Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/260D3330758A11EFAE7A8A39C4F9AE02.roa
File:                     260D3330758A11EFAE7A8A39C4F9AE02.roa (raw, json)
Hash identifier:          8be0KD35jIvGdXDMYzDTqhbhRPMsZm5zv5unHRRc5ak=
Subject key identifier:   8C:3B:A1:99:C8:DE:02:1E:53:17:D1:63:CB:26:38:E1:44:36:7D:FD
Certificate issuer:       /CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
Certificate serial:       0384
Authority key identifier: 60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/260D3330758A11EFAE7A8A39C4F9AE02.roa
Signing time:             Wed 09 Oct 2024 01:14:51 +0000
ROA not before:           Wed 09 Oct 2024 01:14:51 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     136787
IP address blocks:        103.86.96.0/24 maxlen: 24
                          103.86.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl
                          rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 900 (0x384)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
        Validity
            Not Before: Oct  9 01:14:51 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6705d90b-3d10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ec:0a:1e:1c:29:f3:ee:8c:d1:10:ec:b0:2a:
                    44:f2:fb:41:35:2f:b7:e2:e2:da:1f:94:bd:38:fb:
                    ef:35:08:81:e6:aa:8b:a4:37:31:5a:62:59:19:5c:
                    5c:50:ed:c7:7f:c3:3b:6b:73:6a:9a:19:27:95:cd:
                    1c:47:28:03:ea:dd:56:88:50:83:70:3f:a3:71:a2:
                    8c:af:31:33:32:ac:43:e3:58:aa:4d:7b:21:2c:4d:
                    e4:a6:f4:e0:36:fc:67:fc:ac:99:a8:1d:b8:e1:24:
                    b4:cb:8b:f4:e5:66:3c:a6:8f:40:9d:28:de:9a:43:
                    23:7a:ab:71:b6:fe:13:2d:05:de:a1:9a:85:60:1f:
                    10:72:4f:c1:06:67:03:c3:c5:3a:53:c5:21:81:a0:
                    55:a3:65:02:4c:76:67:c7:b4:c4:ed:f2:af:02:20:
                    0b:92:ca:27:ff:13:17:cf:70:49:5b:26:6e:3c:31:
                    fb:b8:de:3e:d8:8b:85:fb:10:41:84:d2:09:e9:9c:
                    98:88:b7:94:c3:1c:8e:7a:5b:80:85:7b:ce:8e:53:
                    0c:f6:f2:27:1f:c6:76:c9:5e:98:7a:51:df:7a:33:
                    dc:1f:25:bd:ed:89:76:2b:20:24:90:23:c7:10:41:
                    48:c0:ed:bf:7b:9e:0d:95:32:f4:d2:05:86:70:01:
                    ad:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3B:A1:99:C8:DE:02:1E:53:17:D1:63:CB:26:38:E1:44:36:7D:FD
            X509v3 Authority Key Identifier:
                keyid:60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/260D3330758A11EFAE7A8A39C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.96.0/24
                  103.86.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:9b:b8:81:e2:ea:9f:26:5a:e3:7b:22:97:0a:ff:45:42:63:
         11:a8:b8:57:bb:5e:8b:a7:ee:84:ef:12:e7:32:04:12:eb:25:
         b1:94:63:aa:f5:01:2c:34:0a:3b:9e:a8:ef:f0:20:2e:c6:fe:
         64:97:a5:33:76:67:2c:cc:61:d5:eb:49:60:95:48:a6:64:89:
         ca:22:22:a5:0d:78:b8:32:0f:eb:5d:75:ce:d1:d1:5c:29:2c:
         bf:c7:41:54:03:fc:43:28:2a:97:76:e4:53:5d:18:43:c2:93:
         9c:a5:63:eb:f2:45:da:76:53:e7:bf:e3:df:18:88:66:3c:47:
         56:08:cf:86:4e:a7:98:72:b4:83:42:ea:f1:2f:18:39:6f:85:
         56:3d:63:e2:f7:36:6b:a0:c5:19:05:ec:9c:7d:9f:4b:c5:14:
         4c:94:7e:73:51:58:2c:da:72:06:98:45:ce:1b:07:df:6b:80:
         70:ad:cb:99:c6:af:99:90:3e:66:3c:aa:fe:1a:97:a4:09:29:
         40:e1:4a:3e:9b:92:2e:35:28:79:3e:10:ea:a6:72:bb:a3:7e:
         d5:25:01:28:62:2d:1d:cc:9b:13:e9:9e:fc:d6:c9:c2:80:e5:
         44:3b:3b:ae:9c:7a:96:fd:a9:3f:f7:b6:3f:37:18:98:e5:bf:
         f9:b9:3d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:59 2024 by rpki-client on console-ams.rpki-client.org