Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/13C1EDA8767911EE9A957930C4F9AE02.roa
File:                     13C1EDA8767911EE9A957930C4F9AE02.roa (raw, json)
Hash identifier:          fwsN8+X2NyhZzJXRx7yY58ks0WUJR98aQpYJ1O4lV4c=
Subject key identifier:   B0:79:FD:3A:2E:C3:78:06:F8:10:E2:53:2D:2E:B7:C9:C1:07:96:30
Certificate issuer:       /CN=A91A9D0F/serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2
Certificate serial:       0E73
Authority key identifier: 88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/13C1EDA8767911EE9A957930C4F9AE02.roa
Signing time:             Sat 24 Feb 2024 18:36:42 +0000
ROA not before:           Sat 24 Feb 2024 18:36:41 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     138575
IP address blocks:        103.133.140.0/24 maxlen: 24
                          103.133.141.0/24 maxlen: 24
                          103.133.142.0/24 maxlen: 24
                          103.133.143.0/24 maxlen: 24
                          2404:4d40::/32 maxlen: 32
                          2404:4d40:1000::/36 maxlen: 36
                          2404:4d40:1000::/40 maxlen: 40
                          2404:4d40:1001::/48 maxlen: 48
                          2404:4d40:1002::/48 maxlen: 48
                          2404:4d40:1003::/48 maxlen: 48
                          2404:4d40:1004::/48 maxlen: 48
                          2404:4d40:1005::/48 maxlen: 48
                          2404:4d40:1006::/48 maxlen: 48
                          2404:4d40:1007::/48 maxlen: 48
                          2404:4d40:1008::/48 maxlen: 48
                          2404:4d40:1009::/48 maxlen: 48
                          2404:4d40:100a::/48 maxlen: 48
                          2404:4d40:100b::/48 maxlen: 48
                          2404:4d40:100c::/48 maxlen: 48
                          2404:4d40:100d::/48 maxlen: 48
                          2404:4d40:100e::/48 maxlen: 48
                          2404:4d40:100f::/48 maxlen: 48
                          2404:4d40:1010::/48 maxlen: 48
                          2404:4d40:1011::/48 maxlen: 48
                          2404:4d40:1012::/48 maxlen: 48
                          2404:4d40:1013::/48 maxlen: 48
                          2404:4d40:1014::/48 maxlen: 48
                          2404:4d40:1015::/48 maxlen: 48
                          2404:4d40:1016::/48 maxlen: 48
                          2404:4d40:1017::/48 maxlen: 48
                          2404:4d40:1018::/48 maxlen: 48
                          2404:4d40:1019::/48 maxlen: 48
                          2404:4d40:101a::/48 maxlen: 48
                          2404:4d40:101b::/48 maxlen: 48
                          2404:4d40:101c::/48 maxlen: 48
                          2404:4d40:101d::/48 maxlen: 48
                          2404:4d40:101e::/48 maxlen: 48
                          2404:4d40:101f::/48 maxlen: 48
                          2404:4d40:1020::/48 maxlen: 48
                          2404:4d40:1021::/48 maxlen: 48
                          2404:4d40:1022::/48 maxlen: 48
                          2404:4d40:1100::/40 maxlen: 40
                          2404:4d40:1100::/48 maxlen: 48
                          2404:4d40:1101::/48 maxlen: 48
                          2404:4d40:1102::/48 maxlen: 48
                          2404:4d40:1103::/48 maxlen: 48
                          2404:4d40:1104::/46 maxlen: 46
                          2404:4d40:1104::/48 maxlen: 48
                          2404:4d40:1105::/48 maxlen: 48
                          2404:4d40:1106::/48 maxlen: 48
                          2404:4d40:1107::/48 maxlen: 48
                          2404:4d40:1108::/48 maxlen: 48
                          2404:4d40:1109::/48 maxlen: 48
                          2404:4d40:110a::/48 maxlen: 48
                          2404:4d40:110b::/48 maxlen: 48
                          2404:4d40:110c::/48 maxlen: 48
                          2404:4d40:110d::/48 maxlen: 48
                          2404:4d40:110e::/48 maxlen: 48
                          2404:4d40:110f::/48 maxlen: 48
                          2404:4d40:1110::/48 maxlen: 48
                          2404:4d40:1111::/48 maxlen: 48
                          2404:4d40:1112::/47 maxlen: 48
                          2404:4d40:1114::/46 maxlen: 48
                          2404:4d40:1118::/45 maxlen: 48
                          2404:4d40:1120::/43 maxlen: 48
                          2404:4d40:1140::/42 maxlen: 48
                          2404:4d40:1180::/41 maxlen: 48
                          2404:4d40:1200::/40 maxlen: 48
                          2404:4d40:1300::/40 maxlen: 48
                          2404:4d40:1400::/40 maxlen: 40
                          2404:4d40:1500::/40 maxlen: 40
                          2404:4d40:1600::/40 maxlen: 40
                          2404:4d40:1700::/40 maxlen: 40
                          2404:4d40:1800::/40 maxlen: 40
                          2404:4d40:1900::/40 maxlen: 40
                          2404:4d40:1a00::/40 maxlen: 40
                          2404:4d40:1b00::/40 maxlen: 40
                          2404:4d40:1c00::/40 maxlen: 40
                          2404:4d40:1d00::/40 maxlen: 40
                          2404:4d40:1e00::/40 maxlen: 40
                          2404:4d40:1f00::/40 maxlen: 40
                          2404:4d40:2000::/36 maxlen: 36
                          2404:4d40:2000::/40 maxlen: 40
                          2404:4d40:2100::/40 maxlen: 40
                          2404:4d40:2200::/40 maxlen: 40
                          2404:4d40:2300::/40 maxlen: 40
                          2404:4d40:2400::/40 maxlen: 40
                          2404:4d40:2500::/40 maxlen: 40
                          2404:4d40:2600::/40 maxlen: 40
                          2404:4d40:2700::/40 maxlen: 40
                          2404:4d40:2800::/40 maxlen: 40
                          2404:4d40:2900::/40 maxlen: 40
                          2404:4d40:2a00::/40 maxlen: 40
                          2404:4d40:2b00::/40 maxlen: 40
                          2404:4d40:2c00::/40 maxlen: 40
                          2404:4d40:2d00::/40 maxlen: 40
                          2404:4d40:2e00::/40 maxlen: 40
                          2404:4d40:2f00::/40 maxlen: 40
                          2404:4d40:3000::/36 maxlen: 36
                          2404:4d40:4000::/36 maxlen: 36
                          2404:4d40:4000::/40 maxlen: 40
                          2404:4d40:5000::/36 maxlen: 36
                          2404:4d40:6000::/36 maxlen: 36
                          2404:4d40:7000::/36 maxlen: 36
                          2404:4d40:8000::/36 maxlen: 36
                          2404:4d40:9000::/36 maxlen: 36
                          2404:4d40:a000::/36 maxlen: 36
                          2404:4d40:b000::/36 maxlen: 36
                          2404:4d40:c000::/36 maxlen: 36
                          2404:4d40:d000::/36 maxlen: 36
                          2404:4d40:e000::/36 maxlen: 36
                          2404:4d40:f000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.crl
                          rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3699 (0xe73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9D0F/serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2
        Validity
            Not Before: Feb 24 18:36:41 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65da3739-e633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:be:1b:30:e3:13:67:f5:4e:ea:5a:f6:e3:a9:
                    28:82:5b:e8:7d:12:47:49:00:e6:4b:73:5f:5a:84:
                    e9:fa:a4:46:7d:d3:95:27:92:91:1e:91:bc:66:7d:
                    af:0c:df:b1:07:1a:d5:a8:87:b5:79:e6:9b:4d:7e:
                    88:1e:07:1d:da:a4:53:11:4f:40:da:28:1f:3b:0f:
                    c5:6a:9b:fc:8e:34:b8:aa:85:a1:6a:40:66:13:85:
                    1e:2c:01:37:ef:f2:30:b3:d6:2f:d5:dd:a9:b9:95:
                    ad:3a:12:92:49:05:53:0d:4b:ee:22:d6:23:f7:2e:
                    4c:f0:47:47:c6:ab:b5:ee:4c:8d:5a:e3:22:00:23:
                    af:f3:49:7e:27:c0:37:7f:10:fc:1c:10:de:95:5f:
                    9d:64:f7:0a:95:43:ca:10:65:46:0d:23:a7:be:10:
                    a8:97:ae:b4:3f:be:2a:e7:19:a9:39:b6:5f:82:ee:
                    32:b5:c9:1a:aa:2c:b8:7e:87:30:34:8f:b4:7d:75:
                    f6:52:da:24:21:42:ca:f3:cf:96:f1:0e:bf:df:ef:
                    8a:d7:83:a5:db:76:b2:90:2f:56:e1:e7:8e:36:62:
                    3b:fb:ac:13:9d:3c:c2:ea:43:2e:a2:5d:d3:39:9d:
                    09:74:a9:28:90:b0:68:7d:f8:08:8f:c5:6b:79:f9:
                    f5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:79:FD:3A:2E:C3:78:06:F8:10:E2:53:2D:2E:B7:C9:C1:07:96:30
            X509v3 Authority Key Identifier:
                keyid:88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/13C1EDA8767911EE9A957930C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.140.0/22
                IPv6:
                  2404:4d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:5f:b2:4b:3d:2f:ba:97:85:74:12:ea:d6:c7:55:27:4c:89:
         31:0a:11:b6:46:4e:b2:1c:01:7a:30:db:c4:e0:09:43:25:18:
         96:2e:80:61:f2:17:56:db:27:5e:66:60:cf:f0:6a:5a:40:7c:
         65:4f:e0:a5:c3:dc:bd:ca:b7:02:40:91:c4:82:4f:5f:8b:df:
         97:46:06:da:ae:ec:7d:1f:15:05:db:4f:ca:5f:d7:dd:0c:d6:
         f7:67:2f:78:72:51:21:92:71:6b:a2:29:eb:ca:56:a5:ac:b9:
         0e:f5:30:55:67:76:b6:59:05:44:0a:af:88:66:d6:fa:e7:3f:
         33:08:2d:fb:05:c3:f3:3c:ce:cc:34:f6:60:f3:e1:50:5b:cd:
         e3:f0:fd:92:90:09:30:f5:82:cb:26:e2:40:0b:c5:7c:31:b2:
         0b:8c:83:be:61:f6:0a:c4:21:2c:5d:d6:2e:dd:c1:1c:33:11:
         6f:eb:8c:f3:34:7d:7c:99:c5:06:79:ec:91:46:5a:42:2b:a6:
         a0:f6:31:3b:0c:34:b9:bc:53:d4:d2:f3:1e:5f:a8:37:f1:68:
         57:b8:ec:b4:79:d7:03:ce:c6:42:7f:38:12:e3:8f:cc:53:11:
         26:68:2a:a5:55:f8:42:49:7d:64:24:83:5a:56:bb:6e:3b:22:
         7d:64:33:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org