Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/5694D344791B11EEA64C016BC4F9AE02.roa
File:                     5694D344791B11EEA64C016BC4F9AE02.roa (raw, json)
Hash identifier:          cg93R23INGR8fe5V8I1v0XqkWQVYbzGg1oKwaVZnx2Q=
Subject key identifier:   7D:97:46:92:63:17:2C:33:72:CD:F3:AB:AA:81:DF:9D:02:45:D5:F8
Certificate issuer:       /CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91
Certificate serial:       AB
Authority key identifier: 00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/5694D344791B11EEA64C016BC4F9AE02.roa
Signing time:             Tue 03 Sep 2024 06:48:49 +0000
ROA not before:           Tue 03 Sep 2024 06:48:49 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     133050
IP address blocks:        103.247.184.0/24 maxlen: 24
                          103.247.185.0/24 maxlen: 24
                          103.247.186.0/24 maxlen: 24
                          103.247.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl
                          rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91
        Validity
            Not Before: Sep  3 06:48:49 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d6b150-ff28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:90:12:d7:fb:c3:53:47:12:b3:46:d4:75:7d:
                    e3:e2:d2:1f:91:93:aa:ee:76:34:27:73:0c:26:5a:
                    3b:75:ca:f4:63:ba:37:15:82:d8:e5:31:60:3f:78:
                    8d:61:94:01:8d:be:14:ae:6d:7c:18:6c:85:29:5f:
                    3e:6b:d6:15:71:c4:ed:db:76:26:03:71:13:1a:a9:
                    f8:d9:f5:c0:9f:44:7b:0d:2b:94:de:11:4d:03:38:
                    87:63:a0:be:5e:9e:06:0e:00:5e:f7:b0:f9:84:1e:
                    d1:c7:f8:96:d3:7e:ee:e1:22:5f:b0:42:1f:81:19:
                    27:e7:23:3d:1b:73:14:bc:58:ae:27:6a:16:e6:07:
                    6c:f1:50:df:0a:72:8c:87:4f:fc:a3:c1:2a:c7:3b:
                    df:4a:8a:32:f3:96:9a:bd:0b:5d:cc:6a:45:3d:6c:
                    d9:b5:6f:97:70:0c:18:57:82:11:ca:18:00:72:5b:
                    33:f1:12:e4:ce:2a:17:98:0c:41:a9:c8:f9:38:59:
                    16:55:56:70:21:7c:eb:8f:eb:cc:98:ab:63:7f:a3:
                    90:26:72:89:b8:9d:e5:7e:6f:53:c6:6a:14:82:43:
                    f6:71:cd:d4:d0:54:80:03:85:2c:55:fe:6f:92:dc:
                    fa:18:dd:a4:17:7c:a3:de:40:7a:1f:3b:99:99:bb:
                    a1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:97:46:92:63:17:2C:33:72:CD:F3:AB:AA:81:DF:9D:02:45:D5:F8
            X509v3 Authority Key Identifier:
                keyid:00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/5694D344791B11EEA64C016BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:5e:6e:33:99:3c:e5:2b:c9:d7:64:be:e2:5b:a4:41:7e:13:
         a5:7d:e8:26:cf:34:fc:bf:18:01:8a:95:aa:06:57:92:69:82:
         c9:6d:d5:22:3e:f2:2f:4b:85:85:99:c7:66:94:98:5c:35:2a:
         fb:1c:70:8b:1a:d7:31:c5:de:13:4f:97:3f:e0:16:f6:75:cc:
         5e:30:ea:17:2e:49:0e:17:8e:90:05:95:45:ed:6c:f3:63:07:
         2d:79:6e:26:e6:5b:3a:e6:c7:34:dc:09:55:89:ba:5f:11:3a:
         bc:b9:ee:a4:47:71:4c:01:ff:1a:51:4d:95:bf:ac:e8:e5:b5:
         20:12:e0:eb:e5:56:f1:b6:8c:c3:60:31:dc:72:dc:4f:bb:86:
         2b:99:70:a5:24:83:63:6c:51:eb:51:22:0e:75:32:38:62:ef:
         14:c1:34:51:11:23:9c:70:5b:9a:7e:db:81:96:c1:8e:b0:b2:
         a3:d9:13:1e:71:28:60:0d:06:ba:ba:66:20:5b:db:91:ff:40:
         15:cb:f2:50:f7:31:76:e7:6f:db:84:cb:58:2e:53:8e:0a:e8:
         50:72:c8:ab:b6:5e:08:52:88:ac:ee:20:eb:6e:a4:46:96:66:
         4d:8c:8f:23:d6:43:d3:95:a2:c1:a6:0f:e1:a7:34:61:c9:0c:
         f4:fa:f8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:08 2024 by rpki-client on console-ams.rpki-client.org