Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/294325DC699711EEB317603DC4F9AE02.roa
File:                     294325DC699711EEB317603DC4F9AE02.roa (raw, json)
Hash identifier:          Hsp12OEUAxLgfWPa2BFXRQnGaC8ZbmcTs8T1lK+V734=
Subject key identifier:   50:0D:3A:63:BB:A5:BA:DC:01:E3:4D:A6:0D:53:1D:87:0F:F9:CF:AF
Certificate issuer:       /CN=A91A35A4/serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053
Certificate serial:       CD
Authority key identifier: 41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/294325DC699711EEB317603DC4F9AE02.roa
Signing time:             Mon 11 Nov 2024 03:57:45 +0000
ROA not before:           Mon 11 Nov 2024 03:57:45 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     151813
IP address blocks:        103.131.134.0/24 maxlen: 24
                          103.131.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl
                          rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A35A4/serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053
        Validity
            Not Before: Nov 11 03:57:45 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=673180b9-a30e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:47:02:9c:de:72:ee:12:16:65:fc:d1:90:67:
                    02:31:e6:60:90:4b:0f:84:34:df:c7:a5:2e:06:e2:
                    9e:9d:44:c7:3a:d7:31:97:40:ce:ca:19:0b:f9:e6:
                    7c:91:0c:d6:0d:c5:72:c0:12:24:7d:03:31:68:a2:
                    54:bd:93:e8:7b:7d:75:ff:d9:25:63:11:02:e8:8c:
                    2a:81:ed:49:5f:6e:3c:64:3c:87:90:6b:f1:b0:37:
                    86:62:66:5f:d3:3a:da:f8:3f:93:f0:6a:38:ce:94:
                    0a:29:c5:57:6b:8b:3e:50:f6:e5:6b:e6:d4:62:18:
                    1f:cb:9b:da:e1:a6:1c:c3:53:2c:15:d1:aa:eb:cc:
                    41:5b:d1:2e:c7:16:79:28:80:2d:72:98:36:ae:1a:
                    e0:7a:b7:92:ca:2b:10:a1:49:ec:93:d7:22:6f:53:
                    e5:c8:4e:61:2b:b7:0c:d4:70:29:4e:8d:c6:8e:32:
                    7c:7e:c0:0d:70:f5:ed:72:ff:02:a3:08:61:3b:7c:
                    fd:21:e5:f4:16:d1:50:71:0b:61:59:95:8d:52:9a:
                    7d:36:19:05:07:a8:ec:b2:fa:36:d4:9a:be:d2:69:
                    fa:02:a9:d6:a4:d9:2c:38:95:f2:14:38:2c:da:97:
                    52:f7:9d:df:08:76:9c:f7:ec:4e:c8:d2:fc:1e:47:
                    d1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0D:3A:63:BB:A5:BA:DC:01:E3:4D:A6:0D:53:1D:87:0F:F9:CF:AF
            X509v3 Authority Key Identifier:
                keyid:41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/294325DC699711EEB317603DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:05:02:d2:8d:47:46:db:9b:58:4a:db:af:81:ae:29:6c:77:
         8a:ad:9c:27:25:95:71:19:98:21:0e:35:1e:ed:8c:9f:06:6d:
         cd:c3:23:13:e0:3e:0d:16:c3:41:b1:45:c7:47:0b:14:9c:f6:
         65:a3:6a:82:b2:09:76:96:1a:ef:f6:6a:c9:c8:bc:6d:92:6f:
         d2:50:0e:5d:b3:22:91:2a:64:bc:1d:a5:a0:96:69:25:01:af:
         10:ab:61:8f:c0:5d:1d:16:e4:2f:9d:df:e2:91:80:cf:9e:4b:
         b7:26:d9:98:40:fd:8a:34:c0:40:60:e6:c2:33:c3:ed:3b:86:
         c4:34:1c:44:ac:0c:16:9e:aa:f8:46:a4:ac:fe:ff:16:3e:aa:
         62:0b:62:43:2e:c8:63:fb:4c:2b:e1:95:79:de:38:cc:20:ce:
         7d:73:ec:03:3f:ee:a4:13:e8:a9:93:52:cf:8e:75:24:bc:b4:
         05:1b:ea:04:8e:db:bc:db:fa:b1:6e:29:1e:1f:0a:b8:ad:51:
         3c:c5:6e:d4:b0:81:61:90:60:30:31:cd:0a:ef:4f:7d:5d:ab:
         63:55:52:22:56:65:be:6f:eb:a6:17:02:e9:d6:37:2d:9d:a9:
         0d:29:c6:e5:fe:dd:95:ec:ac:fd:82:c0:34:65:6c:c5:11:a4:
         b3:6c:f1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:54 2024 by rpki-client on console-fra.rpki-client.org