Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/4C4AC452D67911ECBFC6CB7BC4F9AE02.roa
File:                     4C4AC452D67911ECBFC6CB7BC4F9AE02.roa (raw, json)
Hash identifier:          lYC0gqBa3fB4gdVesTjVXYXLvZGL3Y11z+GoLwcKEn0=
Subject key identifier:   2F:35:AA:65:F8:32:6C:2E:29:5C:47:EC:49:33:2E:AA:F5:77:B6:EE
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       253D
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/4C4AC452D67911ECBFC6CB7BC4F9AE02.roa
Signing time:             Fri 16 Aug 2024 18:16:00 +0000
ROA not before:           Fri 16 Aug 2024 18:16:00 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     4294960000
IP address blocks:        103.138.210.0/24 maxlen: 26

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 17:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9533 (0x253d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Aug 16 18:16:00 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=66bf9760-2827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dc:33:4e:4a:6f:f3:55:1e:57:66:25:69:30:
                    5e:d9:14:48:08:b6:f9:e7:29:1f:09:8d:48:88:6a:
                    72:cb:f3:56:58:56:81:7c:a3:8f:e5:aa:24:95:bb:
                    93:15:0b:5d:9e:d4:16:2f:76:d4:5a:b7:32:e1:91:
                    ad:07:d0:a3:15:9a:94:d5:f1:59:3a:cc:55:50:54:
                    7f:0e:8d:6c:bf:0f:c3:04:55:b5:75:af:c5:1b:f7:
                    37:51:bb:f6:8e:f1:76:42:83:c7:00:0c:46:ad:53:
                    2a:ea:67:e1:e3:14:2f:0a:82:e1:a0:b4:cf:43:e9:
                    3b:eb:7c:0f:ee:0f:3e:b5:b1:3c:40:3b:44:5c:c7:
                    bf:e1:7c:aa:a3:39:35:55:d8:38:24:d2:86:12:51:
                    5d:9a:f1:6e:02:9f:33:2e:17:5b:0e:d3:0a:87:19:
                    64:13:4b:05:11:e3:cc:5a:33:10:90:79:e5:8f:93:
                    6b:5d:0b:ff:1a:a6:d2:01:5d:c4:65:09:0a:33:a7:
                    b8:26:ac:44:cf:2c:9c:d3:34:01:6e:19:da:90:c9:
                    08:33:da:8f:71:4d:3b:37:15:97:c9:17:22:08:dd:
                    65:6d:2c:ba:c4:04:9a:27:0e:4c:97:92:d0:ea:39:
                    aa:d0:c0:1e:fa:e7:f2:bb:d5:c9:5d:86:a6:8b:73:
                    b1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:35:AA:65:F8:32:6C:2E:29:5C:47:EC:49:33:2E:AA:F5:77:B6:EE
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/4C4AC452D67911ECBFC6CB7BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:83:68:07:00:db:af:40:78:26:90:6d:97:0f:ad:00:7e:05:
         32:15:6c:c5:59:47:85:19:73:38:07:bc:3e:08:f1:6d:e8:18:
         89:57:65:b5:d5:ba:46:26:62:cd:30:e1:ec:a7:44:64:03:1a:
         cf:f9:2a:56:fa:d3:be:98:fb:b9:8f:47:c1:77:e3:83:d1:a5:
         5f:51:33:56:e1:34:b1:c3:9f:9c:8c:2f:e9:5c:85:e6:1e:e6:
         0c:ad:0a:a0:80:ac:a7:0c:ee:f0:18:da:e7:3f:37:13:70:38:
         61:21:85:79:8b:19:e2:f4:77:49:91:a1:24:25:89:b0:1e:7f:
         f2:d1:b2:64:71:d3:5e:35:2b:9a:15:d0:2b:ae:f7:f4:0f:69:
         fe:5b:21:99:94:a5:6e:8d:d7:26:92:68:80:1c:1d:3b:92:bd:
         05:f4:9a:bd:34:9d:0c:49:a2:31:e9:ff:47:97:53:ac:64:d6:
         c6:5e:a8:2d:71:9f:3b:dd:1c:7c:8e:e2:88:4a:a5:a9:32:a3:
         97:7a:c6:31:ed:02:c7:b3:b7:76:07:f0:a1:4b:1f:0e:8f:43:
         06:94:3a:8c:a4:e6:ea:c3:39:0b:21:a0:4c:08:99:10:a0:ee:
         a1:6e:de:a2:16:b0:02:26:2b:e2:ef:f8:2a:b8:c7:f8:f8:df:
         80:d2:95:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:44:50 2024 by rpki-client on console-fra.rpki-client.org