Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/47660D4A488F11EFB89B763FC4F9AE02.roa
File:                     47660D4A488F11EFB89B763FC4F9AE02.roa (raw, json)
Hash identifier:          eI4UCoJeEzevXuPhkPqjuDi0BdhKf8YS6t00eoAv4wY=
Subject key identifier:   96:60:B2:C7:D5:B1:1A:A2:94:30:45:8C:A0:72:9C:57:5B:94:3C:E6
Certificate issuer:       /CN=A913C0C6/serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B
Certificate serial:       04A3
Authority key identifier: 00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/47660D4A488F11EFB89B763FC4F9AE02.roa
Signing time:             Wed 20 Nov 2024 23:43:12 +0000
ROA not before:           Wed 20 Nov 2024 23:43:12 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     138521
IP address blocks:        103.127.162.0/23 maxlen: 24
                          2404:2440::/32 maxlen: 32
                          2404:2440:a0a0::/48 maxlen: 48
                          2404:2440:abcd::/48 maxlen: 48
                          2404:2440:b0b0::/48 maxlen: 48
                          2404:2440:beef::/48 maxlen: 48
                          2404:2440:c0c0::/48 maxlen: 48
                          2404:2440:cafe::/48 maxlen: 48
                          2404:2440:d0d0::/48 maxlen: 48
                          2404:2440:dada::/48 maxlen: 48
                          2404:2440:e0e0::/48 maxlen: 48
                          2404:2440:eeee::/48 maxlen: 48
                          2404:2440:f0f0::/48 maxlen: 48
                          2404:2440:face::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl
                          rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1187 (0x4a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C0C6/serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B
        Validity
            Not Before: Nov 20 23:43:12 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=673e7410-2c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:08:dc:80:2f:d2:6a:5f:5d:35:1b:3e:fc:c5:
                    61:9e:cd:50:fb:33:cc:21:38:e0:6b:1f:84:a4:f4:
                    6b:7b:f1:b1:96:c8:2e:b4:6a:5c:de:d9:09:f8:83:
                    c0:52:68:e6:bb:62:c2:48:34:76:b5:0f:40:7b:e2:
                    9e:04:bc:90:a3:17:8f:a8:5c:8a:d9:e6:8f:c6:e4:
                    c3:96:e5:ba:bd:9e:e9:5c:47:7d:10:eb:2f:3a:a6:
                    59:9a:ca:47:6c:47:05:0c:ef:d1:fe:af:7f:49:c6:
                    88:2b:51:91:41:b0:2a:59:f3:f3:11:fe:33:55:c1:
                    72:1a:19:e9:da:5f:d1:df:fa:9a:81:ae:84:3a:52:
                    5f:ff:d5:52:1a:5c:e3:2a:12:37:dc:58:f7:66:ce:
                    76:3e:ec:33:ea:25:d1:7d:29:28:23:d4:81:7b:58:
                    78:9c:18:18:6e:9d:89:87:05:4e:2b:dc:3e:18:fc:
                    c4:1a:4e:bb:a2:79:1e:3c:bb:27:36:27:e2:1c:e8:
                    e8:33:13:af:75:c7:8b:d5:09:7d:49:8e:f1:37:6c:
                    42:8c:2c:04:f8:2e:2c:00:63:d4:57:20:8d:23:74:
                    2d:22:10:66:dd:e1:c3:c4:7c:82:af:37:5c:d2:c1:
                    ce:a8:38:75:99:38:76:17:9b:0d:70:94:01:00:62:
                    58:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:60:B2:C7:D5:B1:1A:A2:94:30:45:8C:A0:72:9C:57:5B:94:3C:E6
            X509v3 Authority Key Identifier:
                keyid:00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/47660D4A488F11EFB89B763FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.162.0/23
                IPv6:
                  2404:2440::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:6f:ac:0c:52:a9:f4:ff:f0:12:f2:72:6f:11:4d:18:d8:17:
         07:8a:a4:b9:23:f9:37:ed:70:74:bc:d2:a3:74:50:4c:3b:7e:
         40:6b:32:96:62:81:42:e7:76:c4:e2:b8:18:b3:e0:64:9c:32:
         e2:dd:8e:9b:60:ae:25:dd:01:19:86:83:95:30:5a:ae:9a:a1:
         35:b8:6a:0f:f6:cc:ff:5c:d5:c8:bb:73:a7:a2:2d:67:15:ae:
         1f:46:54:58:a0:e5:03:89:bc:58:64:a0:f7:37:3e:d2:bf:4e:
         91:19:df:2b:9e:24:28:e3:c3:5a:08:1a:d8:08:1e:de:2b:47:
         b9:6e:91:64:6a:e9:2c:7c:35:47:55:dc:a2:9d:4e:51:d0:b4:
         3e:47:84:08:88:cb:4e:c3:c4:10:f4:1b:51:2d:60:8e:1a:ec:
         4a:c0:7f:20:53:16:1d:a9:9e:49:a1:6e:a1:be:05:ab:c9:79:
         1d:37:01:ff:f4:98:e5:d6:0a:63:2a:10:e6:a4:08:af:d4:7a:
         c7:a2:99:16:3f:d9:6b:0f:d8:1e:e4:27:18:15:24:f6:22:87:
         a5:7b:fd:e7:64:5d:a4:69:a5:57:4b:12:0a:ac:fa:b9:18:73:
         d7:58:71:31:7a:cd:01:65:61:42:27:1f:48:f5:8f:29:72:fa:
         e2:cb:23:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:33 2024 by rpki-client on console-fra.rpki-client.org