Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/1779BD7C3B2311EE91010B3EC4F9AE02.roa
File:                     1779BD7C3B2311EE91010B3EC4F9AE02.roa (raw, json)
Hash identifier:          ++SEuifHIWAk3FJLbuooJEG4UII9ZGtzJgkMFEUrXTc=
Subject key identifier:   0A:05:F9:07:D0:88:54:26:45:BD:5D:84:34:A7:FA:B6:A6:9F:16:56
Certificate issuer:       /CN=A91BB35A/serialNumber=1A60725AE4045896E304083003213EEA95267ECF
Certificate serial:       DE
Authority key identifier: 1A:60:72:5A:E4:04:58:96:E3:04:08:30:03:21:3E:EA:95:26:7E:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmByWuQEWJbjBAgwAyE-6pUmfs8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/1779BD7C3B2311EE91010B3EC4F9AE02.roa
Signing time:             Wed 09 Oct 2024 04:18:49 +0000
ROA not before:           Wed 09 Oct 2024 04:18:49 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     132448
IP address blocks:        103.21.17.0/24 maxlen: 24
                          103.97.230.0/24 maxlen: 24
                          2001:df1:af00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.crl
                          rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmByWuQEWJbjBAgwAyE-6pUmfs8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB35A/serialNumber=1A60725AE4045896E304083003213EEA95267ECF
        Validity
            Not Before: Oct  9 04:18:49 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=67060429-4064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:90:f5:94:d4:81:e1:66:86:25:62:1c:a2:9c:
                    c7:45:dd:17:a0:ec:05:03:18:fd:5a:f3:17:2c:99:
                    49:24:47:b6:46:67:0d:9f:aa:96:db:cd:11:bf:26:
                    c1:3a:68:f1:df:aa:d9:5e:1d:12:c8:6b:36:2e:b4:
                    30:1b:e3:27:97:e8:d0:e4:21:bf:32:6d:91:5b:69:
                    82:a1:c5:4d:7b:7f:8c:d9:da:14:80:1a:23:41:57:
                    ee:c9:8c:51:65:a6:f1:47:61:a7:39:e9:58:42:e3:
                    25:9d:67:fd:2a:0e:a8:94:46:ef:ac:a9:3e:ff:69:
                    bd:0d:2d:38:dc:1b:f6:0c:eb:eb:ad:7a:6c:a8:bd:
                    a0:87:95:8c:6a:27:65:a5:71:39:47:8b:f0:0b:d0:
                    4b:f9:38:94:d2:4b:a9:31:74:9b:b5:22:ed:73:13:
                    e3:43:03:95:29:50:ac:f4:0f:3a:a4:75:9e:6b:dc:
                    08:d7:39:56:ea:73:6b:fd:2a:aa:e6:ea:ee:49:b9:
                    7a:74:e7:e2:7c:38:e4:67:b8:2d:a1:ce:b0:39:85:
                    9c:7f:e8:89:52:4a:33:65:ad:ac:8b:e8:cf:9a:ad:
                    58:b9:cd:12:53:87:35:5d:88:66:8d:b8:74:4e:b2:
                    0b:a2:6a:70:45:38:6e:03:83:69:2e:3b:b0:88:eb:
                    2e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:05:F9:07:D0:88:54:26:45:BD:5D:84:34:A7:FA:B6:A6:9F:16:56
            X509v3 Authority Key Identifier:
                keyid:1A:60:72:5A:E4:04:58:96:E3:04:08:30:03:21:3E:EA:95:26:7E:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmByWuQEWJbjBAgwAyE-6pUmfs8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/1779BD7C3B2311EE91010B3EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.17.0/24
                  103.97.230.0/24
                IPv6:
                  2001:df1:af00::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:08:26:d7:a7:14:7f:d2:5d:4f:19:8b:5e:f5:da:1f:b7:25:
         23:43:04:cc:f7:60:56:b3:4f:b2:c7:66:3d:34:b1:6c:19:ee:
         a7:b5:66:62:ee:fe:40:4e:72:2f:de:23:6e:12:fa:8c:a4:5d:
         72:f6:66:e6:f4:ac:63:05:ea:1c:57:57:90:ba:62:ac:34:aa:
         c1:56:62:1c:7a:4e:b4:f7:25:15:74:5b:8d:2b:bb:b3:63:11:
         42:ee:84:d8:9f:8e:50:5b:3f:a4:2b:52:ed:18:e2:94:b2:19:
         f0:90:60:44:3f:37:f2:05:2a:ca:e4:c8:79:02:e5:57:7a:ea:
         88:b1:6e:02:50:d5:dd:ba:1e:2a:81:5c:11:ef:8d:50:73:f3:
         8f:2c:a6:40:43:0f:f8:e2:15:fd:d4:4c:21:d2:4f:99:4b:3d:
         85:e5:90:02:15:4d:a3:1c:45:09:7b:aa:7c:53:e5:d1:25:27:
         37:e0:10:16:b2:7e:d9:5f:8c:6d:20:72:1e:9f:62:20:e6:8c:
         fc:39:c3:86:62:9a:d5:03:37:09:5e:35:35:11:3c:b0:e5:5e:
         6b:ea:1f:f4:52:c0:05:72:5f:fe:b1:c7:24:8e:cb:0f:45:8f:
         56:a2:ab:03:38:f3:08:10:9a:18:7a:e6:5c:cc:de:b2:a8:1f:
         16:04:bd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:56 2024 by rpki-client on console-fra.rpki-client.org