Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/278C467E4DF911EE8927F265C4F9AE02.roa
File:                     278C467E4DF911EE8927F265C4F9AE02.roa (raw, json)
Hash identifier:          ocnHIom5bfqYmJrUux5YVIb0Vcn2/L2ylLJbcgISr0U=
Subject key identifier:   85:BD:CD:46:69:48:BA:12:11:37:22:02:37:9C:88:A5:22:CC:89:44
Certificate issuer:       /CN=A91423FF/serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C
Certificate serial:       AE
Authority key identifier: C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/278C467E4DF911EE8927F265C4F9AE02.roa
Signing time:             Thu 01 Aug 2024 06:07:51 +0000
ROA not before:           Thu 01 Aug 2024 06:07:51 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     151482
IP address blocks:        103.230.130.0/23 maxlen: 24
                          2401:1220::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl
                          rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91423FF/serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C
        Validity
            Not Before: Aug  1 06:07:51 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66ab2637-212a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:58:23:9d:5e:91:7f:e3:a1:5f:1c:6e:c7:b2:
                    28:29:c1:2f:2a:6c:9c:46:08:39:16:dc:06:7d:d3:
                    e6:ef:2c:00:cf:8d:93:95:5e:cc:dc:7b:ba:f8:1d:
                    37:d3:91:0c:b7:51:4c:a7:b5:b5:b2:09:54:22:89:
                    b8:35:bc:fd:4f:07:84:80:e0:33:7f:a1:48:ec:81:
                    47:c3:50:a8:46:bd:17:e7:03:7a:c0:70:df:92:ab:
                    63:fd:14:4a:d0:2a:23:13:0c:27:50:5a:50:6e:d4:
                    3a:e8:83:ae:40:e3:b8:46:2d:bb:dd:28:c9:69:61:
                    44:23:3c:2f:07:59:af:73:b6:e9:50:7f:35:65:2b:
                    03:91:c0:97:76:85:aa:f0:cf:f4:b5:a3:a2:f2:f6:
                    e1:19:3c:2c:c4:40:cf:dc:00:a6:70:a0:6f:04:f1:
                    22:8c:08:3f:a8:c3:66:28:02:f9:c6:c6:5e:13:6a:
                    b7:52:f5:f8:a1:ad:87:42:b7:ee:97:b4:98:32:0f:
                    63:48:37:1f:0d:db:17:6a:3a:0e:6c:21:65:fb:c1:
                    8b:78:96:39:df:3f:00:ff:e6:ef:59:c4:e8:44:38:
                    d9:e1:db:01:05:44:96:16:61:20:b5:89:07:8e:b9:
                    22:d5:49:f7:63:98:78:1e:fe:00:79:73:3a:a4:5e:
                    8d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BD:CD:46:69:48:BA:12:11:37:22:02:37:9C:88:A5:22:CC:89:44
            X509v3 Authority Key Identifier:
                keyid:C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/278C467E4DF911EE8927F265C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.130.0/23
                IPv6:
                  2401:1220::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:f5:09:83:b9:be:d0:02:86:46:67:bd:cd:14:ed:a1:bf:92:
         03:7b:83:5c:db:c1:35:a3:34:7f:fb:43:ec:39:91:a6:87:3f:
         a7:0c:c7:66:36:08:ae:f2:5a:a0:7a:c0:ce:22:bf:50:94:0f:
         47:a2:7f:c6:de:62:dd:c4:d0:f8:15:f4:8e:32:ac:68:a9:8a:
         90:b8:88:92:36:05:b0:5a:77:43:83:8f:4a:3d:62:0a:4e:e4:
         8c:4b:f0:51:6e:20:b7:b3:b0:ec:59:16:2e:a4:c2:2a:8e:15:
         c2:e1:be:a0:bc:3a:b8:f7:ce:fd:94:f6:49:e0:34:0a:86:1c:
         fc:8e:83:c4:73:a9:71:e8:97:02:86:f0:7f:e4:44:62:8b:40:
         66:a8:e3:ed:2d:48:fc:79:47:6a:3c:e1:d4:da:ca:4c:2a:ff:
         49:7a:20:9f:25:50:5a:3a:a1:39:ca:01:1d:b6:08:b6:16:9a:
         f2:17:0c:7a:fa:0b:f5:49:0a:77:41:a8:a5:37:d5:42:4b:cf:
         70:00:95:d6:29:6d:23:7e:82:78:ad:65:d0:b0:a4:78:51:1b:
         e7:b8:e4:5e:69:e1:37:b7:ad:de:bf:6d:e2:66:eb:67:db:80:
         95:a0:48:84:fb:43:54:9e:fa:c8:9f:8d:4b:dd:01:b5:07:24:
         df:4f:5f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:06 2024 by rpki-client on console-ams.rpki-client.org