Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/71178E2806EC11EFA61C4222C4F9AE02.roa
File:                     71178E2806EC11EFA61C4222C4F9AE02.roa (raw, json)
Hash identifier:          lDgqADuTMK2GA8veFfF2SGSbvACpwsZa/dz0WmwAzKA=
Subject key identifier:   7E:40:4F:CB:C3:A8:53:EA:A0:B1:7C:6C:EE:21:B4:B1:2D:B1:BF:C0
Certificate issuer:       /CN=A91228BC/serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770
Certificate serial:       04BE
Authority key identifier: 98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/71178E2806EC11EFA61C4222C4F9AE02.roa
Signing time:             Tue 30 Apr 2024 12:23:25 +0000
ROA not before:           Tue 30 Apr 2024 12:23:25 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     149283
IP address blocks:        103.169.98.0/24 maxlen: 24
                          103.169.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl
                          rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 00:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1214 (0x4be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91228BC/serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770
        Validity
            Not Before: Apr 30 12:23:25 2024 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=6630e2bd-eabf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:55:b3:4b:d2:3b:b3:77:e5:88:34:50:03:c7:
                    17:1a:8a:3c:3c:45:3e:cc:d5:1b:83:9b:00:aa:79:
                    8a:a4:41:de:5b:6b:54:00:8b:bd:e4:31:3e:5b:04:
                    ab:fd:c3:8d:fc:18:e2:d8:f9:29:47:73:1b:98:79:
                    a8:70:7f:fa:bf:66:0e:ec:c0:ae:43:a4:ab:d6:4d:
                    2f:ff:a1:da:b0:11:d6:a1:e8:3d:4c:72:45:bf:6c:
                    b9:8c:55:16:f6:3b:49:c3:ee:ed:56:7a:a6:f2:1c:
                    b7:60:ab:af:2c:64:ab:b3:1f:e0:9b:66:8d:54:7e:
                    04:78:5d:51:70:a9:48:7e:63:6e:df:44:6b:06:c5:
                    ea:3c:4f:a5:85:04:75:ce:20:57:e2:18:44:78:27:
                    79:89:80:06:f7:2e:81:9d:9a:5b:7d:69:e6:7e:84:
                    2d:50:82:5e:f8:6f:a1:0f:ea:f0:76:f3:52:6e:ba:
                    3c:02:ae:97:c1:81:68:35:24:16:4f:94:c4:a9:82:
                    fe:42:c1:2b:e1:57:49:4a:6c:c6:5d:88:32:39:f5:
                    ac:9f:a6:4a:e2:ea:2a:fc:4a:14:d9:30:93:be:7f:
                    d5:45:df:17:3b:7a:66:04:55:a6:72:5f:59:1f:c5:
                    22:5d:80:60:29:de:01:02:d9:5e:b9:fd:ea:ec:0a:
                    9c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:40:4F:CB:C3:A8:53:EA:A0:B1:7C:6C:EE:21:B4:B1:2D:B1:BF:C0
            X509v3 Authority Key Identifier:
                keyid:98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/71178E2806EC11EFA61C4222C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:21:bd:85:d0:bb:e2:af:ca:6e:17:df:38:c3:8c:9c:a8:6f:
         ec:fc:20:21:2e:ed:79:3f:03:62:f3:ff:5d:ba:d8:76:56:21:
         6b:49:a5:5e:52:0b:91:42:89:83:b7:e6:a5:8f:9f:0c:ad:93:
         ff:0e:85:69:e4:ef:30:49:a0:4c:8f:2d:15:5b:3c:08:50:04:
         bd:a4:04:d6:ea:56:6f:12:17:0a:9f:08:56:97:65:47:d6:d8:
         8f:e0:53:09:75:42:7e:10:a1:23:2f:d7:ce:50:70:0d:74:ac:
         02:37:c5:36:0f:f4:df:25:aa:92:ab:d0:32:39:5c:f7:95:d0:
         92:9d:52:9d:ac:14:f7:87:64:cf:2a:b9:9d:a2:71:bb:4f:57:
         49:a3:4d:aa:3e:a6:86:83:2b:a8:a2:35:ec:75:b0:98:c3:6a:
         54:ab:c4:79:83:bc:a5:9e:4e:9b:74:39:ba:4b:c1:b6:d9:d1:
         de:36:d8:7e:08:94:42:2c:49:77:e3:e6:0c:43:75:53:89:93:
         ba:89:11:8f:b2:67:2d:09:54:0c:1f:e7:ba:25:b2:11:c8:f0:
         0a:d5:28:5c:38:98:9c:cd:02:42:e8:71:4b:7e:94:a3:3c:09:
         6f:e7:8e:ea:d1:81:f5:23:02:aa:de:0e:b0:67:73:2e:82:12:
         89:f8:88:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 02:57:01 2024 by rpki-client on console-fra.rpki-client.org