Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/3D8F78D8772511EEA2E37420C4F9AE02.roa
File:                     3D8F78D8772511EEA2E37420C4F9AE02.roa (raw, json)
Hash identifier:          0mz+0e1i75LjHInfBODtd+9jL2NlY68nRhoEgkLCSZI=
Subject key identifier:   06:C1:F3:6F:E8:52:B7:74:FE:69:9A:CA:CB:CE:EE:7E:8C:41:58:A6
Certificate issuer:       /CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
Certificate serial:       70
Authority key identifier: DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/3D8F78D8772511EEA2E37420C4F9AE02.roa
Signing time:             Fri 17 May 2024 07:41:29 +0000
ROA not before:           Fri 17 May 2024 07:41:29 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     142271
IP address blocks:        103.121.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl
                          rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
        Validity
            Not Before: May 17 07:41:29 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66470a29-774a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f2:96:7b:78:24:5a:ed:ce:7d:ca:a9:0b:39:
                    00:59:12:27:04:c7:1d:5d:26:9d:10:cd:ab:2c:52:
                    4f:7c:ad:6b:31:06:4f:52:69:7e:f3:b5:89:e7:08:
                    c8:95:76:97:ab:fa:ac:a0:76:9e:81:da:9f:be:52:
                    2a:d6:5c:fd:4e:5a:fd:1c:48:3b:c9:1c:b9:ff:8a:
                    88:fc:d2:89:42:26:e1:99:7d:e8:c4:7f:11:ba:af:
                    3d:a9:cf:d8:d6:f9:02:7d:60:14:d5:33:52:ae:36:
                    0f:39:f5:a0:1c:cb:9d:d4:e1:a9:fa:77:9d:c9:2e:
                    4d:b1:8c:37:2c:4b:66:2d:df:48:70:1e:ba:bb:03:
                    15:25:cd:c6:65:a8:e9:aa:29:bb:69:9c:63:1d:8a:
                    4f:89:84:11:07:80:be:20:2f:61:43:bd:23:a3:42:
                    f4:25:7a:4c:9b:74:f0:d5:0e:ce:da:b9:40:c4:7e:
                    5d:6f:ef:79:99:7f:70:f5:05:98:83:6f:46:b7:58:
                    14:94:05:93:22:f0:eb:fa:0a:80:da:1f:cf:18:eb:
                    ff:eb:7c:fa:4f:1c:1e:eb:c6:ed:c7:bb:ef:e6:ed:
                    dc:6f:66:a6:43:70:19:0e:cb:42:4c:b6:52:3c:04:
                    e9:3f:8e:3f:13:39:25:c9:9b:12:ab:60:7a:31:ac:
                    3e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C1:F3:6F:E8:52:B7:74:FE:69:9A:CA:CB:CE:EE:7E:8C:41:58:A6
            X509v3 Authority Key Identifier:
                keyid:DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/3D8F78D8772511EEA2E37420C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:36:28:80:38:36:ca:23:36:78:04:45:c7:fd:16:bb:53:90:
         da:50:f1:0a:ab:d7:8c:b3:fb:5b:67:85:1b:41:fb:46:94:71:
         5f:58:2f:67:10:38:82:89:9b:bd:4d:31:1f:dd:e6:9d:08:71:
         3b:ae:45:9f:45:e7:a7:63:d3:98:30:8d:8c:f2:64:da:d4:0a:
         ad:45:9b:9d:5e:03:d1:b9:8c:c5:eb:31:b3:bb:fa:3b:3e:ee:
         58:3d:d9:8b:5d:80:91:d7:03:b6:5d:64:02:28:7d:83:84:f9:
         ab:9d:03:59:af:b0:34:35:0b:ef:6e:fc:b1:a2:68:76:0d:8a:
         73:ec:af:0d:7d:55:93:ff:c6:81:b6:d4:f4:a6:8d:17:3f:07:
         fc:6a:09:53:14:0d:51:6b:13:5f:8e:6c:42:c9:67:a7:c2:78:
         66:71:26:51:35:7c:e3:6f:af:c7:ff:26:5e:56:7f:24:3d:fb:
         10:66:78:01:07:c3:3b:97:37:03:37:07:c2:5e:24:39:ae:4c:
         ec:49:b2:a3:38:ed:cb:ee:05:6d:3e:46:51:d3:26:1c:85:a5:
         41:1a:f8:2a:9a:95:21:b0:6e:07:2c:19:38:94:78:57:c1:8b:
         ed:f0:11:28:51:e0:e8:f3:5d:b0:93:52:33:9e:b0:84:00:87:
         6b:29:ea:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:12 2024 by rpki-client on console-ams.rpki-client.org