Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/C36AEA764F7911ECAA7C6A6FC4F9AE02.roa
File:                     C36AEA764F7911ECAA7C6A6FC4F9AE02.roa (raw, json)
Hash identifier:          6pwSl/tH7jpCf2nCpLbxQOYWHD+R7qNFnABfqWkqa5o=
Subject key identifier:   07:95:4C:DB:DD:4B:F0:1F:0F:6E:03:B4:1D:A0:B0:01:17:D2:99:D1
Certificate issuer:       /CN=A91609E6/serialNumber=4E4CB4B9151E7BAE112BEC5359C31C95580EE031
Certificate serial:       03F2
Authority key identifier: 4E:4C:B4:B9:15:1E:7B:AE:11:2B:EC:53:59:C3:1C:95:58:0E:E0:31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/C36AEA764F7911ECAA7C6A6FC4F9AE02.roa
Signing time:             Fri 25 Oct 2024 00:44:15 +0000
ROA not before:           Fri 25 Oct 2024 00:44:15 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     147040
IP address blocks:        103.173.114.0/24 maxlen: 24
                          103.173.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.crl
                          rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1010 (0x3f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91609E6/serialNumber=4E4CB4B9151E7BAE112BEC5359C31C95580EE031
        Validity
            Not Before: Oct 25 00:44:15 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=671ae9df-f3cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ad:79:fa:06:4d:48:51:a1:6e:12:00:5d:f1:
                    f2:47:d7:40:69:39:c9:22:01:ed:bc:b7:c5:e8:36:
                    c2:5d:c0:94:76:44:6d:2f:2b:6c:62:2a:65:6b:3d:
                    06:78:e4:cd:22:75:bc:e9:49:25:85:63:a0:21:9a:
                    0f:59:a9:b2:15:7c:1e:6e:fa:16:c8:31:49:ab:be:
                    e5:30:71:6c:4f:84:07:d0:02:32:bb:7d:6e:6a:bb:
                    d8:4a:8a:01:c5:b6:5c:e4:71:fe:55:af:06:d3:cd:
                    bc:bc:5d:72:bc:87:49:e6:74:17:68:9d:e7:dc:4b:
                    2a:ed:5d:3e:e0:72:bc:2c:69:05:3c:fd:38:46:e4:
                    58:15:09:1b:8f:16:94:2d:45:9f:bb:3c:50:21:08:
                    9c:39:78:dc:76:15:d4:93:53:bb:3b:34:c2:f1:88:
                    b8:63:9b:8c:9e:6d:21:0f:e6:94:5f:69:b4:00:7b:
                    9f:fc:56:7d:c6:2c:6a:8d:c8:77:ca:ba:e0:6f:11:
                    5d:11:24:d8:f4:fb:92:84:95:32:9b:d2:69:1f:03:
                    57:3b:91:e9:39:ef:6e:9d:0d:68:01:9d:39:f1:9b:
                    ba:c4:82:c4:ec:41:11:0a:cc:88:d2:aa:75:8d:01:
                    4a:2a:60:a1:f9:97:b5:23:99:99:8f:ab:cf:1e:8a:
                    51:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:95:4C:DB:DD:4B:F0:1F:0F:6E:03:B4:1D:A0:B0:01:17:D2:99:D1
            X509v3 Authority Key Identifier:
                keyid:4E:4C:B4:B9:15:1E:7B:AE:11:2B:EC:53:59:C3:1C:95:58:0E:E0:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/C36AEA764F7911ECAA7C6A6FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:77:e9:9b:eb:d4:a3:62:02:0d:92:0b:65:ca:46:0e:f4:9b:
         b9:ed:7f:fd:c8:ee:f7:25:ae:40:9b:70:11:ab:23:17:2e:15:
         24:a0:a3:1b:87:9e:34:dd:5d:94:37:c4:ac:ef:bb:b0:93:27:
         9c:42:cb:67:63:81:0b:8c:ee:45:60:17:c3:4e:bd:97:69:ec:
         fe:c8:94:1e:be:dd:97:a6:82:80:7a:8a:93:ea:0f:a4:66:d6:
         19:bd:3d:14:5a:32:74:82:aa:81:b5:12:20:87:bd:ca:2e:07:
         84:fb:61:38:61:cb:91:9f:dd:68:96:2e:a8:ae:b8:54:dd:4d:
         3f:99:f6:9e:9c:f4:8a:63:ea:43:f7:ca:18:ba:54:41:35:84:
         8a:b3:d0:e4:60:58:e1:47:1e:19:96:5f:0d:7c:31:7d:70:df:
         a0:2e:6b:b8:b6:de:4b:c2:40:c4:50:94:f0:fa:c7:23:f4:1e:
         0c:9b:07:e9:03:03:ea:d8:f6:78:bb:e2:1b:41:83:92:d3:d2:
         ab:5f:0d:d5:f1:08:3e:e4:89:e7:e0:87:5c:39:a3:43:46:13:
         81:b4:80:fb:d2:a3:87:5e:8c:84:32:0d:5c:f7:12:df:59:17:
         9c:0e:62:02:00:ac:9d:0a:b4:f1:ef:eb:6d:9c:3e:07:af:49:
         33:d4:20:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:22 2024 by rpki-client on console-ams.rpki-client.org