Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/52FC6006A19911EA96035C38C4F9AE02.roa
File:                     52FC6006A19911EA96035C38C4F9AE02.roa (raw, json)
Hash identifier:          wci0Xfqzo59Y8jWuwf9OlzNgtFeflA2lDlymuLqWFus=
Subject key identifier:   AF:B1:59:4F:6D:93:BD:C1:83:C4:97:49:31:96:87:FD:35:C0:96:AF
Certificate issuer:       /CN=A9193D86/serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
Certificate serial:       08EF
Authority key identifier: 1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/52FC6006A19911EA96035C38C4F9AE02.roa
Signing time:             Thu 10 Oct 2024 20:59:05 +0000
ROA not before:           Thu 10 Oct 2024 20:59:05 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     136970
IP address blocks:        103.100.61.0/24 maxlen: 24
                          103.100.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl
                          rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 17:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2287 (0x8ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193D86/serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
        Validity
            Not Before: Oct 10 20:59:05 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=67084018-423d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:97:7e:ad:66:f8:5a:07:9c:19:6d:42:b5:85:
                    f9:fb:05:c0:d0:63:72:58:7c:24:01:8c:01:a2:0b:
                    50:ed:43:27:f0:e4:4c:be:4b:ef:ce:f6:a0:c9:2c:
                    42:a1:14:20:01:13:37:40:a0:89:e0:c8:2c:d9:f7:
                    d5:ed:09:6d:a7:2f:c2:42:19:b9:e6:a6:98:35:10:
                    29:7d:a3:12:99:bf:01:88:8c:e1:34:c8:5b:c0:24:
                    15:0a:8b:49:ac:39:7f:0b:19:0d:30:c9:96:2f:f0:
                    7a:ca:14:a4:85:77:ba:c8:a3:7a:a6:6b:dc:ee:f6:
                    20:c8:fa:14:82:75:f7:46:a7:5b:0b:19:5a:7f:78:
                    13:93:12:ba:ad:eb:2f:02:ef:7f:5c:44:d3:88:8c:
                    e7:66:db:5c:52:f4:96:6b:29:b9:51:cf:9b:5b:80:
                    2b:60:65:ff:1b:11:63:11:f1:ed:a8:ee:42:ba:48:
                    91:40:05:1f:a1:94:be:ce:92:4f:0d:bb:81:9e:32:
                    61:1d:8b:f5:1d:35:e6:67:95:93:f9:27:68:06:60:
                    dc:fe:5d:16:c8:af:d1:00:de:b0:17:c4:3f:b1:f3:
                    ba:5f:19:ef:63:4e:ea:fe:2e:50:ea:ae:6c:f0:20:
                    a3:5d:a5:01:5f:c9:41:4d:e4:db:68:77:63:35:85:
                    cd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B1:59:4F:6D:93:BD:C1:83:C4:97:49:31:96:87:FD:35:C0:96:AF
            X509v3 Authority Key Identifier:
                keyid:1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/52FC6006A19911EA96035C38C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.61.0/24
                  103.100.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:57:23:fa:7f:15:0d:a0:a5:d0:8c:87:f3:7c:be:3e:c6:e3:
         40:a2:3d:3a:f3:19:7b:aa:76:25:e5:89:92:23:1c:1c:e7:b1:
         26:0c:0d:ff:c0:a7:d1:87:3d:f0:4d:e6:e1:2d:b2:a1:41:d1:
         63:c2:18:bc:0a:4b:94:88:f1:c7:5a:0f:5e:8e:ab:90:43:a3:
         ad:d2:af:5e:16:8d:69:e1:00:ef:62:59:2a:41:00:38:a5:55:
         4c:3b:03:22:4f:39:d1:3b:88:48:f3:1a:01:d2:6c:15:c1:51:
         21:fe:c3:28:62:3c:09:7e:6d:2b:54:4b:63:d6:ce:85:a6:e0:
         07:b3:33:76:f3:04:83:45:d1:4b:c3:f7:a8:a9:9a:b3:f6:2b:
         38:91:8d:61:f6:ca:60:80:97:aa:42:1d:0a:07:cc:d5:55:d2:
         a5:0f:2a:84:86:07:39:48:e2:c6:3e:b1:13:0e:02:e3:cc:d2:
         31:ce:22:f6:1c:f1:e0:9a:72:a6:99:36:85:19:bd:d5:2a:0f:
         72:b3:c7:5f:39:93:00:33:dc:43:d3:d5:1e:48:a4:3d:a8:a6:
         b8:d5:3e:66:25:dc:49:71:32:0e:8d:54:ac:a1:52:2c:4c:80:
         2d:85:8c:d1:77:e7:ab:ff:af:f9:79:6a:39:79:1e:c7:34:05:
         7c:b6:db:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:58:14 2024 by rpki-client on console-fra.rpki-client.org