Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/C9C70AEA696F11EFA4DA475FC4F9AE02.roa
File:                     C9C70AEA696F11EFA4DA475FC4F9AE02.roa (raw, json)
Hash identifier:          Y16G28ble7sDhlK1gqeIJ/fe7Scn5O8XUtCkp4Our/k=
Subject key identifier:   77:70:78:1F:B9:DB:0D:97:7F:BC:D1:4B:4C:2B:5C:70:F0:C0:B0:80
Certificate issuer:       /CN=A91D3307/serialNumber=53C94817EB1365F1DE8C3C2B4402239881C1943D
Certificate serial:       0420
Authority key identifier: 53:C9:48:17:EB:13:65:F1:DE:8C:3C:2B:44:02:23:98:81:C1:94:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/C9C70AEA696F11EFA4DA475FC4F9AE02.roa
Signing time:             Mon 02 Sep 2024 21:11:08 +0000
ROA not before:           Mon 02 Sep 2024 21:11:08 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     138637
IP address blocks:        103.135.84.0/22 maxlen: 24
                          103.248.188.0/24 maxlen: 24
                          180.94.238.0/23 maxlen: 24
                          2404:77c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.crl
                          rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1056 (0x420)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3307/serialNumber=53C94817EB1365F1DE8C3C2B4402239881C1943D
        Validity
            Not Before: Sep  2 21:11:08 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=66d629ec-1cdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d0:37:cf:b5:b9:f1:8f:3a:f8:26:d5:c2:30:
                    16:f9:d1:df:b4:05:58:48:ef:01:d7:b0:ff:a4:19:
                    7b:9d:d7:29:31:ac:82:ca:39:3c:48:a1:52:ee:9c:
                    3c:0f:e7:65:1a:77:e6:bc:98:32:ca:a7:12:d4:c8:
                    44:58:a2:34:0f:a2:8a:af:d8:89:3d:79:d5:d0:10:
                    4b:47:92:c9:9e:a0:d6:47:0d:28:95:15:e7:0b:47:
                    1c:a7:9b:15:7e:8a:6b:02:71:df:fa:c2:7b:df:67:
                    17:0d:05:9e:ad:09:6a:f4:3b:33:a9:5a:e9:21:84:
                    cc:be:17:85:2a:3d:8a:be:2e:50:fc:52:32:7b:43:
                    b3:f8:2d:c0:a9:41:67:72:36:cf:87:65:85:87:ef:
                    90:a9:9f:fb:5c:15:90:59:6e:e7:6e:0e:a1:a3:68:
                    81:47:c8:6d:f8:44:bb:6b:13:c3:16:74:a5:ed:76:
                    ad:ec:f4:12:4d:d6:fb:26:7e:4b:0c:75:43:40:ff:
                    97:f4:9d:a5:15:4b:69:7f:24:45:60:c4:22:95:cc:
                    e2:b8:5f:23:3d:29:85:b0:9c:17:75:cf:fe:74:e9:
                    51:15:59:33:77:51:cd:74:73:37:a4:31:32:95:cd:
                    11:32:39:9e:50:5e:d1:e5:f5:9c:69:6d:03:bc:24:
                    87:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:70:78:1F:B9:DB:0D:97:7F:BC:D1:4B:4C:2B:5C:70:F0:C0:B0:80
            X509v3 Authority Key Identifier:
                keyid:53:C9:48:17:EB:13:65:F1:DE:8C:3C:2B:44:02:23:98:81:C1:94:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/C9C70AEA696F11EFA4DA475FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.84.0/22
                  103.248.188.0/24
                  180.94.238.0/23
                IPv6:
                  2404:77c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:3e:ec:9e:fe:57:05:df:63:0a:fd:6d:17:2f:66:fe:59:2a:
         f1:89:df:f4:af:52:6b:47:6d:2b:bd:2f:b0:d7:d9:8e:f9:ac:
         64:b0:03:49:ca:74:7d:0c:80:75:9f:e6:cf:b9:8c:f5:97:ec:
         59:7a:10:4d:23:fd:c1:43:4d:48:0c:27:81:b8:6c:fc:85:78:
         f8:7f:62:85:e4:e2:e8:73:de:52:e1:35:be:a3:99:03:9e:8c:
         5f:79:b6:c8:5c:eb:b8:c6:6d:65:09:db:0d:d4:0b:da:11:5c:
         45:2d:30:0d:68:e4:dc:8c:a6:77:3f:21:08:fc:60:ec:ed:82:
         74:8e:c9:95:97:6a:a4:4c:b9:7c:32:71:92:f2:8d:a9:5b:65:
         63:1e:ff:e0:1c:34:e9:0f:5f:af:22:b6:eb:ea:c7:53:da:17:
         8c:07:20:47:30:ff:48:f2:b7:00:4e:2a:de:60:24:cf:94:8e:
         1c:1a:d6:99:62:35:ef:f6:a0:54:bc:76:b6:26:1e:aa:45:26:
         8c:1e:66:44:4f:bf:90:03:6e:43:c6:5a:db:2c:6f:c9:6b:db:
         47:d4:c8:91:fd:2d:54:cb:c0:42:5a:8c:00:f6:f5:df:1f:52:
         7a:f9:f2:d3:48:c1:c8:ef:23:77:a6:b0:fb:c3:97:b7:6f:f6:
         91:89:e8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:38 2024 by rpki-client on console-fra.rpki-client.org