2e:0c:93:f1:0f:b5:49:98:16:38:e2:d2:8a:73:05:85:
         d5:6c:de:df:09:3d:f8:53:6c:24:af:78:22:46:bf:01:62:ba:
         3a:f5:56:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:45 2024 by rpki-client on console-fra.rpki-client.org