Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/BDDB04B633DC11EF82BB2E27C4F9AE02.roa
File:                     BDDB04B633DC11EF82BB2E27C4F9AE02.roa (raw, json)
Hash identifier:          5c/qR2mpD5OqrfddW7wi4YgOjtRseskty4kGshoVWVs=
Subject key identifier:   F1:2D:16:9A:FB:A6:AC:1F:E9:A5:44:53:0C:BB:C4:31:CE:F7:39:6B
Certificate issuer:       /CN=A91340D8/serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E
Certificate serial:       01B6
Authority key identifier: 1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/BDDB04B633DC11EF82BB2E27C4F9AE02.roa
Signing time:             Fri 13 Sep 2024 05:48:07 +0000
ROA not before:           Fri 13 Sep 2024 05:48:07 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     132401
IP address blocks:        103.72.193.0/24 maxlen: 24
                          2001:df4:2a00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl
                          rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:44:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438 (0x1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91340D8/serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E
        Validity
            Not Before: Sep 13 05:48:07 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66e3d216-2dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:05:43:f8:eb:6e:3a:2c:7b:6b:4c:e5:86:02:
                    1b:2e:dc:3e:73:0c:01:70:83:35:cb:4c:39:18:45:
                    c1:48:fe:47:71:0c:07:32:db:e9:cb:9e:2c:e8:3a:
                    7f:f2:5b:59:39:6c:a8:80:cd:4b:c0:e9:25:f0:58:
                    b8:16:0c:a1:73:71:61:d4:bf:b0:b6:21:37:8e:c4:
                    c0:70:6b:da:80:e3:65:50:71:72:62:b8:1d:5a:20:
                    e5:40:19:d2:24:21:fa:e3:e2:27:62:ae:de:35:0d:
                    d8:1c:02:b9:c8:b9:41:a3:7f:fa:fb:fb:37:7c:71:
                    59:22:4e:95:3f:ee:4a:13:a2:07:94:76:e0:0e:d7:
                    6c:09:84:86:cc:fc:c3:31:3d:d7:d3:ae:e5:bb:67:
                    f9:75:65:37:18:a7:13:5e:d9:b1:04:11:0f:51:06:
                    50:f4:16:7d:2d:dc:d4:7e:32:17:ca:61:ca:87:3c:
                    63:63:2a:ed:ab:92:a4:0b:22:86:f6:94:04:ad:28:
                    ca:3a:d1:eb:fd:7b:d6:2e:98:0e:d8:11:65:18:3f:
                    8d:a0:b4:13:7f:a1:ab:86:52:c8:de:a4:21:45:58:
                    23:fb:4f:b2:91:52:15:f9:38:51:09:25:a5:26:9d:
                    ca:71:23:60:56:da:00:49:8f:b5:22:72:a4:c0:96:
                    ad:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2D:16:9A:FB:A6:AC:1F:E9:A5:44:53:0C:BB:C4:31:CE:F7:39:6B
            X509v3 Authority Key Identifier:
                keyid:1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/BDDB04B633DC11EF82BB2E27C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.193.0/24
                IPv6:
                  2001:df4:2a00::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:e3:9f:79:21:66:9f:e7:9c:83:e0:c9:74:e1:d3:8e:07:86:
         9c:3c:35:60:56:3e:af:7e:87:72:8c:be:86:b1:86:94:72:01:
         07:38:be:49:1a:ed:c0:82:ba:c3:41:5e:8f:c7:11:d9:a9:8f:
         98:35:92:9f:87:5c:38:b9:5e:e5:b1:89:0e:2b:fb:42:7b:f2:
         dd:aa:95:4c:c4:22:0e:2d:a7:03:8a:10:a8:f3:df:76:32:cb:
         b5:28:ac:33:d6:a0:3c:4a:ee:e2:e6:9e:e2:6d:54:d1:0f:58:
         d4:9e:81:1a:c6:b4:ea:10:92:86:9c:aa:75:4f:64:ff:d9:a4:
         7d:ba:ba:fa:de:6a:c3:dd:2a:b1:05:d3:3c:bb:51:03:39:4b:
         14:f2:10:fa:a0:e0:1d:72:dd:43:84:8c:15:9e:de:20:14:6b:
         a1:82:1f:47:38:5e:4b:4b:f7:bb:d9:28:fd:bc:dc:b4:f0:a5:
         21:56:d3:62:01:c5:a5:c6:ce:fa:12:d0:33:fb:06:0c:24:14:
         35:97:7a:6f:ca:85:20:7c:84:c4:d0:d3:3e:b4:e7:fc:30:9c:
         41:62:c7:a9:03:4d:55:71:9c:28:e3:6a:28:80:3d:f2:a4:eb:
         d6:8a:af:45:1a:48:e3:5d:30:0f:95:b9:55:e8:47:44:6a:3f:
         0b:dd:c2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:37 2024 by rpki-client on console-ams.rpki-client.org