Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/86998830806F11EF91F9E57CC4F9AE02.roa
File:                     86998830806F11EF91F9E57CC4F9AE02.roa (raw, json)
Hash identifier:          Zz54eu1g+teN0SG9WdSOFE2h52pNF1dRY2pmZ9i/J4Q=
Subject key identifier:   9A:0F:3C:E6:31:5C:E4:27:2E:97:2F:BF:00:16:00:38:06:CD:E8:1B
Certificate issuer:       /CN=A915C645/serialNumber=CB0C330E3837948FE5DDFA604732775D4B0CF814
Certificate serial:       09
Authority key identifier: CB:0C:33:0E:38:37:94:8F:E5:DD:FA:60:47:32:77:5D:4B:0C:F8:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/86998830806F11EF91F9E57CC4F9AE02.roa
Signing time:             Thu 03 Oct 2024 03:45:33 +0000
ROA not before:           Thu 03 Oct 2024 03:45:33 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     132722
IP address blocks:        103.19.100.0/24 maxlen: 24
                          103.19.101.0/24 maxlen: 24
                          103.19.102.0/24 maxlen: 24
                          103.19.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl
                          rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C645/serialNumber=CB0C330E3837948FE5DDFA604732775D4B0CF814
        Validity
            Not Before: Oct  3 03:45:33 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=66fe135d-376e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ed:d5:81:e2:88:10:fc:42:d0:fd:53:25:09:
                    51:72:fd:77:a9:89:85:df:10:c2:cc:76:63:70:14:
                    b8:bf:89:ee:40:df:34:b5:a2:f6:32:c0:3e:db:3d:
                    6c:58:53:8c:ec:fc:6b:5d:e8:21:29:b3:af:b7:47:
                    a3:c1:40:f6:de:08:46:c7:c2:95:f4:71:4b:51:47:
                    fb:76:7c:75:bd:d1:e3:38:97:3d:8f:c5:00:82:44:
                    4f:04:23:f5:c5:d9:d2:55:2f:23:02:52:f7:f7:4f:
                    5d:23:ca:58:b9:31:5e:23:62:0b:00:31:bd:9e:2c:
                    af:01:5b:c4:99:62:c6:dd:95:91:67:bf:13:ee:9f:
                    1b:da:8c:4e:5c:ff:79:22:4d:be:95:a7:c5:8d:2a:
                    5d:cc:41:8e:d8:11:52:24:0f:b8:be:ef:41:13:35:
                    fd:9e:81:88:bc:79:5e:f9:71:cd:49:ef:b2:37:ed:
                    24:da:c4:42:81:87:a7:0d:93:84:0c:30:ad:48:4c:
                    92:d2:42:66:61:4c:c5:d6:a3:72:fa:68:83:6d:7d:
                    fc:32:3f:77:ac:7b:f6:8f:9e:83:31:e5:dc:18:f9:
                    54:e1:57:8f:95:45:ad:e2:c2:d4:fd:5b:20:d3:3f:
                    c7:54:38:00:39:9c:75:06:9f:36:a0:81:f8:2a:69:
                    10:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0F:3C:E6:31:5C:E4:27:2E:97:2F:BF:00:16:00:38:06:CD:E8:1B
            X509v3 Authority Key Identifier:
                keyid:CB:0C:33:0E:38:37:94:8F:E5:DD:FA:60:47:32:77:5D:4B:0C:F8:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/86998830806F11EF91F9E57CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:6b:51:f8:12:69:4a:c1:0e:39:76:18:85:3b:69:2a:f0:25:
         90:6c:c3:d9:7f:a4:1f:83:1b:08:97:26:dc:4e:c9:f6:ac:3d:
         34:78:c0:a5:43:e0:05:5e:06:8a:16:1c:34:10:e0:3b:4b:f0:
         61:4e:18:68:b7:77:77:69:22:90:8e:b5:3f:13:54:29:06:d2:
         6f:e0:2c:2d:bc:6e:66:2c:50:02:71:4f:b6:4b:5c:96:76:27:
         cd:cb:9e:29:4a:7e:59:43:87:09:de:b8:09:60:1a:c9:87:11:
         08:d3:bc:b2:8e:68:f9:26:b2:c5:da:d7:4c:f8:f6:35:c9:b4:
         31:93:e2:6d:4e:df:eb:b1:d8:52:3b:f9:7b:1b:19:c7:a2:1f:
         71:7f:39:46:75:c2:d1:3f:92:e6:97:79:a6:d5:78:7a:37:32:
         c3:2a:03:01:4d:38:d7:a1:49:16:c3:10:92:3d:0e:e8:7f:87:
         e9:aa:2a:0c:8d:99:4c:d7:b9:78:33:c8:f3:f1:eb:49:fd:95:
         89:d9:28:05:ea:ed:f6:91:1e:c9:d3:6a:c4:44:89:de:a2:76:
         e8:04:dd:a5:ae:c2:b8:84:75:16:46:d3:f5:c7:0b:6b:b2:4c:
         c6:91:9c:80:b4:c6:d7:ec:b9:22:87:bc:d9:d8:97:94:39:86:
         31:67:a1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:31:30 2024 by rpki-client on console-fra.rpki-client.org