Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/93441F8211CB11EEB8151734C4F9AE02.roa
File:                     93441F8211CB11EEB8151734C4F9AE02.roa (raw, json)
Hash identifier:          hIudSvFY2AsPTk+bMlzkhMZSMDa/NBtr6ArnMu6ko7M=
Subject key identifier:   6A:35:CF:6D:4F:BF:6E:76:08:BC:DA:AC:CD:00:29:D3:89:9B:03:1D
Certificate issuer:       /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial:       3468
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/93441F8211CB11EEB8151734C4F9AE02.roa
Signing time:             Thu 14 Nov 2024 15:31:12 +0000
ROA not before:           Thu 14 Nov 2024 15:31:12 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     21859
IP address blocks:        103.21.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
                          rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13416 (0x3468)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BF76
        Validity
            Not Before: Nov 14 15:31:12 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=673617bf-48f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8c:aa:12:c9:54:69:62:16:ad:33:76:04:b3:
                    ca:04:d7:0e:3d:95:b3:ee:8a:29:e7:74:71:d9:56:
                    54:eb:6a:d3:47:fd:1a:76:ee:bf:22:2b:11:c7:dd:
                    5f:c2:f3:53:42:bd:56:0f:e4:47:a7:ce:1d:44:38:
                    5d:aa:cd:4d:e3:7b:a2:70:66:10:96:31:e0:5b:aa:
                    d8:0d:1b:da:ff:b8:ee:45:b2:c7:0f:71:4e:19:8f:
                    5f:cb:04:a5:e6:60:f7:8e:11:51:78:bc:56:db:08:
                    5c:e9:4e:f8:2d:9a:cd:ed:31:9f:4e:bb:9c:6c:62:
                    6d:24:97:c4:64:e4:aa:e1:e5:ef:26:74:3d:14:d5:
                    b4:a8:ec:fd:53:c8:64:13:c0:1b:7f:83:67:f2:db:
                    60:cb:d2:6c:d3:b0:06:ec:65:21:60:3c:b9:2d:3a:
                    ce:1c:e3:64:dc:ad:b5:dd:1d:34:31:ad:2f:bb:33:
                    15:06:36:ff:d9:bc:81:0b:c8:2a:b0:bc:e3:30:2e:
                    0f:ec:e6:46:90:dd:ec:eb:29:b6:06:17:20:db:4e:
                    e8:6d:47:5f:91:95:18:ac:36:54:63:e0:db:71:d7:
                    e9:d6:d9:c4:8f:2b:27:b1:58:ff:cb:8f:e3:c7:78:
                    c0:9f:c7:ad:eb:61:a6:de:f0:b5:93:d9:75:22:d6:
                    5c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:35:CF:6D:4F:BF:6E:76:08:BC:DA:AC:CD:00:29:D3:89:9B:03:1D
            X509v3 Authority Key Identifier:
                keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/93441F8211CB11EEB8151734C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:3a:c4:27:08:83:bf:44:09:02:97:ce:3d:41:0f:82:f4:74:
         44:42:c7:d7:cd:bc:1f:d2:2b:8b:41:5d:e8:74:68:82:1a:38:
         4f:f2:20:6e:26:6f:2f:eb:98:44:88:df:88:68:0a:b2:67:d5:
         b6:ca:52:54:cf:f6:22:0e:0c:17:d5:40:6d:36:c0:17:73:d8:
         5a:1b:ce:86:7c:0c:90:aa:10:fb:3a:0d:2c:4d:a4:5c:d7:9f:
         74:19:70:ab:de:e7:2e:c2:61:0c:96:25:86:42:7e:df:5a:20:
         22:ec:d0:d5:77:12:5a:76:c8:07:3e:e0:8c:89:fa:1c:38:36:
         cc:53:35:ef:5e:dd:07:43:0a:49:2a:d0:9e:3e:ff:e1:6d:17:
         99:4d:a8:2f:03:57:7e:e1:37:f1:8d:25:25:8a:52:d0:f0:d4:
         5f:2d:c6:27:dc:64:7d:47:a9:a9:8b:e3:2b:1f:4f:01:e5:2f:
         4e:b7:3b:a2:e8:07:75:dd:2b:cf:0f:58:54:7f:55:da:e4:ab:
         ba:9e:f0:bd:ba:ad:38:fa:77:5d:fe:ce:8a:e4:d8:af:4a:b5:
         29:43:3f:1e:29:13:89:00:ca:02:be:bd:37:96:78:56:47:51:
         2a:bf:00:0b:02:78:09:6f:6f:bd:8e:b0:fe:78:d2:ef:bd:45:
         ba:58:02:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:50:07 2025 by rpki-client