Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/5181F33CE8C011EDADA54A23C4F9AE02.roa
File:                     5181F33CE8C011EDADA54A23C4F9AE02.roa (raw, json)
Hash identifier:          wrAqXtR5cQSmhUWLr1y8UjgIlTpfMqLqNlgVaZhEGts=
Subject key identifier:   98:28:8E:CA:C8:60:55:20:B3:A4:5C:05:CD:95:5C:2C:BD:8B:7F:CE
Certificate issuer:       /CN=A912A31E/serialNumber=DA57B191C55BB3319EBD9182DC0D4E6AEF3E0DD8
Certificate serial:       70
Authority key identifier: DA:57:B1:91:C5:5B:B3:31:9E:BD:91:82:DC:0D:4E:6A:EF:3E:0D:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lexkcVbszGevZGC3A1Oau8-Ddg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/5181F33CE8C011EDADA54A23C4F9AE02.roa
Signing time:             Fri 01 Dec 2023 06:17:05 +0000
ROA not before:           Fri 01 Dec 2023 06:17:05 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     135662
IP address blocks:        103.78.108.0/23 maxlen: 24
                          103.118.162.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.crl
                          rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lexkcVbszGevZGC3A1Oau8-Ddg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A31E/serialNumber=DA57B191C55BB3319EBD9182DC0D4E6AEF3E0DD8
        Validity
            Not Before: Dec  1 06:17:05 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65697a61-3ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:eb:ab:f4:36:cd:de:c5:8c:c5:dd:63:fe:be:
                    7b:53:80:a5:93:da:09:1a:aa:2e:6d:36:27:fe:b4:
                    b0:15:db:aa:68:f0:c5:0a:44:d7:d0:ab:19:f6:66:
                    67:1b:dc:ea:86:b1:78:f0:29:cf:1d:f9:de:0a:23:
                    59:63:80:89:18:d1:8a:d7:48:9f:c4:6c:76:bf:43:
                    1d:da:2c:5a:30:b4:66:3c:08:e2:13:40:ee:6f:ee:
                    d5:23:58:67:95:6c:a1:63:73:72:17:45:8c:a4:85:
                    67:f8:c3:44:e9:0c:fa:f3:2e:53:03:fc:f5:77:ea:
                    77:00:e5:2e:e2:72:79:86:22:68:8d:ce:54:8b:11:
                    01:d2:b7:fe:23:2c:08:7c:88:5e:9d:34:ec:01:61:
                    2a:72:e6:d5:cb:b0:e5:0e:20:49:e5:32:78:c9:12:
                    24:1e:d1:58:4f:7d:38:b2:4f:16:ea:4c:40:58:9b:
                    6a:eb:58:ea:67:c6:f5:a2:01:05:b6:44:b5:d8:4a:
                    6f:61:aa:7e:33:45:3b:3b:ff:1d:68:9d:1b:4f:dc:
                    c0:0b:2b:68:df:f0:30:1d:34:ec:d2:84:5c:f2:fc:
                    a6:c9:68:db:d4:1f:53:8d:b8:fb:a5:78:29:38:db:
                    85:b9:f4:00:94:2c:98:40:e5:c6:dd:8f:9a:d6:0f:
                    6e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:28:8E:CA:C8:60:55:20:B3:A4:5C:05:CD:95:5C:2C:BD:8B:7F:CE
            X509v3 Authority Key Identifier:
                keyid:DA:57:B1:91:C5:5B:B3:31:9E:BD:91:82:DC:0D:4E:6A:EF:3E:0D:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lexkcVbszGevZGC3A1Oau8-Ddg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/5181F33CE8C011EDADA54A23C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.108.0/23
                  103.118.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:fe:55:35:6c:8b:30:1e:60:15:a6:ad:67:b6:fc:90:4a:19:
         6d:26:fe:c0:2d:d3:0c:05:e2:c1:e2:d4:2d:a4:72:d5:cc:a4:
         c1:48:99:e4:a2:8b:d5:0c:f3:b2:1c:76:94:38:1f:c8:0f:42:
         53:b2:08:06:9a:46:98:77:f5:85:a0:b2:8d:0b:04:5b:86:4f:
         14:ca:c8:8f:d3:87:30:fe:07:f3:79:ec:9c:24:13:3a:a9:35:
         05:1b:14:f2:dc:65:e8:fd:53:92:ea:77:18:f2:e9:cd:cd:04:
         2a:22:47:21:1f:68:60:b7:4d:c3:ee:20:eb:a0:5f:89:e9:f0:
         00:fe:2e:04:d4:ac:e8:e0:ee:7a:eb:0e:f6:c1:47:0d:67:72:
         3e:f3:27:b9:87:b6:09:bd:c6:87:f2:cd:2f:5f:13:b0:95:d4:
         2e:df:8c:db:3d:0d:aa:d9:4d:a1:fc:5b:d0:f7:ad:8c:05:4f:
         97:78:93:d2:0a:c6:62:b6:23:d6:b4:4c:e6:ad:1e:9e:68:6d:
         8a:36:de:4f:64:12:b3:60:a1:84:77:00:57:09:4b:fd:9b:03:
         e8:de:ba:d4:da:9b:ad:24:32:44:80:ad:39:5a:b7:f0:f2:5c:
         5b:c1:9c:6c:20:8f:b6:7c:c0:07:a9:06:13:1d:a4:3a:4b:e3:
         61:6c:d1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:36 2024 by rpki-client on console-ams.rpki-client.org