Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/C386C06A706211EDA9CCDB76C4F9AE02.roa
File:                     C386C06A706211EDA9CCDB76C4F9AE02.roa (raw, json)
Hash identifier:          kCv4bHKTur2lJoL7asgYL11dC+z1ZsHw44gWQxYmfaI=
Subject key identifier:   EA:CB:EA:87:23:88:B1:EC:9E:68:2B:33:F2:FB:0D:7F:96:6C:53:FE
Certificate issuer:       /CN=A9183BA5/serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
Certificate serial:       013E
Authority key identifier: 60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/C386C06A706211EDA9CCDB76C4F9AE02.roa
Signing time:             Wed 31 Jul 2024 04:35:26 +0000
ROA not before:           Wed 31 Jul 2024 04:35:26 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     139076
IP address blocks:        103.139.110.0/24 maxlen: 24
                          103.139.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl
                          rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183BA5/serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
        Validity
            Not Before: Jul 31 04:35:26 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66a9bf0e-eb91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:05:7c:fa:8b:91:9f:e4:eb:82:1a:19:5a:72:
                    df:b3:40:d4:57:b7:9d:20:9a:63:e2:3d:5c:f7:22:
                    aa:23:15:28:53:89:2f:e0:d2:52:55:c6:2e:83:9d:
                    6d:4c:16:71:18:cd:10:58:7d:7c:fb:9a:e1:32:12:
                    c6:c9:56:6a:6f:e7:ee:ee:b5:b5:10:67:bb:f9:7e:
                    9b:28:cf:60:f8:e8:4c:f3:10:6b:f6:77:4c:42:8c:
                    64:2a:67:76:0a:ad:72:e2:da:43:10:52:3d:12:1b:
                    9e:34:07:ae:d9:62:32:f2:6b:63:04:0e:33:5c:ae:
                    a4:9b:20:3a:8b:01:ac:48:fc:0b:11:f7:36:a7:6d:
                    d4:21:b9:0b:90:0b:b4:51:ce:31:23:a4:90:8b:73:
                    40:c2:10:42:b5:d6:f8:27:a2:d2:51:ce:26:4e:65:
                    71:1f:82:32:e1:d2:c7:47:e1:15:d1:81:74:17:a8:
                    5c:9e:a2:23:d5:79:bf:5c:93:10:f0:27:8f:1b:9e:
                    cd:99:7c:6f:23:68:3f:d8:36:ed:9a:f6:97:97:ec:
                    e3:26:ad:24:b3:4d:51:d6:cc:27:43:5d:d6:fc:4d:
                    20:4a:89:bf:13:1f:da:37:97:10:22:d9:90:85:f3:
                    d6:c8:33:4e:12:94:16:ba:34:82:d0:89:d0:0e:36:
                    92:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CB:EA:87:23:88:B1:EC:9E:68:2B:33:F2:FB:0D:7F:96:6C:53:FE
            X509v3 Authority Key Identifier:
                keyid:60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/C386C06A706211EDA9CCDB76C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:47:5f:e8:64:67:c5:fe:ff:33:79:b5:09:45:e2:84:e8:ba:
         69:06:00:9f:ff:24:4a:42:3c:24:4c:7d:a0:08:69:d1:ec:7f:
         6f:5a:74:59:81:4f:6b:ca:51:29:50:ee:da:d8:e0:4c:90:ba:
         54:ca:2a:0a:7a:a3:d1:a9:4b:f9:8e:5f:df:b9:24:2b:33:4c:
         ab:d4:e5:ce:f7:60:7e:3d:7f:3a:9b:77:73:e8:c7:32:13:d0:
         43:bb:76:7d:40:c7:37:91:6c:ac:86:97:df:4e:1d:8c:5e:a2:
         44:be:d5:c8:d0:2f:7c:d9:b0:00:a5:fa:8c:3c:0b:7a:cc:6d:
         07:c8:91:43:d0:e9:6b:3e:46:25:a3:9c:b8:45:e5:81:7c:0e:
         73:fe:05:65:54:56:d7:cc:f4:93:37:fb:ba:42:4c:7a:7f:ad:
         d4:e0:72:1c:50:ef:68:3d:42:66:05:b6:0a:cd:22:b3:57:e3:
         f4:54:57:44:d1:39:dc:c5:01:64:9a:e6:3f:5e:d1:24:db:95:
         31:58:5b:30:53:cc:f6:38:25:6a:a3:11:ee:e6:98:c6:f8:dc:
         36:fe:92:a9:fa:12:aa:99:65:6c:a4:4c:7d:52:fb:be:04:90:
         79:ac:17:39:65:a6:96:0d:17:7f:55:dc:6b:80:cf:57:a9:8f:
         10:c7:01:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:11:59 2024 by rpki-client on console-fra.rpki-client.org