Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/459A5D3EB10F11E5A010921EC4F9AE02.roa
File:                     459A5D3EB10F11E5A010921EC4F9AE02.roa (raw, json)
Hash identifier:          UV6QlTlLGBohRxKOc8jq6Tpr+8pOkhGlZ7tgyuvuvuc=
Subject key identifier:   D1:61:75:57:9A:92:DC:44:BA:C7:5F:89:8B:BA:4F:07:BA:C3:B4:E9
Certificate issuer:       /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
Certificate serial:       22E8
Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/459A5D3EB10F11E5A010921EC4F9AE02.roa
Signing time:             Tue 10 Sep 2024 16:23:18 +0000
ROA not before:           Tue 10 Sep 2024 16:23:18 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     201755
IP address blocks:        103.15.170.0/24 maxlen: 24
                          103.15.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl
                          rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:50:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8936 (0x22e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
        Validity
            Not Before: Sep 10 16:23:18 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66e07276-be88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:45:ef:38:38:99:3b:a7:b4:a6:b7:8c:b0:04:
                    8e:3c:65:60:27:a5:85:7d:41:93:72:92:ce:ca:52:
                    37:56:a7:bb:eb:81:6e:bd:df:8d:4b:8e:89:27:b9:
                    6c:df:2f:bc:db:7c:fc:59:ad:29:1d:a3:da:07:c1:
                    06:7f:ae:58:2e:44:b6:45:b8:d0:4c:76:b7:31:bd:
                    41:5e:f9:7e:2e:63:09:12:f0:66:5c:b1:b1:b0:88:
                    ee:09:b4:6c:e5:24:69:2e:1d:28:82:e8:48:43:ab:
                    ac:4d:75:25:e8:e7:b9:bf:d5:18:df:f9:4c:58:19:
                    10:07:8f:c2:6d:b4:11:22:6c:b8:27:7f:03:de:76:
                    de:a0:66:16:1e:ba:d0:77:c3:2d:e6:1c:af:9e:68:
                    24:fc:86:fd:99:f0:32:f3:43:db:4b:e3:4c:01:a3:
                    ad:4c:99:d2:f7:4b:ad:f5:d5:34:ff:5a:60:29:2f:
                    62:65:59:df:b4:56:61:ca:e3:35:7f:fa:c1:cc:65:
                    d2:8a:47:23:4a:25:3e:6e:c7:6b:97:15:a2:8b:4d:
                    ea:13:b8:12:73:80:b4:56:c3:c1:57:86:33:3a:75:
                    6e:2a:83:a2:8c:75:31:14:33:69:0a:fa:1d:63:87:
                    f8:8a:ac:d1:a0:25:57:a7:58:2c:09:28:63:11:18:
                    36:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:61:75:57:9A:92:DC:44:BA:C7:5F:89:8B:BA:4F:07:BA:C3:B4:E9
            X509v3 Authority Key Identifier:
                keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/459A5D3EB10F11E5A010921EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:82:91:7a:47:ca:12:07:ff:8a:4d:77:03:e8:71:76:30:e1:
         d4:ca:f4:5e:0b:a2:75:b6:32:76:80:d6:bf:47:36:07:f8:18:
         6d:63:9f:c6:ca:11:fe:57:47:b3:a2:98:fb:36:6d:15:c2:81:
         5c:63:30:38:7a:2e:46:69:d3:dc:7b:ff:8b:66:c2:4d:a9:a9:
         8e:81:fa:3e:3b:4a:89:09:14:f8:76:d8:a6:97:c7:3f:d7:7a:
         59:64:e2:13:72:34:03:5a:cd:49:23:6a:be:3a:89:d5:c8:f0:
         f9:1e:f6:8b:72:d9:5e:72:09:25:61:c2:7f:66:bf:af:5b:84:
         fc:c6:d0:10:16:86:a5:b9:ca:04:a9:de:d2:91:9f:c2:e5:b3:
         c8:0a:18:ab:f6:1b:8e:81:df:c1:fc:da:88:c3:30:53:9b:dd:
         5d:21:0b:11:e3:2f:11:f4:8d:58:4f:43:6c:01:9e:7d:7a:0d:
         ed:0f:dc:7e:ee:31:9c:51:af:f5:4e:9f:a8:a0:b2:d5:34:e9:
         01:45:b4:1f:77:ce:ab:f9:81:91:f1:1a:ee:03:97:14:c8:3c:
         b6:cb:b5:02:9c:e9:67:11:a8:b2:4e:5f:d4:4a:51:26:73:f3:
         2b:88:70:42:65:5e:87:fd:60:c8:2f:28:69:9e:96:e0:97:61:
         43:bf:e1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:50 2024 by rpki-client on console-fra.rpki-client.org