Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D4B094F697E011ED9EFB180DC4F9AE02.roa
File:                     D4B094F697E011ED9EFB180DC4F9AE02.roa (raw, json)
Hash identifier:          /03hXyLi3Dr2rbUFMkrdUpEPmBNHr3v26Y5pLz5vOMU=
Subject key identifier:   A9:0D:60:A4:02:AC:13:6E:88:3C:74:FA:CF:E2:0B:8C:C3:8C:2F:E9
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       253E
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D4B094F697E011ED9EFB180DC4F9AE02.roa
Signing time:             Fri 16 Aug 2024 18:16:01 +0000
ROA not before:           Fri 16 Aug 2024 18:16:01 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     4294966666
IP address blocks:        103.138.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 17:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9534 (0x253e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Aug 16 18:16:01 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=66bf9761-6ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ff:e8:ea:a3:83:e4:6f:12:6e:63:62:94:f8:
                    5a:c7:bc:67:aa:ad:c2:c8:25:b9:d8:67:56:6d:43:
                    94:13:dc:d1:c1:a5:8b:5d:20:ef:f1:8b:b5:90:15:
                    e6:9a:a7:a1:d4:ca:60:8d:e1:99:0d:79:1e:0c:ab:
                    c1:e0:4f:e7:75:cb:fc:1d:a4:54:ec:17:8d:f5:dd:
                    cd:db:21:1a:88:3e:41:6d:08:92:62:3e:0c:fd:ed:
                    a5:09:03:c0:70:94:09:63:79:d8:d6:5d:7b:e0:8f:
                    eb:de:17:ea:a6:51:46:3d:e0:97:c4:2f:dc:77:65:
                    fb:31:53:42:a6:27:6e:71:01:fd:76:4f:9f:02:1e:
                    c7:f5:be:23:a8:dd:25:aa:1b:7f:c6:9c:f3:cd:96:
                    7a:69:0b:7c:a8:2d:91:f3:28:c2:6c:60:b2:ef:99:
                    a5:e3:c1:5d:bb:3a:ad:c7:e6:1a:c5:13:db:9c:8f:
                    fd:57:8c:5d:a5:34:a4:2e:9e:b5:80:6e:11:4e:0a:
                    41:e2:3f:05:02:f0:3b:9d:63:95:62:f0:ee:c0:0c:
                    bf:51:0a:31:37:10:ae:40:57:3a:3c:62:b1:cf:c8:
                    5d:9f:9a:db:fb:56:bc:cd:64:67:8f:65:e7:cf:39:
                    51:7e:e4:7e:54:a1:db:a3:9b:3e:b3:1c:47:b5:81:
                    dc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:0D:60:A4:02:AC:13:6E:88:3C:74:FA:CF:E2:0B:8C:C3:8C:2F:E9
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D4B094F697E011ED9EFB180DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:30:f5:7f:a9:64:d3:e8:95:af:97:48:65:aa:3c:b2:ca:44:
         b1:b3:6f:44:2d:ec:d1:3f:88:38:a2:4a:54:6e:13:fc:04:a4:
         e2:fc:41:a6:53:78:4b:51:de:89:eb:ba:aa:6e:3e:36:8b:ab:
         ec:51:24:ee:30:6e:26:33:49:b8:1f:c2:cd:a5:34:b0:3c:e5:
         59:f4:d7:d6:9a:bf:87:a4:1e:fe:c8:a0:eb:f2:e2:46:a0:cf:
         77:f5:c3:17:f6:42:87:28:11:16:ac:cf:42:2d:dd:92:fb:5f:
         32:eb:22:ac:84:f6:c0:dc:ac:ec:3c:28:42:a4:4d:21:44:bd:
         a4:a7:b6:c0:d5:07:9c:5f:3e:11:8c:a4:6e:54:27:5c:e6:95:
         02:0f:56:6c:14:4a:98:71:6d:a4:6a:99:1a:42:24:64:ed:58:
         4e:e6:cb:5b:97:6c:f6:27:9e:6b:fd:56:59:23:3c:41:ca:e7:
         6c:2a:6a:ee:8a:ca:b5:2b:8d:2b:18:7f:5c:15:2f:73:98:bc:
         e8:a0:e2:71:6d:67:62:47:95:91:fb:f4:75:33:b5:4d:d7:21:
         02:29:02:20:99:0e:96:bc:55:de:dc:73:47:66:22:75:25:6f:
         ef:f3:5d:38:6b:ae:80:4c:56:43:9e:0d:9c:2e:73:ef:be:88:
         b2:7d:09:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:44:50 2024 by rpki-client on console-fra.rpki-client.org