Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/4AC14C4AC6CB11ECB185E43EC4F9AE02.roa
File:                     4AC14C4AC6CB11ECB185E43EC4F9AE02.roa (raw, json)
Hash identifier:          Yllv7GduXNWOYIX1rMtXNPRv/0417UqdoQWVHJFRoH0=
Subject key identifier:   EC:DD:BE:D3:06:7D:1B:B4:10:A4:F0:AD:22:B6:8E:57:FC:A4:CF:F5
Certificate issuer:       /CN=A91400CC/serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C
Certificate serial:       02C4
Authority key identifier: 27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/4AC14C4AC6CB11ECB185E43EC4F9AE02.roa
Signing time:             Fri 25 Oct 2024 01:45:18 +0000
ROA not before:           Fri 25 Oct 2024 01:45:18 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     132742
IP address blocks:        43.248.60.0/22 maxlen: 24
                          103.39.148.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl
                          rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 708 (0x2c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91400CC/serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C
        Validity
            Not Before: Oct 25 01:45:18 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=671af82e-987d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0a:95:c4:7a:3d:8b:1e:95:c0:cf:a0:f7:be:
                    97:2e:ef:28:44:e0:1b:06:8d:59:b0:8d:f9:84:55:
                    ca:3f:62:3a:e7:0b:d9:65:07:36:f3:71:be:6f:56:
                    d3:f9:bd:53:86:5c:dc:23:8f:2c:e2:c5:9d:df:b7:
                    a2:a7:54:96:2d:1e:6a:11:5a:f2:02:c6:85:63:9c:
                    74:f0:31:f2:45:b2:bb:7c:fa:db:0d:02:ab:c0:c6:
                    5d:44:d6:18:bf:bf:a2:85:d8:07:eb:d3:b7:be:81:
                    93:a3:99:82:2c:1b:bd:53:c7:75:af:75:31:4e:e7:
                    41:82:70:f4:81:f0:17:1a:2d:63:13:1e:f3:f3:b1:
                    fa:9a:09:75:a9:54:ea:b1:b1:7c:cf:a6:5f:45:41:
                    60:96:dc:16:85:71:ff:d3:17:86:4a:4a:8b:79:1e:
                    72:6f:c5:93:96:e4:02:8f:29:62:4b:72:09:da:3f:
                    0d:cf:b1:cf:ab:48:5c:37:a6:3a:10:9d:50:9b:5e:
                    0d:dd:0d:93:a5:8e:be:f7:5d:24:cb:21:3c:4f:95:
                    ee:66:f6:b8:de:1f:be:7e:9b:1e:7c:25:0d:4c:a0:
                    85:3b:69:5d:12:5a:8f:9c:90:17:a1:79:0a:f5:e8:
                    0c:34:64:8d:de:2e:40:68:c5:6a:19:3f:96:5a:de:
                    c5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:DD:BE:D3:06:7D:1B:B4:10:A4:F0:AD:22:B6:8E:57:FC:A4:CF:F5
            X509v3 Authority Key Identifier:
                keyid:27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/4AC14C4AC6CB11ECB185E43EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.248.60.0/22
                  103.39.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:4a:df:4d:2e:b5:fe:bf:ce:ca:0c:5e:ff:19:33:ae:bf:e5:
         31:e8:6f:46:71:85:41:71:62:9b:f3:88:53:4b:ff:68:71:95:
         85:ed:4a:75:18:65:15:2e:7e:7b:02:44:40:0d:e4:be:43:d4:
         71:ae:e6:51:fa:46:63:98:95:e5:5c:c9:4f:bf:87:28:6c:82:
         0b:2b:62:b5:82:be:13:ae:dc:87:b3:13:5c:2a:40:34:23:bf:
         5a:0e:5f:be:92:f4:96:86:af:42:43:25:3a:46:ef:e4:b1:11:
         a1:0b:61:db:50:30:25:6f:5e:65:41:ae:a8:a0:6e:25:11:ab:
         04:86:d5:76:b8:b0:3e:b5:29:fe:9b:f6:58:a4:dd:1c:e7:14:
         1a:8a:97:20:4d:d7:d5:a5:3c:ff:0f:17:91:f7:e0:e5:eb:40:
         12:6d:67:a3:9d:dd:25:24:0f:ef:f5:ef:24:7d:9c:07:8e:55:
         65:fc:d4:24:39:1a:ea:f3:32:ff:d0:e6:69:29:e7:ae:c8:14:
         7d:c1:73:34:e0:dd:54:5d:82:2e:6a:33:cb:06:31:c8:ee:6a:
         c4:b9:66:9f:89:a8:08:ae:93:89:8e:a3:33:1a:0c:30:b9:11:
         f7:76:37:36:a4:89:0c:d1:c8:e4:1a:3a:a2:ee:23:b9:c7:2d:
         6c:db:0d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:35 2024 by rpki-client on console-ams.rpki-client.org