Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/637BE5B0407C11EFBB872A45C4F9AE02.roa
File:                     637BE5B0407C11EFBB872A45C4F9AE02.roa (raw, json)
Hash identifier:          zJw8Qq8QUnGm1SovwMdlmkT9wmbsFtkZF4qsHtw/2sk=
Subject key identifier:   C8:9B:17:40:C3:11:6D:53:C1:50:3F:75:25:2F:C8:84:F8:D5:B2:E1
Certificate issuer:       /CN=A911D1A9/serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
Certificate serial:       DB
Authority key identifier: 74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/637BE5B0407C11EFBB872A45C4F9AE02.roa
Signing time:             Sun 01 Sep 2024 05:17:52 +0000
ROA not before:           Sun 01 Sep 2024 05:17:52 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     7488
IP address blocks:        103.248.48.0/23 maxlen: 23
                          2001:df2:c740::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl
                          rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:25:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D1A9/serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
        Validity
            Not Before: Sep  1 05:17:52 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66d3f8ff-dbbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:84:16:39:9b:6f:b6:bb:e1:13:f1:6d:df:57:
                    7e:86:24:fb:8b:e1:bb:c2:e5:fd:f4:17:c7:47:6c:
                    cc:ff:ae:09:95:d6:5f:e0:8f:db:09:3e:13:3d:35:
                    8a:e3:fe:54:0d:d5:cd:d7:37:e9:42:f2:1e:46:d7:
                    e1:c9:2d:35:97:59:bc:fd:cb:e5:0b:b8:cb:05:46:
                    57:72:be:58:7f:95:ae:8a:28:7f:12:47:33:c9:29:
                    c2:60:1c:29:d7:d1:34:01:e0:79:24:cb:7a:82:41:
                    1a:11:c0:b8:ea:d4:7a:8a:78:48:19:ed:59:2e:32:
                    0e:5b:31:81:6d:8e:62:20:1a:80:cb:55:73:dd:a7:
                    2f:fa:2b:a8:b2:a4:fb:4a:ee:1d:b5:62:f9:10:55:
                    72:6a:9b:67:45:dd:83:2c:aa:d0:5c:2c:f8:c6:7b:
                    0a:67:43:40:91:bd:90:a9:9d:ec:a7:29:6f:23:e6:
                    71:d6:46:82:6e:50:e1:04:ae:38:1b:1e:3e:12:d3:
                    bf:79:3a:e8:b5:5a:99:51:1a:8c:2a:72:94:b1:bc:
                    ab:6a:0c:2c:df:db:e4:36:62:33:11:cf:00:63:83:
                    78:58:a6:f0:4f:b8:24:2a:ed:9d:0f:f3:b3:60:39:
                    d4:bc:7a:96:02:5c:65:aa:41:d1:91:15:66:b8:e0:
                    ae:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9B:17:40:C3:11:6D:53:C1:50:3F:75:25:2F:C8:84:F8:D5:B2:E1
            X509v3 Authority Key Identifier:
                keyid:74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/637BE5B0407C11EFBB872A45C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.48.0/23
                IPv6:
                  2001:df2:c740::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:29:f6:02:75:f7:33:a6:79:39:1f:b0:a4:5f:99:6f:fd:da:
         74:55:b6:b9:8c:c8:9f:b5:15:46:a9:47:3d:1f:5d:69:0e:85:
         46:81:8f:f6:73:b2:89:0f:9c:19:26:b1:ec:de:f7:dd:0f:29:
         a2:62:2c:af:bd:ec:94:da:86:1e:5e:78:7d:89:76:d8:4a:18:
         df:a3:92:7d:e5:51:0b:11:a7:9b:06:1c:16:10:cf:b7:92:58:
         45:75:e3:3e:02:b0:21:68:ff:5c:96:58:2a:dd:85:68:bb:60:
         84:e3:e4:13:1b:e7:8d:0d:b0:d7:a4:65:01:04:b6:8d:df:81:
         91:a1:5a:37:80:20:66:99:a2:0a:40:ab:de:06:6e:14:82:b3:
         b5:10:f9:d6:fc:db:98:45:ff:bc:8c:1f:07:8c:c2:03:41:91:
         07:b9:31:c7:6d:88:e7:cd:8a:d2:93:d6:1b:60:a2:d1:99:c0:
         2a:67:63:c7:82:14:3e:ab:38:37:a7:20:54:ce:98:d1:b1:c5:
         09:ab:a9:68:b3:fd:9e:75:96:21:2a:e4:68:a4:40:09:0d:7a:
         7e:46:11:20:88:06:51:27:48:65:f7:96:35:09:19:f0:e9:09:
         e5:92:2f:e2:44:eb:51:c9:56:1c:40:74:57:78:ca:73:3b:1c:
         b7:a8:61:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:01 2024 by rpki-client on console-ams.rpki-client.org