Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/98C0AE7E808411EBA15C9251C4F9AE02.roa
File:                     98C0AE7E808411EBA15C9251C4F9AE02.roa (raw, json)
Hash identifier:          4dUVKwERkH/QTGoIXRLz0nS6ysGT9dt9/C/hSIpCKRg=
Subject key identifier:   8F:13:D1:B3:74:FB:2D:1F:7E:91:E9:C0:58:7D:C2:F2:FC:6E:C6:2C
Certificate issuer:       /CN=A918CA0E/serialNumber=E702C5AA74D8C96CC8EEF5618E4FFEEFD51D37F9
Certificate serial:       05AF
Authority key identifier: E7:02:C5:AA:74:D8:C9:6C:C8:EE:F5:61:8E:4F:FE:EF:D5:1D:37:F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/98C0AE7E808411EBA15C9251C4F9AE02.roa
Signing time:             Fri 31 May 2024 00:54:43 +0000
ROA not before:           Fri 31 May 2024 00:54:43 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     137549
IP address blocks:        103.151.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.crl
                          rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1455 (0x5af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CA0E/serialNumber=E702C5AA74D8C96CC8EEF5618E4FFEEFD51D37F9
        Validity
            Not Before: May 31 00:54:43 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66591fd2-43d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:09:1f:3c:b8:bd:98:4d:c6:ff:b2:2d:df:82:
                    a4:b3:f0:a1:3b:58:ca:7e:7f:e1:6a:45:4f:c5:7d:
                    77:aa:4f:88:79:53:26:34:44:71:db:a8:31:a7:cd:
                    73:6a:40:0d:61:1b:92:77:b1:82:b9:33:1a:1f:dd:
                    b1:29:83:09:db:dd:ea:51:49:10:82:29:fd:30:9a:
                    e1:1a:ed:cf:f4:a2:59:00:39:43:0a:44:49:53:b1:
                    ee:68:e4:0a:9b:c3:1c:54:3e:5e:cf:d6:98:ca:d8:
                    ca:cc:be:d4:8f:23:2b:a3:18:cc:b9:7f:df:cc:c9:
                    b9:f6:79:8e:62:43:c5:01:c1:db:26:17:03:41:ce:
                    66:b1:79:3e:61:36:fa:19:b4:28:b5:cf:e1:b0:48:
                    10:86:8f:af:c3:86:75:30:c4:1e:a4:6e:7b:59:7f:
                    71:6c:e0:9b:a7:61:ee:6c:14:f3:22:3e:0c:87:88:
                    6d:64:da:00:94:ed:50:57:11:6e:af:6c:39:59:0b:
                    61:68:a2:93:28:6b:bb:81:76:d7:54:1c:7c:38:25:
                    25:60:76:a5:ba:ef:06:1f:68:4c:94:82:13:18:25:
                    a3:b5:6b:d8:d1:fb:6d:48:cc:91:08:62:1a:dc:8c:
                    a1:83:58:49:9e:ee:8a:27:c5:de:41:5e:12:9b:15:
                    a1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:13:D1:B3:74:FB:2D:1F:7E:91:E9:C0:58:7D:C2:F2:FC:6E:C6:2C
            X509v3 Authority Key Identifier:
                keyid:E7:02:C5:AA:74:D8:C9:6C:C8:EE:F5:61:8E:4F:FE:EF:D5:1D:37:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/98C0AE7E808411EBA15C9251C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:ce:3e:5f:58:94:71:8f:45:f7:f9:5c:04:20:fa:39:e5:7a:
         2a:01:3a:eb:ce:76:81:e2:22:61:1b:95:d4:2c:77:7c:b0:2c:
         4c:e2:e4:f4:01:7c:bf:e2:65:04:ef:f3:7d:4d:ba:24:ca:4f:
         05:80:d8:e6:e7:54:fe:9b:82:7a:bd:2b:19:71:94:c6:f8:15:
         90:ca:6c:0e:51:f4:58:e4:71:97:6e:8f:37:76:6f:0b:a5:ac:
         08:1a:89:fa:31:b6:5a:3b:76:2f:72:5d:81:d5:bf:b2:02:fe:
         72:58:b0:14:82:51:fb:da:c6:44:2d:06:0f:d6:4a:55:4f:50:
         1e:56:c3:d1:ef:ef:bf:4d:d4:50:cc:d6:8e:96:69:e6:fc:94:
         ca:78:ae:c5:d1:2a:cd:25:49:ca:c7:dd:33:28:21:69:ad:0f:
         ff:ea:b5:21:7e:f8:51:a6:e7:72:c7:e0:f8:d0:4f:f0:ce:1a:
         e9:36:8c:34:4b:0a:ce:35:50:6f:ec:6d:ae:60:47:5c:b7:4d:
         78:d1:1b:73:d6:7a:74:af:0c:e8:4c:83:5d:0a:56:c4:53:1f:
         c5:12:a8:c4:75:5d:3e:75:1b:a5:0e:96:05:96:3f:a0:33:37:
         cc:03:68:8d:a2:e4:da:9f:a9:87:5f:ef:cc:b5:40:ae:f0:f6:
         0d:ce:81:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:55:46 2024 by rpki-client on console-ams.rpki-client.org