Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/98647190660511EE9F741151C4F9AE02.roa
File:                     98647190660511EE9F741151C4F9AE02.roa (raw, json)
Hash identifier:          AAPEJMgAJus01VLRJtLyrVsB2r7i4M9FcgcgLyO3Mi4=
Subject key identifier:   12:8B:F6:8B:1E:26:81:C8:92:9B:75:2E:24:90:0C:F2:84:21:3E:67
Certificate issuer:       /CN=A913C68B/serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1
Certificate serial:       07
Authority key identifier: F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/98647190660511EE9F741151C4F9AE02.roa
Signing time:             Sun 08 Oct 2023 18:07:51 +0000
ROA not before:           Sun 08 Oct 2023 18:07:51 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     137985
IP address blocks:        103.241.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl
                          rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C68B/serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1
        Validity
            Not Before: Oct  8 18:07:51 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6522eff7-b162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:df:99:f3:f2:ed:d3:fb:2d:bd:1e:20:75:ff:
                    b8:e6:ec:cf:86:97:c6:99:e8:a7:aa:3f:02:9f:ff:
                    f7:d1:b5:a0:e9:7b:87:2f:bb:63:c3:13:fa:52:bf:
                    69:a7:22:ce:86:2b:bc:51:57:c3:76:6c:7d:8c:31:
                    da:8c:97:8a:bd:32:ed:d8:32:89:f0:bb:49:c0:e2:
                    61:0b:d9:c6:b1:ea:e3:4f:5a:d7:7a:f1:ad:34:41:
                    03:c0:1e:55:e2:b9:52:e2:c2:5d:fb:8a:14:09:ce:
                    1c:8a:88:e6:fa:c6:0c:a5:65:a6:6b:a5:0e:26:57:
                    7a:02:af:f9:97:4d:2b:50:ed:d9:f4:f2:8f:97:a7:
                    7e:fe:d3:b0:e8:3c:32:6e:74:2f:44:f1:60:e2:1c:
                    cd:8e:5d:78:40:0d:47:e6:48:71:b3:56:f0:d4:ca:
                    f0:52:ec:3d:8b:b8:4b:4d:6e:2f:4d:19:47:ef:1f:
                    3e:7a:cb:d4:21:86:91:a2:a4:89:aa:92:d3:07:96:
                    d8:c7:20:d1:10:22:f6:69:a1:65:14:a0:25:0f:20:
                    dd:a2:7c:07:79:68:e1:8f:b4:d4:05:82:27:cd:6f:
                    26:69:96:4d:a8:ce:62:f5:e0:28:22:3d:b1:6e:a5:
                    6c:7a:61:c2:6a:38:be:65:52:33:15:df:44:ca:ed:
                    42:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8B:F6:8B:1E:26:81:C8:92:9B:75:2E:24:90:0C:F2:84:21:3E:67
            X509v3 Authority Key Identifier:
                keyid:F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/98647190660511EE9F741151C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.241.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:7d:d2:29:df:f1:de:02:4c:db:3c:88:8d:ea:c6:60:7f:ef:
         e6:7e:93:18:fd:1f:f4:79:b5:13:d1:9b:5b:f9:0b:4e:e2:ff:
         ba:8d:01:24:13:a1:f4:56:db:2d:b2:ae:89:15:6f:03:78:00:
         a1:60:f4:f2:08:88:fe:af:59:ec:2d:32:94:b8:94:1b:7f:95:
         1d:15:59:03:f0:3e:2f:63:0c:87:1b:05:26:64:16:00:1a:87:
         b5:96:9a:6d:18:8d:08:b4:e7:16:cc:90:57:93:9b:0d:dc:60:
         01:6f:c3:ca:cd:16:25:3d:8f:d1:98:f5:a2:ec:1e:bf:cd:1b:
         71:ec:0a:3e:be:d2:b2:40:e5:9c:bb:d4:c6:8c:bd:a6:72:35:
         4d:31:25:70:2e:32:43:fb:82:aa:bf:84:10:c3:a7:b2:cd:f9:
         5a:b8:0f:bd:16:b7:d2:57:f9:95:4a:ba:47:6c:7f:85:3f:7c:
         ac:be:f5:51:bf:fe:83:3e:65:71:da:8f:3c:73:cd:e9:64:f2:
         ad:7c:86:fb:ad:b3:24:1f:be:6c:b5:6f:06:6a:1d:ce:f7:7f:
         7b:d3:b4:d0:ea:ea:23:2e:d2:9e:74:27:a7:29:c8:e9:62:29:
         5a:46:e9:50:6d:ba:ca:b5:92:a8:15:02:52:69:8e:52:7f:61:
         d8:72:39:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:46 2024 by rpki-client on console-fra.rpki-client.org