Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/728286AE27BF11EDA6A02960C4F9AE02.roa
File:                     728286AE27BF11EDA6A02960C4F9AE02.roa (raw, json)
Hash identifier:          BhHsuDvF2f7620isXUel0aXspowaKrXhDpQE+ZQofDg=
Subject key identifier:   C8:01:9E:66:CB:59:0F:E5:EB:22:85:9B:C9:F7:BE:93:EC:FB:51:02
Certificate issuer:       /CN=A91977F9/serialNumber=AA5790B0F7D762BE932B9DC611B7D69B90685A4E
Certificate serial:       0140
Authority key identifier: AA:57:90:B0:F7:D7:62:BE:93:2B:9D:C6:11:B7:D6:9B:90:68:5A:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/728286AE27BF11EDA6A02960C4F9AE02.roa
Signing time:             Wed 31 Jan 2024 05:04:39 +0000
ROA not before:           Wed 31 Jan 2024 05:04:39 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     134475
IP address blocks:        103.160.129.0/24 maxlen: 24
                          103.185.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.crl
                          rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91977F9/serialNumber=AA5790B0F7D762BE932B9DC611B7D69B90685A4E
        Validity
            Not Before: Jan 31 05:04:39 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65b9d4e6-79f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:88:2e:20:a4:6a:ba:0f:33:0e:b8:1f:22:48:
                    4f:c3:27:cf:2e:8a:65:f1:23:c1:5b:b3:4e:43:86:
                    8b:eb:0f:6e:8e:29:35:0c:b4:ba:4b:b2:58:e3:8c:
                    24:8d:77:2f:53:1d:cf:56:bc:24:89:e6:9c:f1:44:
                    64:26:ef:0b:cd:37:cb:49:ee:5a:f7:ae:12:f1:c2:
                    71:20:2c:42:84:27:74:08:a9:f2:cc:b2:3a:1e:b2:
                    47:31:b2:e4:c2:1c:cf:30:71:ea:2d:56:a7:46:ef:
                    c7:b1:e5:70:d3:2c:22:63:76:1d:9d:e5:ab:5c:6c:
                    1f:34:fd:85:57:78:da:fc:da:4f:cc:f0:d7:2c:b2:
                    ad:9f:ad:1b:e1:ae:7a:d2:b6:8c:80:45:b3:31:8e:
                    54:a3:44:3b:00:d6:5d:80:81:cd:b4:6c:76:2e:05:
                    c8:32:88:4e:a4:71:e4:c9:cb:41:df:f2:48:a7:84:
                    a3:2e:55:2b:f9:69:a2:72:1e:cd:c4:5a:be:53:d1:
                    b1:81:72:c8:19:c0:e7:78:ad:5e:a8:09:be:f8:f8:
                    da:68:c9:3d:e2:3f:6c:f9:5d:f6:04:f6:6b:81:0a:
                    49:46:cd:dc:4a:08:f5:f1:c3:fd:93:18:25:8a:d8:
                    82:2b:18:48:51:12:70:fb:7d:62:4a:58:4b:72:a7:
                    56:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:01:9E:66:CB:59:0F:E5:EB:22:85:9B:C9:F7:BE:93:EC:FB:51:02
            X509v3 Authority Key Identifier:
                keyid:AA:57:90:B0:F7:D7:62:BE:93:2B:9D:C6:11:B7:D6:9B:90:68:5A:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/728286AE27BF11EDA6A02960C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.129.0/24
                  103.185.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:d1:f0:5e:02:37:c4:ee:df:54:ae:93:9d:4c:22:1d:ab:f2:
         83:1e:10:55:3f:0a:3b:4f:fe:7b:15:c2:72:9f:ce:50:89:11:
         16:62:3c:57:7f:05:3f:7c:bf:fb:29:a8:00:d3:91:97:dc:64:
         46:4d:3c:a9:e4:42:37:8f:ce:95:aa:cc:98:ce:6d:42:43:6a:
         45:4b:31:a4:4b:df:1e:09:3a:5c:26:f8:8d:a6:2f:b5:64:ae:
         0a:8f:6e:4e:8a:da:ed:57:e8:74:df:98:57:dd:43:6c:53:cf:
         c5:25:7f:c6:e4:b3:b6:a2:6d:cc:2a:b1:24:07:1b:c3:fe:89:
         00:0a:44:20:f6:53:91:d6:25:92:25:bb:cd:ab:f3:8c:4a:80:
         40:4d:9c:da:a1:03:04:36:7e:70:1d:af:64:83:29:69:bb:4a:
         9b:b3:59:73:2c:f9:1d:90:16:d7:b2:3c:38:0e:bd:d7:fb:f9:
         2a:1f:dc:31:33:06:ce:d2:a2:2b:e7:d4:83:64:e8:ac:5f:5b:
         9e:fe:c0:46:fc:fe:68:5c:31:55:b1:4f:d2:1a:b1:e2:15:f4:
         03:91:c7:37:68:15:72:bf:a3:23:7c:fb:5b:fc:16:89:84:c8:
         f1:2c:46:ca:25:06:a2:c4:8f:82:66:05:52:d4:6f:53:cc:8e:
         b2:f4:ea:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:12:01 2024 by rpki-client on console-fra.rpki-client.org