Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/03EE880413F511EA8D120C65C4F9AE02.roa
File:                     03EE880413F511EA8D120C65C4F9AE02.roa (raw, json)
Hash identifier:          S5y331WliNZqXWWjOJuv3YKexz/b1+CG8n24v9FOM+4=
Subject key identifier:   83:3C:80:D0:80:E8:91:C1:7B:54:98:3E:A4:5B:DF:18:3C:38:6E:EE
Certificate issuer:       /CN=A91A6BF5/serialNumber=3E845EA84E11030BC2A1061308979F798A12113F
Certificate serial:       0AE9
Authority key identifier: 3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/03EE880413F511EA8D120C65C4F9AE02.roa
Signing time:             Fri 08 Dec 2023 19:46:44 +0000
ROA not before:           Fri 08 Dec 2023 19:46:44 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     136007
IP address blocks:        103.78.248.0/24 maxlen: 24
                          103.78.249.0/24 maxlen: 24
                          103.78.250.0/24 maxlen: 24
                          103.78.251.0/24 maxlen: 24
                          2400:10c0::/32 maxlen: 32
                          2400:10c0::/35 maxlen: 35
                          2400:10c0:2000::/35 maxlen: 35
                          2400:10c0:4000::/35 maxlen: 35
                          2400:10c0:6000::/35 maxlen: 35
                          2400:10c0:8000::/35 maxlen: 35
                          2400:10c0:a000::/35 maxlen: 35
                          2400:10c0:c000::/35 maxlen: 35
                          2400:10c0:e000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl
                          rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 20:23:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2793 (0xae9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6BF5/serialNumber=3E845EA84E11030BC2A1061308979F798A12113F
        Validity
            Not Before: Dec  8 19:46:44 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=657372a3-6b64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2e:2b:cd:b8:77:3e:22:c4:a4:12:70:f6:76:
                    f5:d3:c8:e1:e6:4c:af:17:a0:a0:cd:92:6c:61:f1:
                    d9:57:d8:de:49:e8:96:a8:2d:5d:ae:c6:59:ba:1f:
                    b3:e4:d9:02:fb:c8:96:2c:6e:cd:ec:bd:6c:50:58:
                    a9:05:60:af:76:22:63:03:6d:37:7c:38:87:d4:d4:
                    b7:f5:79:04:a3:71:82:3e:28:95:b0:52:35:04:fd:
                    a3:3a:44:e4:02:56:dc:b0:a3:cc:b7:40:ce:a0:f5:
                    61:53:44:38:3f:48:42:bd:4a:d2:c4:a2:b9:87:ce:
                    7f:37:b1:9f:23:c7:57:f2:b8:24:cb:a3:0a:d6:5a:
                    37:76:d0:e6:24:c6:ca:f1:a9:1e:a7:28:f1:e6:26:
                    c8:67:51:15:1d:9a:32:5e:8f:ed:22:61:5e:a3:c1:
                    67:d5:55:92:7c:92:c8:60:a8:d9:13:cc:db:95:20:
                    1a:6a:d1:cb:b1:1f:f7:f5:e6:f3:20:72:76:50:bd:
                    9d:49:18:a4:8f:3a:e5:d5:ef:32:b7:57:36:54:47:
                    6f:77:88:b5:84:58:22:41:f7:81:f3:ab:6f:7c:4c:
                    cd:45:8f:fd:bc:f3:9d:fc:98:17:e7:36:35:6b:af:
                    58:28:ed:f6:5e:6d:c6:d4:35:01:d4:95:51:c0:c2:
                    62:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3C:80:D0:80:E8:91:C1:7B:54:98:3E:A4:5B:DF:18:3C:38:6E:EE
            X509v3 Authority Key Identifier:
                keyid:3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/03EE880413F511EA8D120C65C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.248.0/22
                IPv6:
                  2400:10c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:c8:ca:eb:38:b4:7b:fe:ed:4c:56:8e:dd:7d:b1:07:54:83:
         80:a0:8f:bc:aa:45:00:52:7a:ae:60:39:8f:66:b9:e3:ee:94:
         34:fa:cf:1c:e0:1b:17:3b:c5:4f:37:03:f0:59:bc:50:9f:86:
         fa:24:a6:b2:b8:94:a3:0c:46:ba:ba:e7:61:6d:f1:6f:21:f6:
         ba:ad:e8:0a:f7:e9:01:bb:a8:cd:87:1b:de:4f:90:99:d9:05:
         b8:4a:e8:16:b3:5f:4a:0b:a8:9f:09:f1:04:60:2e:76:01:a7:
         6e:93:23:0f:06:72:f0:2f:97:ae:9f:65:a3:9c:ce:af:a0:10:
         9a:af:0c:8d:78:42:73:d1:30:10:e4:0c:e1:e8:3b:e2:a8:0f:
         49:78:db:a7:26:3b:76:59:63:19:fa:5b:77:6b:3b:4d:71:1c:
         5b:22:f7:59:c1:c6:69:6f:ce:f6:20:70:54:4f:d8:4f:b4:6a:
         71:ac:0a:2c:5c:72:aa:1c:81:39:63:25:28:64:8a:71:e4:e4:
         82:92:b9:53:d5:16:96:a9:1d:10:25:bb:7e:9a:82:2f:e4:53:
         5c:75:de:4e:63:2b:2a:33:25:92:5b:f9:24:a7:3a:f3:6b:4c:
         45:b8:73:6b:07:a2:3c:2d:b0:8b:13:c4:fc:80:3a:b5:19:c8:
         ef:4e:73:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 22:13:09 2024 by rpki-client on console-fra.rpki-client.org