Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/7938B3C66FC111EC91536F62C4F9AE02.roa
File:                     7938B3C66FC111EC91536F62C4F9AE02.roa (raw, json)
Hash identifier:          MMURfJSKmXIALtdxYffDlMp75DQKdDxlaB+1HF062RY=
Subject key identifier:   7E:B1:CC:95:25:A5:F2:4E:1E:22:C6:E5:D3:E1:95:1E:1C:13:E7:0A
Certificate issuer:       /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
Certificate serial:       0C82
Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/7938B3C66FC111EC91536F62C4F9AE02.roa
Signing time:             Thu 14 Mar 2024 19:07:12 +0000
ROA not before:           Thu 14 Mar 2024 19:07:12 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     59239
IP address blocks:        103.109.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl
                          rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3202 (0xc82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
        Validity
            Not Before: Mar 14 19:07:12 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65f34ae0-34c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fe:a2:80:d6:d6:13:f6:82:56:ea:3d:c8:fb:
                    27:b5:a0:56:52:c9:0b:1d:aa:13:5e:c3:66:26:89:
                    60:2c:c0:70:0f:71:4b:bb:7b:96:77:ae:7c:14:cf:
                    1e:eb:81:00:58:1e:7e:db:dc:2d:bd:7b:34:b7:c6:
                    17:e2:b2:fe:05:93:70:5a:5d:51:dc:11:dc:18:d4:
                    01:76:d9:4c:fd:d8:ec:32:48:09:8f:31:05:b1:84:
                    ac:21:3d:3a:b5:d1:2e:35:ce:4e:7a:c4:40:d5:5b:
                    a6:e5:ce:96:8a:b8:85:e8:ca:b1:73:ec:30:8d:db:
                    89:e4:e0:be:0c:55:19:db:27:45:ad:04:9c:6b:29:
                    1c:b3:fb:79:af:9d:74:93:35:ab:51:b7:26:e0:d9:
                    c3:b9:32:c6:60:50:1d:d6:b7:1c:48:9e:77:a9:81:
                    09:b9:92:d5:e0:f6:d4:66:a2:a2:81:bd:09:46:60:
                    d2:6c:8a:e0:0a:fb:07:5a:f8:16:de:c6:12:22:f8:
                    97:61:24:12:9a:5f:08:43:0b:3a:8b:51:38:4b:6e:
                    06:8d:a7:2a:6f:78:5d:b8:f9:34:8a:19:ca:f9:34:
                    2d:69:1f:86:cc:f3:22:bc:e9:43:6b:2e:af:d0:99:
                    b5:68:67:aa:3a:7c:fd:30:fe:28:e3:56:2b:27:61:
                    b7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B1:CC:95:25:A5:F2:4E:1E:22:C6:E5:D3:E1:95:1E:1C:13:E7:0A
            X509v3 Authority Key Identifier:
                keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/7938B3C66FC111EC91536F62C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:47:7e:e3:a3:ff:97:6a:f8:21:de:ba:94:b4:4f:b4:ee:06:
         d2:d8:42:85:71:ce:37:16:e7:b4:a7:00:60:f4:8a:3d:2a:a7:
         2a:35:25:ce:29:7b:23:7e:95:38:78:7d:75:fb:9e:58:c1:24:
         5c:62:ca:20:3a:97:f7:2d:ae:ac:77:bd:41:ee:0c:d0:4a:5e:
         f6:30:70:1d:3a:d9:3e:bc:2a:10:54:10:c2:88:df:3a:b9:3f:
         bc:f8:dc:c8:f8:b1:8d:c2:35:ba:70:2e:a7:53:b3:a9:ff:54:
         3f:ae:cf:73:5c:38:48:72:fa:9e:73:9b:b1:1a:10:cb:86:02:
         b7:0c:17:9d:55:d9:0a:d6:a0:cf:e1:67:f4:81:d5:5b:a7:5c:
         03:a5:3b:bc:7d:66:a7:b1:09:e9:cf:cf:c2:78:cc:f5:f8:a5:
         bf:b0:c4:65:ec:e6:86:4b:ec:e2:cd:d5:b0:91:cb:b5:8d:c2:
         24:50:cb:ca:0f:75:a0:30:45:b9:6b:3b:13:e7:e8:99:f3:5e:
         61:6b:a7:b7:71:9a:c6:b2:7c:ef:89:53:a7:94:cb:91:ad:86:
         be:52:cc:65:6e:c6:98:df:22:25:7d:de:8e:20:8b:15:0d:91:
         57:da:97:3f:f1:74:3d:91:61:0f:46:a9:95:7f:94:6b:37:10:
         05:d0:e5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org