Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/7C321BDEA55711EFB8317F6BC4F9AE02.roa
File:                     7C321BDEA55711EFB8317F6BC4F9AE02.roa (raw, json)
Hash identifier:          6GvXrP8o2StjgBVhcwqtUNQLUzdZOXCdVs6snlQvu+k=
Subject key identifier:   A4:5E:43:3E:07:D1:BA:3D:6D:31:19:23:ED:13:E2:8E:27:E4:94:85
Certificate issuer:       /CN=A913C4FD/serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319
Certificate serial:       02
Authority key identifier: 59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/7C321BDEA55711EFB8317F6BC4F9AE02.roa
Signing time:             Mon 18 Nov 2024 02:47:43 +0000
ROA not before:           Mon 18 Nov 2024 02:47:43 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     139899
IP address blocks:        103.146.226.0/23 maxlen: 23
                          2001:df2:7280::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl
                          rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C4FD/serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319
        Validity
            Not Before: Nov 18 02:47:43 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=673aaacf-6b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:94:d4:99:96:fe:5c:31:7f:4c:f4:b3:34:e6:
                    5f:ae:45:ae:de:ad:cc:28:3c:5c:7c:78:e9:80:9f:
                    8a:31:54:b1:a5:ad:6a:47:ed:b1:0f:7b:8c:9c:06:
                    58:c8:a6:02:30:b8:55:5c:bf:09:b0:88:80:2f:fd:
                    c4:49:67:bf:5d:ad:3b:b0:3e:e3:02:77:d7:cb:e6:
                    d8:33:93:6e:db:04:e3:aa:bd:e1:f4:d5:e2:14:eb:
                    8b:40:99:07:6c:26:26:ee:60:1e:00:10:53:13:11:
                    86:81:0f:0d:3c:dd:d4:6e:f1:1b:14:c5:3f:7d:eb:
                    a4:a5:b3:3a:3a:67:9a:f9:b3:09:01:ba:1e:e2:22:
                    4f:6d:0e:48:63:04:32:30:b2:86:8c:03:d9:d2:d9:
                    b1:b7:fb:3c:cb:e8:b4:ce:21:9c:96:b6:4f:5b:58:
                    8c:9a:15:0d:97:0b:20:1f:6a:ec:59:b6:84:de:3d:
                    00:f6:82:e5:e3:78:7b:5a:65:e4:17:2b:1d:3e:c4:
                    30:2b:2e:41:8e:bf:fe:18:0b:91:1f:2e:15:86:43:
                    34:ac:25:9f:c6:b1:75:16:f6:f5:7c:f5:f5:8f:c8:
                    de:ce:53:94:89:86:44:c0:3c:2b:b5:22:2a:7c:b4:
                    47:30:e0:6d:ae:a9:09:21:3e:3b:1e:50:4e:5d:07:
                    45:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5E:43:3E:07:D1:BA:3D:6D:31:19:23:ED:13:E2:8E:27:E4:94:85
            X509v3 Authority Key Identifier:
                keyid:59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/7C321BDEA55711EFB8317F6BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.226.0/23
                IPv6:
                  2001:df2:7280::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:fa:8f:70:9e:31:80:87:55:97:3a:c7:b6:60:b0:58:3a:2d:
         0b:e1:20:a1:93:8b:72:b3:49:f5:6f:44:39:1f:8f:14:6f:58:
         48:e4:f0:f1:7c:72:cf:fa:a6:5a:f2:f1:98:2c:fd:af:42:79:
         e0:c7:db:a4:5d:b5:76:83:9e:eb:9c:f2:64:01:36:d3:3a:6f:
         9f:f7:d2:ea:77:73:0a:4f:ae:32:0e:1c:a9:e2:de:e9:18:0f:
         24:b1:87:6b:29:57:13:db:49:f5:c3:64:f8:ff:53:03:f0:46:
         7d:e0:d6:95:93:89:1a:db:9e:18:3f:3c:44:17:6e:03:e3:cb:
         c2:05:bd:fe:79:74:ec:09:f5:06:06:4e:50:08:a3:ba:92:3c:
         f1:96:de:b2:60:f0:dd:49:d4:66:f3:7c:2e:e7:ba:09:6b:9a:
         de:93:85:df:5b:d6:18:23:3f:d7:85:48:c4:3f:5e:b7:e5:f7:
         f6:0d:f1:24:e7:99:c1:6d:5f:44:82:70:1c:8f:5e:43:da:0a:
         ff:f9:47:2d:28:72:73:25:b3:69:a6:53:4b:4a:b7:0c:66:83:
         15:98:7b:1f:9d:6a:91:a8:f9:b9:de:72:aa:42:b1:02:3c:a3:
         0d:42:99:90:81:2a:92:be:f7:26:41:a9:ab:ec:7b:80:89:a0:
         ca:bf:0a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:45:02 2024 by rpki-client on console-ams.rpki-client.org