Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/E91BDAD0D6DE11ED88F30263C4F9AE02.roa
File:                     E91BDAD0D6DE11ED88F30263C4F9AE02.roa (raw, json)
Hash identifier:          iIfOWh1uqVhAcXqeHkNjA4YHqNreyuB3xizBAQVozys=
Subject key identifier:   BB:BD:47:96:10:70:E5:1D:6D:92:56:B4:0F:AC:CC:78:E6:78:4C:A4
Certificate issuer:       /CN=A9127733/serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7
Certificate serial:       06B7
Authority key identifier: 42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/E91BDAD0D6DE11ED88F30263C4F9AE02.roa
Signing time:             Wed 06 Nov 2024 22:00:32 +0000
ROA not before:           Wed 06 Nov 2024 22:00:32 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     137409
IP address blocks:        103.101.2.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl
                          rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1719 (0x6b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127733/serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7
        Validity
            Not Before: Nov  6 22:00:32 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=672be700-a684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:49:f3:79:25:a0:33:dc:57:0b:7f:9b:83:40:
                    26:ff:8e:6d:25:7f:c1:a3:a4:65:fe:e4:fb:8f:b3:
                    3f:5b:1d:36:e0:a6:dd:78:b1:b2:74:9c:17:10:e8:
                    ed:10:eb:ba:12:6e:0a:33:55:9c:12:33:28:f5:11:
                    b5:b1:8e:25:46:21:56:b3:67:ab:f2:94:ea:f3:6d:
                    ca:03:90:6b:43:74:23:c5:c5:39:b6:12:91:7b:0c:
                    95:43:96:2b:75:a6:3f:50:f6:2e:67:5e:91:40:66:
                    7a:d1:c4:d7:09:50:34:10:01:f0:1c:d9:ff:48:76:
                    44:b4:f7:7b:9a:ae:40:0f:ba:42:60:af:2e:1c:93:
                    04:df:6b:6b:03:fc:c8:0b:1c:d9:02:6f:ab:a1:98:
                    64:c2:f5:e0:fd:cc:fc:2e:73:20:be:9b:21:ea:ce:
                    42:88:34:0e:fa:30:83:93:59:7d:b9:45:e7:ab:ef:
                    22:75:34:d7:d0:f6:dd:ba:41:23:85:20:16:e5:65:
                    c9:97:dd:35:49:9c:82:16:d3:d7:db:d5:d5:55:85:
                    46:f5:99:0a:27:f9:ba:bc:b0:a9:c0:45:b3:b1:00:
                    73:cb:da:a2:9c:84:ef:0d:61:8f:2b:5f:7a:c3:61:
                    ab:31:7f:26:a6:ab:96:e2:e7:fb:92:a3:fa:07:0e:
                    37:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BD:47:96:10:70:E5:1D:6D:92:56:B4:0F:AC:CC:78:E6:78:4C:A4
            X509v3 Authority Key Identifier:
                keyid:42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/E91BDAD0D6DE11ED88F30263C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:31:44:8d:38:21:8f:a8:60:88:6d:bf:02:ad:60:89:d5:7f:
         49:1f:16:d0:f4:1f:a2:6d:03:9a:f3:3d:fd:47:c9:84:28:87:
         de:92:4f:0a:ff:0a:0c:52:3e:6b:a7:34:8a:0a:64:96:c3:e0:
         fe:81:4e:be:88:a0:01:4a:ea:e1:bf:48:16:e4:b9:e8:cf:30:
         68:c5:c5:86:41:47:79:2d:68:e3:05:27:e9:a0:54:3d:d9:4f:
         52:34:3e:d8:36:80:16:38:11:aa:47:72:43:a3:30:7d:0b:86:
         1d:25:c7:35:55:03:e7:0b:2f:c3:be:9b:ce:14:9c:f1:3b:3f:
         a5:7c:9a:a3:d4:2c:dc:d1:76:8a:28:fe:b1:ce:10:5f:55:77:
         3d:e0:83:3a:a8:18:fc:33:ee:30:16:f4:c7:cf:72:d9:d9:2e:
         07:0a:52:85:e5:90:08:63:14:a3:d8:2a:2c:b5:d7:fe:c3:44:
         aa:19:cf:e5:64:ed:3f:19:a2:95:7e:9f:d1:bd:3b:53:f1:57:
         38:9d:22:13:7c:9d:2d:2d:17:fa:5a:27:5e:49:74:80:f9:85:
         72:2a:ef:ee:00:c0:95:2b:57:c5:40:45:c9:15:04:03:6c:90:
         ba:ec:bd:56:49:2c:37:e2:a9:be:fa:22:44:ac:ab:64:5c:d6:
         c0:e1:85:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:55:36 2024 by rpki-client on console-ams.rpki-client.org