Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/4878EA2E954511EF87341210C4F9AE02.roa
File:                     4878EA2E954511EF87341210C4F9AE02.roa (raw, json)
Hash identifier:          3Hi3qHebz75olBYvl7sFul5/x4z+usSMAu2fmKYpx6I=
Subject key identifier:   6A:0C:13:E0:29:FD:70:0F:1B:D6:E6:98:41:95:F1:02:9D:B3:E7:EE
Certificate issuer:       /CN=A91407B7/serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC
Certificate serial:       0779
Authority key identifier: F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/4878EA2E954511EF87341210C4F9AE02.roa
Signing time:             Mon 28 Oct 2024 21:21:56 +0000
ROA not before:           Mon 28 Oct 2024 21:21:56 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     137453
IP address blocks:        103.155.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl
                          rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1913 (0x779)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91407B7/serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC
        Validity
            Not Before: Oct 28 21:21:56 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=67200074-795b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8d:cc:bf:6d:6c:70:b2:8f:ce:64:e2:21:77:
                    0e:df:ca:ed:bc:7f:1d:89:9b:52:dd:93:23:c1:98:
                    93:3e:6f:1e:f5:58:db:df:46:e5:76:c3:96:61:fa:
                    0e:53:64:b0:bf:a1:22:93:ed:79:a8:27:e2:6d:ec:
                    c6:a6:7c:9d:68:3f:ba:3a:20:75:19:25:59:81:b7:
                    72:eb:a7:9c:07:e7:01:88:b3:f7:ff:75:10:ac:8f:
                    bc:f5:fc:1f:f1:c0:72:ca:43:28:f4:cf:f7:ed:fd:
                    97:ef:a9:70:0a:cc:43:8b:77:c0:e7:cf:9b:9e:06:
                    8b:ae:a8:db:b6:23:c6:1c:ea:3b:bd:2e:44:db:22:
                    dc:88:6e:6c:40:01:7f:8f:28:1e:cf:93:57:86:6a:
                    f8:32:2e:66:78:93:91:ae:7b:c7:06:bd:cc:99:0b:
                    91:b1:7f:37:6e:a9:db:71:5f:eb:77:64:2a:59:0a:
                    66:31:69:34:aa:4e:5c:d9:53:d2:96:7a:7e:13:45:
                    0e:5d:34:a6:a1:7e:d2:54:6a:41:b6:77:62:54:2f:
                    9c:be:e1:17:61:3f:d3:ef:8a:b3:e1:4f:f0:59:77:
                    67:80:4a:ac:2a:e8:3c:16:3d:f5:2b:b7:64:8d:99:
                    26:d5:b6:a1:36:63:c1:f3:fc:1a:29:2c:49:4b:8a:
                    3f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0C:13:E0:29:FD:70:0F:1B:D6:E6:98:41:95:F1:02:9D:B3:E7:EE
            X509v3 Authority Key Identifier:
                keyid:F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/4878EA2E954511EF87341210C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:16:c8:de:81:0e:66:f1:71:9f:f7:82:64:85:98:5c:54:3b:
         c9:65:14:83:fe:2c:a9:b9:58:f9:06:bb:54:3a:1d:be:a9:10:
         5c:d2:01:ae:b1:f8:de:7b:69:d5:f6:c1:37:52:99:63:19:29:
         a8:02:f6:d6:6e:4c:47:30:15:62:ea:9f:e0:c9:b2:35:14:08:
         c7:47:a8:53:96:3a:72:65:6f:41:4f:c6:71:45:bd:60:bc:5c:
         62:b0:90:dc:f7:f2:36:79:13:be:7f:30:ed:0a:b9:01:b3:60:
         f8:02:ff:e4:7d:64:6c:fa:cc:90:4d:5a:08:aa:32:97:d6:90:
         51:cf:ef:8a:b3:45:6d:71:60:72:93:07:c3:c5:dd:7b:d1:06:
         6a:b1:30:ea:8e:3e:64:53:bd:8a:04:74:c0:d2:e9:4f:72:ee:
         a2:36:30:d3:db:91:81:aa:e2:cf:e9:b8:96:1d:5f:14:4b:27:
         c7:4d:bd:18:e7:ec:ff:7f:a3:6b:36:1b:0f:de:71:68:d7:b4:
         46:43:6c:67:e0:b1:64:49:f9:ea:d7:3f:dc:e0:32:86:c9:9d:
         4a:52:e6:3a:de:f3:7a:d3:15:7d:19:70:9e:51:0c:4e:9d:5f:
         20:35:88:71:58:4f:70:2e:e9:7a:c8:2f:31:53:1e:60:fa:0e:
         a3:8c:9f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:07 2024 by rpki-client on console-fra.rpki-client.org