Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D08850D2B71411ED98AFCC20C4F9AE02.roa
File:                     D08850D2B71411ED98AFCC20C4F9AE02.roa (raw, json)
Hash identifier:          dYu/e56IQckjEEt+emc8iMpZjFQqlQfz3om1m/F+Tms=
Subject key identifier:   5F:EB:5D:F6:71:01:67:DF:BF:1C:79:83:85:B5:E1:0B:C9:0A:2A:A9
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       253B
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D08850D2B71411ED98AFCC20C4F9AE02.roa
Signing time:             Fri 16 Aug 2024 18:15:59 +0000
ROA not before:           Fri 16 Aug 2024 18:15:59 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     24242424
IP address blocks:        103.138.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 17:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9531 (0x253b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Aug 16 18:15:59 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=66bf975f-a765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:48:3c:b4:43:15:c3:7f:c0:f6:3c:6f:f7:60:
                    a6:c1:2a:62:fa:b2:4e:29:2a:48:3a:c2:26:3e:07:
                    e0:f5:c8:b8:79:f5:ab:8b:35:cf:36:97:e8:f1:ea:
                    b0:75:58:38:97:aa:9f:7a:0f:77:83:e8:e6:de:20:
                    a7:fa:7c:49:9c:dc:23:f2:92:3e:93:d3:bc:7c:3e:
                    f3:4b:42:bb:0a:65:f0:b4:47:38:dd:f5:28:ba:47:
                    20:3f:a4:10:21:59:4a:f0:7d:14:c9:5e:b7:68:1f:
                    11:64:f2:5a:c7:79:55:49:aa:45:8a:5c:9b:d7:6a:
                    9c:15:07:e9:1a:0a:b8:48:52:d1:00:ae:fa:2f:7c:
                    1a:8e:5d:e4:86:c2:03:cb:61:d4:1e:a0:b0:28:07:
                    f6:51:f6:0e:6c:b3:71:49:ad:18:9e:bf:12:66:13:
                    09:48:41:15:29:b2:21:91:55:e5:33:b3:28:97:b7:
                    fe:9e:f7:c2:d0:37:71:d6:65:ba:52:c3:50:d0:8e:
                    3c:20:40:15:d9:0b:de:b1:f4:7d:ec:2a:25:60:fc:
                    ed:9c:39:50:00:9e:71:a0:5a:35:d4:b8:3c:bd:88:
                    a9:a9:ca:7d:c3:6b:8a:f6:33:2c:fd:4a:e7:44:32:
                    03:3e:aa:07:fa:3f:2f:f5:4c:57:7f:95:68:a4:f6:
                    a0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:EB:5D:F6:71:01:67:DF:BF:1C:79:83:85:B5:E1:0B:C9:0A:2A:A9
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D08850D2B71411ED98AFCC20C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:ee:6f:a8:fa:72:8c:c5:2b:42:f2:4d:76:85:cd:c7:6e:3d:
         0a:d2:f0:f6:ff:6a:a7:12:87:48:c6:5f:35:5b:10:e3:ed:92:
         48:7b:6c:91:e0:0f:5c:98:2e:ed:4b:f9:f9:58:8d:0e:70:64:
         45:33:37:04:4f:f4:19:01:a0:af:83:0b:16:d0:02:5a:26:71:
         67:44:35:ae:bf:aa:e6:1d:71:7c:98:fe:eb:2a:cc:37:33:99:
         00:b3:a7:fc:41:e9:04:92:43:fa:30:e3:1b:55:6b:fe:57:7d:
         1e:94:fb:cf:03:3e:4d:39:f2:d7:70:30:a3:47:d8:7e:2f:df:
         81:76:e5:fd:bb:95:9e:3a:9d:0e:b6:48:32:05:a8:a9:2f:51:
         2b:90:d9:60:9e:1f:01:86:c7:68:c6:d2:ad:e2:0f:64:08:a7:
         d1:60:bc:58:70:0b:5b:39:a8:d9:85:3c:b4:f8:32:7d:68:9a:
         51:e1:af:d2:72:56:8c:14:36:5d:91:5e:b0:81:d6:ff:6c:23:
         57:47:57:4f:b2:3c:7a:ce:fa:c9:1a:19:30:2a:c0:c3:9a:d4:
         a6:e5:19:ef:e0:52:11:d9:3a:16:67:47:9f:ae:97:c5:39:97:
         37:37:2d:b7:2d:8d:ea:b6:b6:e0:cb:e4:60:63:e6:3f:91:67:
         5e:a9:dc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:05:15 2024 by rpki-client on console-ams.rpki-client.org