Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/47A72A7441ED11EC9B02377AC4F9AE02.roa
File:                     47A72A7441ED11EC9B02377AC4F9AE02.roa (raw, json)
Hash identifier:          JRIJmi6CkdzwRl9tqXcDbUlpayemlqeCYja07bnQOys=
Subject key identifier:   42:A9:81:27:9E:2E:09:86:33:6B:F7:10:95:C9:3A:B2:CD:DB:D8:5E
Certificate issuer:       /CN=A915A39E/serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519
Certificate serial:       041E
Authority key identifier: 3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/47A72A7441ED11EC9B02377AC4F9AE02.roa
Signing time:             Sun 17 Nov 2024 00:03:25 +0000
ROA not before:           Sun 17 Nov 2024 00:03:25 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     139065
IP address blocks:        103.174.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl
                          rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1054 (0x41e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A39E/serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519
        Validity
            Not Before: Nov 17 00:03:25 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=673932cd-5881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:6f:a8:09:99:96:93:1d:42:ef:20:29:d6:0c:
                    51:8b:2c:87:26:77:49:4b:2f:95:7f:3c:12:7f:52:
                    58:2b:33:8d:7a:db:f6:bd:78:bd:f0:13:1f:f0:dd:
                    81:2c:f3:d0:e1:3a:af:72:a3:02:20:7c:c7:56:0f:
                    40:4f:73:39:d0:25:85:da:2e:de:b6:c3:82:8a:30:
                    30:01:fe:ca:29:11:82:30:be:4c:8b:ee:62:1e:45:
                    3a:29:cb:d6:1f:5a:47:de:2b:93:c9:37:b1:94:d5:
                    7f:e8:24:50:ee:2f:2d:02:f1:ca:34:ff:85:02:23:
                    68:76:bf:78:b7:55:33:76:b6:8f:b5:29:93:aa:1e:
                    52:7a:fe:9f:08:b8:a5:c7:0f:8b:4f:c7:49:bc:db:
                    ab:3a:e1:bf:66:22:e6:ef:b7:35:c2:33:6c:84:7f:
                    80:39:ab:59:b5:49:83:08:2a:b1:e3:77:65:ca:96:
                    37:8c:29:dd:d1:f9:4e:65:34:c2:12:fa:ba:d0:d4:
                    37:4c:34:1a:f2:ed:ef:30:73:87:14:4d:9c:96:2b:
                    29:f8:3a:44:e5:41:67:41:66:c2:26:3a:ea:cd:08:
                    b1:b6:66:12:75:8b:d9:c8:9f:a8:89:15:24:f6:fe:
                    7a:8b:66:b6:8f:42:da:e5:a9:09:b0:73:64:cf:d3:
                    ca:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A9:81:27:9E:2E:09:86:33:6B:F7:10:95:C9:3A:B2:CD:DB:D8:5E
            X509v3 Authority Key Identifier:
                keyid:3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/47A72A7441ED11EC9B02377AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:6e:e5:18:96:23:86:c8:29:20:ca:a7:7b:8c:ba:11:6a:10:
         7a:72:a8:f4:74:17:64:4e:c6:ed:60:33:ca:e6:44:c9:e1:c7:
         9f:40:d1:18:05:eb:ee:da:c3:0c:d5:41:b0:b0:25:0d:a7:7a:
         ff:81:f5:6a:3c:51:36:09:43:ac:a2:a2:78:10:df:07:98:fd:
         92:ce:2d:9b:42:dc:61:fe:9e:11:1c:1d:26:4a:0a:5f:a5:9f:
         11:77:96:ea:a3:e3:e9:5c:f3:24:aa:2b:1c:60:b0:bd:45:fd:
         f5:ef:33:4c:07:31:b1:77:42:91:fc:0b:3c:69:2e:e2:6a:e3:
         f4:d1:9b:5b:97:32:ef:73:d1:09:5e:4b:96:1a:af:14:84:38:
         49:ae:3f:da:25:06:fb:10:f8:7c:99:18:3d:f8:7b:65:f8:cf:
         15:82:2f:28:7a:33:f1:c8:43:28:72:f7:49:05:e5:0c:f1:a3:
         d4:58:f2:71:20:44:43:1a:00:01:1e:21:05:37:c0:a1:f3:c2:
         63:48:d9:75:a6:0e:83:5f:fe:66:77:45:8c:42:57:46:b5:c7:
         92:95:af:a5:57:77:48:58:ed:99:55:15:6c:18:4a:ed:4a:29:
         80:b0:ef:75:fe:1e:b8:d8:bc:98:7c:42:24:56:4d:ee:76:fd:
         68:39:67:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:58 2024 by rpki-client on console-ams.rpki-client.org