Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/8C5D4FF4766511EF8820F844C4F9AE02.roa
File:                     8C5D4FF4766511EF8820F844C4F9AE02.roa (raw, json)
Hash identifier:          B9akMsoRDWVX9pojvTb/hR3plmtBWRHwS0hIvuBtoYg=
Subject key identifier:   72:AE:0D:21:51:75:F2:7A:8E:2D:A4:07:AB:3A:7C:82:22:C5:E2:39
Certificate issuer:       /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Certificate serial:       030F
Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/8C5D4FF4766511EF8820F844C4F9AE02.roa
Signing time:             Thu 19 Sep 2024 09:00:00 +0000
ROA not before:           Thu 19 Sep 2024 09:00:00 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     45250
IP address blocks:        103.183.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl
                          rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 783 (0x30f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
        Validity
            Not Before: Sep 19 09:00:00 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66ebe80f-1e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a1:b1:c9:0a:ae:24:08:2f:11:65:8a:54:f6:
                    cc:95:b0:6e:4b:96:25:91:8d:41:08:49:57:dc:cb:
                    80:60:88:8d:63:8d:0f:79:39:78:01:02:d4:ac:1e:
                    b0:3b:92:04:69:b2:b8:5c:b7:77:dc:21:d1:a2:a5:
                    88:1b:9a:06:ea:9e:80:c4:a9:2b:4a:6a:cf:a4:7d:
                    a2:19:3d:6b:3e:38:69:49:af:93:61:b2:62:60:2b:
                    67:44:95:fd:eb:da:b5:2a:0c:4e:b8:fb:4c:2e:c8:
                    9d:ec:26:da:05:64:56:11:52:b0:aa:45:5e:a9:af:
                    18:2f:c0:08:5a:21:0d:29:8d:4a:73:4a:aa:22:c9:
                    50:ee:92:94:b0:7a:19:ec:08:1c:44:17:86:1f:4e:
                    9b:21:41:07:35:03:09:e8:0d:cd:02:e6:85:20:42:
                    77:84:90:58:a3:54:31:b8:b1:9a:48:89:29:91:8a:
                    03:b4:68:12:4c:97:20:34:20:b7:ef:cb:02:b3:c6:
                    eb:a4:fc:43:61:ff:75:9e:b1:be:3a:86:af:56:a3:
                    47:6d:0d:9f:e6:9c:38:c8:1e:91:4a:59:20:58:49:
                    28:98:36:0c:d9:d1:cb:45:bf:8f:e3:23:47:b8:8e:
                    73:ce:24:3c:18:77:58:6e:7e:ff:e0:3a:fb:82:24:
                    f9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:AE:0D:21:51:75:F2:7A:8E:2D:A4:07:AB:3A:7C:82:22:C5:E2:39
            X509v3 Authority Key Identifier:
                keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/8C5D4FF4766511EF8820F844C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:19:fd:84:d6:43:66:91:cd:0a:83:29:3b:04:b6:1c:64:2a:
         a7:f4:68:1c:b5:b6:fd:83:bf:0d:55:dc:90:d1:9b:7f:08:90:
         5a:64:0a:61:ec:1b:e0:d3:c4:f7:62:d8:8c:b5:42:6f:cf:27:
         cc:de:9f:83:84:86:35:9c:16:5a:89:c3:1c:03:85:dc:84:31:
         a6:5f:09:8a:af:1d:ba:95:d8:eb:b1:a2:b7:63:fe:1f:6a:5b:
         29:cc:d8:15:48:32:07:3e:65:ea:87:4b:c9:2f:57:e9:2c:7a:
         b3:76:89:1f:bb:45:e5:7a:2d:06:04:41:0a:bb:67:4a:63:20:
         8c:e2:23:63:78:5d:c9:7d:27:a7:97:64:d7:74:15:9b:8d:9f:
         a1:23:c1:e9:96:ce:ad:19:9c:c7:73:10:69:df:60:7e:f4:11:
         e9:1e:86:d1:42:95:30:d4:8e:5a:aa:3f:bd:ec:d9:9b:6c:22:
         dd:4a:8c:7c:43:ef:ad:ec:b3:c1:65:fd:c4:56:44:3b:2b:1a:
         5a:90:43:07:87:32:b3:48:64:20:c3:2f:e7:c8:0a:5b:58:b8:
         61:28:33:41:6e:d0:ec:6a:17:4a:f9:fc:a4:44:8f:73:a8:58:
         50:0c:b9:c4:1e:22:6d:6f:10:85:c7:f3:96:59:fb:d3:82:a7:
         ae:61:f2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:53 2024 by rpki-client on console-fra.rpki-client.org