Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/D825A42E4E6D11EAA3D8784AC4F9AE02.roa
File:                     D825A42E4E6D11EAA3D8784AC4F9AE02.roa (raw, json)
Hash identifier:          Dq+tw4dzxkssEA+bsXNc4uWtrrN7bI8wxUhISXXnAuo=
Subject key identifier:   20:3F:20:EE:B5:94:2E:DC:E9:23:02:0D:98:EC:A3:0F:84:1C:37:13
Certificate issuer:       /CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F
Certificate serial:       0979
Authority key identifier: 16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/D825A42E4E6D11EAA3D8784AC4F9AE02.roa
Signing time:             Wed 26 Jul 2023 20:17:21 +0000
ROA not before:           Wed 26 Jul 2023 20:17:21 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     139223
IP address blocks:        103.139.253.0/24 maxlen: 24
                          103.175.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl
                          rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Jun 2024 20:20:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2425 (0x979)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F
        Validity
            Not Before: Jul 26 20:17:21 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64c17f51-52c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4c:45:eb:3c:2b:b8:eb:e0:ef:1d:bd:02:32:
                    96:de:8c:38:a2:3e:d6:97:37:e9:72:b6:c5:ea:6e:
                    4c:5f:6c:c4:7d:12:10:ff:3a:8b:2c:e0:25:ac:bd:
                    9c:12:4d:b9:c9:2b:94:40:92:a7:e4:a0:6b:96:b7:
                    91:9e:ad:c5:69:ca:60:02:eb:e7:c3:9c:53:fe:1b:
                    a9:f9:87:05:70:d9:7b:28:df:68:6d:ac:2d:e0:c0:
                    a1:7f:e9:cf:a6:df:de:76:57:e5:50:69:d0:67:7d:
                    72:82:7f:8b:9f:16:e2:5d:1c:30:ad:b3:a8:02:e2:
                    4e:08:1a:97:44:fd:97:85:6b:0a:f5:38:ee:f4:6b:
                    e4:37:b6:a8:f0:c3:3d:1c:41:17:a6:d8:12:20:32:
                    1d:06:17:02:f7:84:43:fe:4e:d0:fd:e5:b3:8c:05:
                    97:80:1a:a0:79:cc:f1:0b:b9:07:ad:dc:98:09:49:
                    9e:2e:cb:3d:fe:6e:e0:42:0b:62:d0:6a:06:c4:7a:
                    85:e0:45:a2:41:72:b8:70:ba:0f:b4:4c:fa:1d:d4:
                    e9:2c:c9:2d:c7:f5:6d:69:44:1a:f7:33:28:d9:7e:
                    a2:e7:7b:4d:11:e6:ec:4a:44:50:c5:6c:1e:0d:d0:
                    88:26:8b:c2:7a:4d:c8:6f:9a:23:25:af:53:89:2c:
                    73:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3F:20:EE:B5:94:2E:DC:E9:23:02:0D:98:EC:A3:0F:84:1C:37:13
            X509v3 Authority Key Identifier:
                keyid:16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/D825A42E4E6D11EAA3D8784AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.253.0/24
                  103.175.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:d9:ce:58:48:4e:50:79:6a:4f:02:4c:8a:93:32:72:e1:aa:
         e0:ea:69:93:d7:42:2a:47:19:ff:ba:e6:4f:65:3b:10:96:df:
         b5:79:e5:b3:63:ea:f2:67:c8:42:49:12:0d:1a:e4:c4:b1:7d:
         3c:71:e4:7a:32:dd:8e:86:5f:cc:b2:2d:cf:ec:48:13:a5:5b:
         1a:f7:4f:f2:da:41:ae:32:02:a4:f8:f7:67:27:e0:2d:1c:32:
         58:fe:c3:2d:1b:9f:f5:2c:05:ae:cc:ad:41:2e:29:6f:61:72:
         e7:da:86:9e:d1:60:38:66:18:19:67:a6:2d:25:b6:6a:66:76:
         a2:0a:fd:b7:81:9c:ba:5f:54:7f:c6:12:a6:df:1e:d5:77:40:
         8d:6b:71:eb:a2:5d:5f:75:69:9c:30:d0:58:27:ab:9c:3e:25:
         e1:61:73:6b:c2:e8:7a:fa:43:09:ac:92:ab:91:26:02:15:c0:
         7b:98:18:a0:af:16:d9:7d:cb:fa:e0:87:28:aa:7b:fa:41:70:
         7e:d3:ee:45:97:49:b5:2e:ca:87:32:5b:2c:b7:dc:3a:68:97:
         c6:ea:2d:d5:c1:08:c1:95:37:56:51:5b:23:0a:38:d5:b6:97:
         39:54:79:ce:b3:ab:13:18:54:fd:5f:14:c1:64:3f:c9:d1:96:
         c0:6a:4e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 22:42:42 2024 by rpki-client on console-ams.rpki-client.org