Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/00FFAB766ACF11EDBCC28E3CC4F9AE02.roa
File:                     00FFAB766ACF11EDBCC28E3CC4F9AE02.roa (raw, json)
Hash identifier:          UytTVbn+GmtsdqIXrrUez63jh7jlht91a3RnL3DihwQ=
Subject key identifier:   21:A0:1C:AD:84:9E:48:5C:B7:BB:19:40:88:98:C7:AF:F7:5D:77:25
Certificate issuer:       /CN=A919D656/serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F
Certificate serial:       CA
Authority key identifier: 36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/00FFAB766ACF11EDBCC28E3CC4F9AE02.roa
Signing time:             Sat 09 Dec 2023 04:34:50 +0000
ROA not before:           Sat 09 Dec 2023 04:34:49 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     135668
IP address blocks:        103.78.136.0/24 maxlen: 24
                          203.0.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl
                          rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D656/serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F
        Validity
            Not Before: Dec  9 04:34:49 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=6573ee69-7466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:12:c8:3b:ab:b8:36:f2:42:21:c0:a0:10:57:
                    af:a9:55:d3:96:1f:0f:23:92:b2:a1:d6:65:f7:9a:
                    c6:a0:dc:84:5e:34:79:c7:c4:18:c6:9d:cf:2b:ca:
                    a1:f9:66:cf:26:3b:fc:fd:b1:8b:c9:e9:67:bd:ab:
                    01:a1:2b:aa:3e:fa:e1:fb:64:c3:e4:37:fe:ef:8e:
                    31:48:13:2c:89:f3:ad:62:af:91:5c:71:16:e4:e4:
                    52:d5:7b:3a:22:69:52:c8:78:b9:f5:ea:9a:cb:02:
                    cc:70:71:78:68:c1:5d:e7:4c:56:72:d4:da:e3:32:
                    91:c3:ab:3d:89:05:4f:ea:22:6d:27:78:83:27:01:
                    75:14:7a:23:51:2f:b4:b8:df:e4:c7:8f:fc:32:6d:
                    96:3e:ac:0a:28:51:cb:1e:f6:4f:90:0c:4a:f2:9a:
                    3e:f6:8c:3e:a2:84:db:2f:be:f2:3f:b5:1a:74:5a:
                    da:e8:4c:12:08:e7:81:01:f3:87:85:59:5f:88:bd:
                    4c:a2:b0:1c:c9:19:56:af:94:e8:10:4d:99:c9:7b:
                    34:8f:c4:80:29:d0:87:94:46:22:36:54:2c:4f:ab:
                    42:fe:fc:11:85:3e:5d:4a:97:22:b1:81:a6:ba:a1:
                    d9:77:93:ca:07:df:f0:1d:57:a2:03:75:28:14:b8:
                    7f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A0:1C:AD:84:9E:48:5C:B7:BB:19:40:88:98:C7:AF:F7:5D:77:25
            X509v3 Authority Key Identifier:
                keyid:36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/00FFAB766ACF11EDBCC28E3CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.136.0/24
                  203.0.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:af:f4:46:e2:0c:ac:be:dd:d8:2d:b3:89:5d:c0:a0:86:46:
         72:2e:ec:97:bf:41:81:13:ef:ea:cb:e3:a9:14:6b:23:53:e7:
         33:15:82:05:d4:e5:50:e6:c8:d0:5d:e8:0e:e8:ed:ec:28:37:
         ef:a3:1d:25:b1:57:30:da:d9:a5:e2:3d:ed:47:82:0e:bf:00:
         db:72:70:8b:83:5c:d8:41:01:c1:ca:fa:2c:cd:bd:71:58:5c:
         04:1e:ba:72:88:55:63:86:30:5e:cf:e5:76:8c:b8:74:bf:5a:
         29:89:75:11:0d:c5:89:26:d3:a8:27:b5:1e:92:d7:a6:ec:d6:
         ab:9a:45:f2:8c:97:9b:dc:fb:51:a4:be:c5:19:f8:c1:da:73:
         61:1b:2a:2e:63:e7:e4:fa:18:da:f0:61:29:be:3d:b3:94:d3:
         91:d3:c4:bb:95:3a:ba:ef:30:fc:03:59:c0:99:53:fd:67:be:
         fd:e6:0b:9b:b8:8a:6f:5f:0e:bb:16:04:72:ce:49:ba:69:94:
         7b:56:cb:1c:a8:32:7f:f0:b8:c6:97:91:94:d3:63:5b:5d:db:
         6d:e0:6d:2b:37:00:52:51:8c:6d:84:95:79:57:1f:88:74:06:
         46:e6:c4:58:18:5f:be:1b:58:4b:f3:12:9e:9f:81:32:5e:ff:
         ba:ca:39:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:46 2024 by rpki-client on console-ams.rpki-client.org