Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/8955AA3A55F511EF986BFA6AC4F9AE02.roa
File:                     8955AA3A55F511EF986BFA6AC4F9AE02.roa (raw, json)
Hash identifier:          gK7rFMTbH3ZAUQSAvd96n0DjbHKwNrJcH/9NErP3rzY=
Subject key identifier:   7C:BF:6B:57:5A:4A:CC:CC:3C:39:1F:DE:A3:06:AD:76:FD:32:34:FD
Certificate issuer:       /CN=A919C7B4/serialNumber=24B10C31D691F845FCEAE3FE3231BE56002BAC6A
Certificate serial:       0C
Authority key identifier: 24:B1:0C:31:D6:91:F8:45:FC:EA:E3:FE:32:31:BE:56:00:2B:AC:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/8955AA3A55F511EF986BFA6AC4F9AE02.roa
Signing time:             Thu 15 Aug 2024 07:48:51 +0000
ROA not before:           Thu 15 Aug 2024 07:48:51 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     138027
IP address blocks:        103.142.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.crl
                          rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C7B4/serialNumber=24B10C31D691F845FCEAE3FE3231BE56002BAC6A
        Validity
            Not Before: Aug 15 07:48:51 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66bdb2e3-1061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0e:2f:2c:c1:50:43:02:8c:1a:18:44:39:3e:
                    cb:79:de:ee:c8:ff:41:62:e6:94:59:39:36:5d:de:
                    a0:e8:b2:22:fc:bd:5a:58:81:49:85:a4:9c:00:6f:
                    57:d5:78:74:ab:9b:9d:46:42:3f:e3:59:99:a2:fc:
                    8d:30:73:c1:46:3d:ba:41:e6:f4:0c:ac:74:88:2e:
                    24:59:b1:6c:c3:2d:81:05:5f:e4:83:36:88:3b:da:
                    63:50:46:fe:27:d9:fb:6d:3e:07:37:e5:e5:d3:3e:
                    c6:d2:2f:16:c5:d3:35:b8:bc:e2:ba:69:4c:b4:5d:
                    4d:d9:e0:fa:d9:6b:95:ce:10:32:ad:b2:71:c3:fb:
                    7a:f4:06:9f:e2:4c:b7:19:0e:3d:db:c1:2b:ff:f6:
                    e2:2a:3c:ec:51:53:df:b5:3d:16:c8:d8:5a:8d:47:
                    02:f9:e7:1d:32:6e:45:97:79:9b:cb:3d:b0:ff:31:
                    57:60:8d:50:2b:c7:08:ce:03:19:23:6e:fc:d5:17:
                    e5:aa:98:87:a0:f0:9b:86:86:0e:e1:26:87:a3:7e:
                    81:53:a4:e6:44:15:ae:67:98:6c:19:6e:3c:0a:08:
                    09:6b:8b:ec:fb:6b:06:90:64:25:66:0a:0a:19:82:
                    ca:c9:48:70:89:b3:10:58:36:f4:7d:18:c1:7c:c4:
                    a5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BF:6B:57:5A:4A:CC:CC:3C:39:1F:DE:A3:06:AD:76:FD:32:34:FD
            X509v3 Authority Key Identifier:
                keyid:24:B1:0C:31:D6:91:F8:45:FC:EA:E3:FE:32:31:BE:56:00:2B:AC:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/8955AA3A55F511EF986BFA6AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:63:26:03:4a:d2:f5:3d:f6:f4:82:c1:03:aa:dd:de:13:3a:
         fe:6f:f5:9a:bb:aa:b1:7f:48:7b:a3:af:91:4a:f4:8e:dc:43:
         0b:76:67:43:77:8b:fd:cc:8e:cd:b5:ef:64:4d:6f:90:77:bc:
         22:c9:c6:98:41:11:78:ca:c0:e4:fa:cb:5a:d6:a5:e5:13:55:
         95:61:69:47:2c:42:79:ec:5c:a3:25:7a:3e:20:a8:a3:89:87:
         eb:2e:48:ec:8e:e2:a8:23:3c:40:80:e8:b0:fa:b5:a5:84:23:
         6b:e2:51:88:a3:c6:24:66:87:2a:1d:ba:65:69:be:86:ba:c3:
         f6:05:ff:b9:b0:86:a8:1a:a3:22:a6:ca:45:f5:3b:7a:01:11:
         0f:ae:05:92:89:e4:88:bf:7b:db:e7:22:74:07:4f:5d:51:72:
         fc:11:f8:dc:57:36:22:b7:b3:47:1a:9b:ad:75:08:e9:ae:a5:
         c1:0f:51:40:2a:b4:28:99:53:91:7c:de:95:2d:4d:14:8a:cd:
         f8:43:35:b2:6f:c7:7c:34:f3:1d:1a:51:60:f9:8e:ef:a8:1c:
         3e:9d:6b:98:75:b6:ce:03:dd:07:b9:5a:df:d5:af:c4:ed:b5:
         ac:d9:1d:cd:8c:80:9e:3f:6c:a8:ab:60:f5:d7:31:98:9d:f7:
         95:ff:a5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:17 2024 by rpki-client on console-ams.rpki-client.org