Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/3BFE8CEC3F4911EAA91D9A7FC4F9AE02.roa
File:                     3BFE8CEC3F4911EAA91D9A7FC4F9AE02.roa (raw, json)
Hash identifier:          oiK5YLleabN+NeoxXizXAp1S2T+O/v09kEtABrFayP0=
Subject key identifier:   2D:9E:24:B2:0F:12:CC:C4:24:51:C1:AB:C7:92:64:D5:78:84:5F:43
Certificate issuer:       /CN=A91A06F2/serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47
Certificate serial:       0A9E
Authority key identifier: E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/3BFE8CEC3F4911EAA91D9A7FC4F9AE02.roa
Signing time:             Wed 04 Sep 2024 09:04:01 +0000
ROA not before:           Wed 04 Sep 2024 09:04:01 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     135155
IP address blocks:        103.211.28.0/22 maxlen: 22
                          103.211.28.0/24 maxlen: 24
                          103.211.29.0/24 maxlen: 24
                          103.211.30.0/24 maxlen: 24
                          103.211.31.0/24 maxlen: 24
                          146.196.48.0/22 maxlen: 22
                          146.196.48.0/24 maxlen: 24
                          146.196.49.0/24 maxlen: 24
                          146.196.50.0/24 maxlen: 24
                          146.196.51.0/24 maxlen: 24
                          2407:5f80::/32 maxlen: 32
                          2407:5f80::/36 maxlen: 36
                          2407:5f80:1000::/36 maxlen: 36
                          2407:5f80:2000::/36 maxlen: 36
                          2407:5f80:3000::/36 maxlen: 36
                          2407:5f80:4000::/36 maxlen: 36
                          2407:5f80:5000::/36 maxlen: 36
                          2407:5f80:6000::/36 maxlen: 36
                          2407:5f80:7000::/36 maxlen: 36
                          2407:5f80:8000::/36 maxlen: 36
                          2407:5f80:9000::/36 maxlen: 36
                          2407:5f80:a000::/36 maxlen: 36
                          2407:5f80:b000::/36 maxlen: 36
                          2407:5f80:c000::/36 maxlen: 36
                          2407:5f80:d000::/36 maxlen: 36
                          2407:5f80:e000::/36 maxlen: 36
                          2407:5f80:f000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl
                          rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:12:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2718 (0xa9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A06F2/serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47
        Validity
            Not Before: Sep  4 09:04:01 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66d82280-44b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5b:b8:61:1d:ca:c8:be:3b:2e:42:37:d4:6a:
                    3d:45:96:08:d9:5d:4c:46:bf:c4:9f:22:45:8e:c2:
                    0f:d5:39:94:19:3b:45:d2:1b:55:ef:63:8e:46:42:
                    7a:f5:8c:69:bd:01:3a:a3:bc:86:41:3c:60:fa:ce:
                    8f:97:cf:1a:b8:ed:ba:c0:96:00:86:43:74:74:e3:
                    6c:12:82:44:f5:83:f9:92:25:d6:5e:7d:94:fb:3d:
                    2e:fe:ef:74:4a:59:fd:9d:da:65:b0:1c:f9:bb:40:
                    47:bc:f3:02:e4:64:0b:3a:8e:63:a6:2b:f9:14:39:
                    bb:0f:22:10:13:f6:ed:bc:2c:99:08:7f:ce:ad:51:
                    8a:5c:ee:bc:34:64:a5:30:d7:d5:de:44:6b:73:91:
                    56:30:a8:ca:1d:21:b6:41:04:42:11:79:d2:d1:07:
                    1d:d5:4e:d5:ae:c7:36:3c:57:2e:f4:7a:61:08:0e:
                    f5:1d:35:29:56:57:99:3a:59:51:b2:35:23:57:5c:
                    dc:1d:a4:3a:06:dc:f9:4e:0a:76:b2:04:80:e8:ed:
                    6c:01:71:d0:64:d7:e5:a3:24:5f:ae:78:ed:ce:88:
                    14:5e:01:7a:8f:1c:f3:e4:92:98:40:7b:ea:f6:61:
                    bf:e0:40:0f:db:35:b8:b8:75:b0:81:bf:01:d6:fe:
                    8a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9E:24:B2:0F:12:CC:C4:24:51:C1:AB:C7:92:64:D5:78:84:5F:43
            X509v3 Authority Key Identifier:
                keyid:E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/3BFE8CEC3F4911EAA91D9A7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.28.0/22
                  146.196.48.0/22
                IPv6:
                  2407:5f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:f0:ec:8e:21:5a:ed:71:40:f9:c2:b7:45:20:b1:fc:c8:8f:
         da:9a:2f:56:85:9a:a8:07:d0:f8:4b:de:89:cb:4e:6a:2b:0d:
         b1:98:e3:19:13:99:1f:74:5e:29:be:db:c6:cc:b5:5b:c8:a2:
         20:59:fb:70:b0:00:ca:f5:4c:cc:df:dd:27:7a:6e:40:1c:23:
         ee:eb:69:da:26:07:50:c1:34:3d:ca:c1:db:2a:43:f6:37:06:
         f9:b7:80:2d:e9:24:0f:ab:a1:ac:2c:08:d8:8e:a6:49:7f:f0:
         4b:74:57:f9:c6:18:32:3f:b7:82:72:2a:66:17:ad:65:63:7f:
         fe:3f:a9:9c:1a:2f:b1:aa:e8:a2:3b:cb:f3:f2:e8:60:1a:69:
         b1:57:88:bb:80:ec:7b:70:16:81:db:a0:b3:c7:57:65:e2:b6:
         57:b8:44:dd:ba:e7:fd:16:6f:a5:3d:d7:4f:46:12:fa:aa:90:
         5c:03:8b:59:15:34:6d:c7:3d:17:f2:c5:e7:54:6c:31:4c:aa:
         15:fa:6a:1e:c2:b4:fc:1b:46:2f:6a:1f:4c:7b:65:10:09:e2:
         49:75:a9:6c:65:18:b5:6f:e1:7c:9f:8f:5c:2b:8d:0d:09:f2:
         c4:f1:51:4d:0f:6e:79:45:60:01:92:f0:e5:da:81:79:99:42:
         59:79:03:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:36 2024 by rpki-client on console-ams.rpki-client.org