Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/430E6130F4B011E99BB3425CC4F9AE02.roa
File:                     430E6130F4B011E99BB3425CC4F9AE02.roa (raw, json)
Hash identifier:          srN4MybkybSjP5c+l2pI3OXFvu05+GspG1m/SkxGd6Y=
Subject key identifier:   61:15:A0:6A:DE:A8:5D:8D:8A:88:FA:97:7F:53:2A:A6:64:93:86:A5
Certificate issuer:       /CN=A91983E5/serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536
Certificate serial:       0C30
Authority key identifier: 70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/430E6130F4B011E99BB3425CC4F9AE02.roa
Signing time:             Sat 02 Nov 2024 18:27:34 +0000
ROA not before:           Sat 02 Nov 2024 18:27:34 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     139670
IP address blocks:        103.143.118.0/23 maxlen: 23
                          103.143.118.0/24 maxlen: 24
                          103.143.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl
                          rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:12:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3120 (0xc30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91983E5/serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536
        Validity
            Not Before: Nov  2 18:27:34 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=67266f16-582b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:86:ae:16:b3:1d:7c:c9:f0:b0:4b:2f:f7:e7:
                    cf:a1:85:f7:32:f8:ce:2d:27:15:e4:c9:9a:a8:0c:
                    ac:9f:c2:7e:25:18:8c:6d:30:97:7e:e1:be:18:d7:
                    c5:5b:8f:66:0b:a1:bd:b5:59:a2:16:60:04:a8:38:
                    8e:a6:ce:53:f7:8e:9e:f5:31:bc:b9:1c:1b:c6:6e:
                    33:fa:98:dc:91:34:67:92:b6:33:85:9e:d1:79:1f:
                    bd:9f:a5:ee:be:31:cd:d3:eb:9b:96:a6:52:30:e1:
                    c9:78:5f:50:d2:09:0f:63:21:be:76:3f:20:23:ab:
                    55:bc:f2:96:6d:5d:93:c7:68:e0:e5:e2:a5:f0:4b:
                    6c:4d:a8:69:e1:26:b2:ec:71:98:b1:cf:4b:10:7c:
                    ec:4f:2c:b3:be:f0:a7:0f:57:2c:a5:9c:21:22:0d:
                    e5:00:f2:f3:a9:be:59:51:9e:d7:73:c3:f8:33:27:
                    4c:bb:57:3e:c7:bb:a4:f9:8b:56:a5:76:01:ab:86:
                    22:2c:5a:55:d7:4a:53:01:fd:b8:94:40:9a:b2:5e:
                    d3:12:ad:c9:75:71:20:90:05:d3:c4:6a:1d:ce:3b:
                    de:96:b7:96:88:2f:5d:6d:b7:93:6a:03:3b:7b:94:
                    5d:b1:36:41:1d:75:63:18:df:9f:b8:64:de:a1:b0:
                    11:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:15:A0:6A:DE:A8:5D:8D:8A:88:FA:97:7F:53:2A:A6:64:93:86:A5
            X509v3 Authority Key Identifier:
                keyid:70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/430E6130F4B011E99BB3425CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:64:e5:3d:81:6e:ff:29:cf:af:fc:51:14:a8:a8:56:5e:97:
         8e:0f:45:be:01:d8:a1:12:bd:08:4e:f8:08:a7:51:41:05:2e:
         df:19:29:e2:01:fa:64:70:43:17:15:82:99:8c:ea:8b:81:f7:
         fe:13:dc:90:8a:8f:72:b9:90:ee:30:69:e0:82:61:07:da:17:
         9b:58:e2:8f:3f:ac:f0:83:53:0b:d2:b3:db:1e:73:d6:2a:15:
         80:26:f0:cb:d0:87:0d:06:a1:33:37:82:72:c8:44:94:da:56:
         53:99:2f:e0:8f:19:59:76:4e:95:b1:2e:21:68:64:63:4a:f8:
         ce:06:fe:9a:fc:90:4c:4a:62:62:bd:1d:9e:ef:3a:00:68:dd:
         74:18:e5:39:97:97:27:de:8d:d1:83:8c:5d:c1:54:12:0b:43:
         1d:a8:44:ba:35:70:b3:fa:17:de:86:17:a8:bb:08:1a:40:37:
         30:7f:a8:b6:0c:13:d4:9a:7c:6e:90:95:df:78:41:1a:f8:68:
         43:71:09:f0:68:50:a1:a4:ca:72:2d:23:b9:32:f2:ae:98:70:
         a0:df:c3:ae:ca:f7:e9:f0:31:cb:82:f0:50:b7:a4:85:30:e2:
         35:75:5d:9d:9d:65:b5:8b:8a:d1:df:ac:cb:e9:68:04:13:f9:
         8a:a0:d4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org