Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/13DBE72EB4A611EE9795B755C4F9AE02.roa
File:                     13DBE72EB4A611EE9795B755C4F9AE02.roa (raw, json)
Hash identifier:          8VbCibBd3ZbV3h+sdQu0CJodTZCJLrT/3HEGSl1VZso=
Subject key identifier:   FA:06:23:9E:01:B7:2D:E2:DE:D7:9B:7D:71:2F:6D:BE:1A:B6:98:54
Certificate issuer:       /CN=A91B9BC6/serialNumber=EF5B497FFD8B259EE9EA157B0222B110266CF59F
Certificate serial:       03F7
Authority key identifier: EF:5B:49:7F:FD:8B:25:9E:E9:EA:15:7B:02:22:B1:10:26:6C:F5:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71tJf_2LJZ7p6hV7AiKxECZs9Z8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/13DBE72EB4A611EE9795B755C4F9AE02.roa
Signing time:             Tue 16 Jan 2024 19:37:43 +0000
ROA not before:           Tue 16 Jan 2024 19:37:43 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     152150
IP address blocks:        103.174.46.0/24 maxlen: 24
                          103.174.47.0/24 maxlen: 24
                          2001:df7:b780::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.crl
                          rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71tJf_2LJZ7p6hV7AiKxECZs9Z8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1015 (0x3f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9BC6/serialNumber=EF5B497FFD8B259EE9EA157B0222B110266CF59F
        Validity
            Not Before: Jan 16 19:37:43 2024 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65a6db06-073d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b7:ca:d3:01:bc:f9:34:a7:ae:64:dc:51:5f:
                    eb:76:1b:24:5f:8e:65:c8:ac:36:5c:80:92:18:f1:
                    38:a0:6c:5a:44:64:38:9e:47:56:4e:d3:05:cc:86:
                    4a:08:6d:ae:78:57:a3:f3:92:76:36:42:27:b0:2d:
                    76:e2:85:d8:64:b5:bc:be:47:c5:8f:0b:a5:08:76:
                    88:57:33:ef:10:05:c0:70:87:79:7a:53:f8:0f:09:
                    7f:63:ae:62:1f:a4:fb:59:86:f9:a2:b2:87:0b:3b:
                    a4:34:68:35:82:45:8b:a3:3d:7a:b5:14:97:5c:5f:
                    de:fa:38:b1:1a:d0:72:65:05:46:97:97:04:79:03:
                    93:b2:ea:1b:3b:63:b6:2f:d5:40:24:dc:79:23:b3:
                    7f:ce:c7:a1:9e:79:7f:f3:b6:3f:a8:05:53:cb:81:
                    a2:1f:34:e0:7f:e4:60:69:b4:1f:cb:e7:96:be:b5:
                    07:19:c6:e9:a0:20:bf:91:11:15:80:96:44:88:e4:
                    36:3d:00:12:45:54:ae:fd:d4:af:10:8b:06:ba:31:
                    75:d5:1e:da:dd:e9:8e:68:de:16:98:19:17:6e:17:
                    95:cd:2c:71:ca:ed:95:7a:75:c2:fd:b1:29:ff:06:
                    05:57:61:63:8a:0f:43:a6:9b:e6:95:a3:f8:5b:7c:
                    1e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:06:23:9E:01:B7:2D:E2:DE:D7:9B:7D:71:2F:6D:BE:1A:B6:98:54
            X509v3 Authority Key Identifier:
                keyid:EF:5B:49:7F:FD:8B:25:9E:E9:EA:15:7B:02:22:B1:10:26:6C:F5:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71tJf_2LJZ7p6hV7AiKxECZs9Z8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/13DBE72EB4A611EE9795B755C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.46.0/23
                IPv6:
                  2001:df7:b780::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:92:e1:6b:d6:d6:0a:6f:9a:15:c7:a1:5e:ca:54:7f:4d:75:
         d8:97:48:f6:e5:91:69:5f:61:14:4f:da:25:f2:1a:aa:77:9d:
         f9:9c:57:4d:4b:ad:ae:67:b3:20:aa:6f:c2:eb:79:5a:c7:4f:
         22:9f:fe:f8:9c:b9:d8:e9:35:c5:1d:34:57:c1:34:72:c0:5b:
         46:8a:27:cf:4c:95:db:1d:c9:a6:49:8a:4a:79:db:ae:64:33:
         9d:c5:5d:91:c3:0e:37:0d:f6:79:58:a8:1a:b1:f3:f0:b5:f8:
         d3:ee:35:fc:d6:d2:e0:ae:c0:f0:0b:2d:7a:f9:94:17:cf:f5:
         25:5c:89:dd:b2:10:2a:bb:59:52:5e:61:db:b3:7d:e0:99:37:
         1a:31:80:6d:d3:15:4f:22:b8:20:75:b5:2b:79:c5:b6:ed:9a:
         6a:e0:66:b2:e3:a8:d0:e7:d3:54:67:b0:82:07:3b:cd:74:a5:
         e3:fa:f3:bc:58:87:f7:4e:8c:66:4a:b5:a2:31:ba:e2:7a:9c:
         e4:76:dc:7d:65:88:b5:57:bb:f5:c9:88:a1:f1:27:bd:ca:e5:
         ef:e3:5b:30:1b:f4:87:49:c1:91:29:ba:24:fc:45:15:dc:79:
         da:89:c8:43:91:a5:4e:94:11:09:6b:00:ad:3d:c7:4b:bd:ee:
         9d:68:6f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:37 2024 by rpki-client on console-fra.rpki-client.org