Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/6ED98202912E11EFB357571EC4F9AE02.roa
File:                     6ED98202912E11EFB357571EC4F9AE02.roa (raw, json)
Hash identifier:          0YkiAldVFq9RStOnEvt5eAn913EcE9/MLpaWW6415K8=
Subject key identifier:   12:04:A8:D3:52:7C:67:EB:CD:80:CB:D8:82:09:4D:33:64:17:A4:F2
Certificate issuer:       /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial:       365B
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/6ED98202912E11EFB357571EC4F9AE02.roa
Signing time:             Wed 23 Oct 2024 11:03:29 +0000
ROA not before:           Wed 23 Oct 2024 11:03:29 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     139820
IP address blocks:        59.103.32.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 14:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13915 (0x365b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
        Validity
            Not Before: Oct 23 11:03:29 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6718d800-62c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:88:8c:98:4b:da:11:b6:9a:c4:e6:54:41:b7:
                    e1:3c:df:39:d3:f9:94:bd:81:13:1b:f1:1f:98:a8:
                    af:0a:65:6e:61:46:27:c3:7c:5a:b1:f8:cc:3a:2d:
                    a1:a6:35:76:05:9f:78:f5:9f:bc:78:06:f8:c4:c7:
                    46:c7:ac:4a:e7:c6:93:5c:f0:b8:34:d9:10:80:85:
                    e5:91:92:ed:a0:32:b7:14:52:f8:8d:14:61:91:32:
                    6b:2a:3d:6c:b9:de:65:d3:a7:09:9a:e0:c5:34:df:
                    9d:bf:c2:cf:a0:a7:6e:1b:c0:71:df:be:81:87:2e:
                    3a:63:5f:2a:90:68:3c:19:f4:84:e4:1b:6f:cf:c0:
                    d4:bc:1c:ac:d5:04:e1:1a:92:75:d1:de:6c:5e:b3:
                    dc:ad:bc:47:b7:9f:23:02:5c:53:d2:86:c3:3c:4e:
                    ca:a7:fd:fb:a2:3c:6f:a7:75:d7:46:cc:09:b8:08:
                    60:59:48:75:41:7f:ee:db:2c:5a:a7:0f:e7:13:8d:
                    7d:44:5b:95:af:88:0d:bc:8b:fc:65:63:b1:8a:75:
                    d2:9d:db:20:be:b8:d7:e0:9b:b0:1d:92:cd:e2:81:
                    33:05:4c:a0:4a:73:f4:50:68:3a:32:a1:0a:87:5d:
                    88:e3:1b:08:74:df:44:18:39:fc:ca:d7:10:17:1a:
                    b4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:04:A8:D3:52:7C:67:EB:CD:80:CB:D8:82:09:4D:33:64:17:A4:F2
            X509v3 Authority Key Identifier:
                keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/6ED98202912E11EFB357571EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.103.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:4b:aa:94:f6:35:c8:cf:aa:2b:38:a8:cb:59:96:bf:78:e0:
         c1:88:fa:b3:ad:4d:41:3f:3e:2d:98:38:ec:30:af:62:87:af:
         1c:b6:44:ef:ce:ea:91:68:e5:14:16:a6:d5:32:41:ab:3a:a3:
         38:24:6e:00:9b:3a:8e:2e:1c:87:39:51:38:a1:fa:79:4c:76:
         55:94:9f:77:f8:05:b8:97:13:30:00:a5:c6:22:ff:2a:90:36:
         96:ab:05:a2:76:9c:b7:88:db:f5:82:35:ed:aa:72:03:eb:7b:
         f6:96:b5:33:31:88:cb:75:11:8d:46:f2:44:92:cd:62:bc:75:
         33:22:30:4b:40:15:d8:71:4d:df:22:02:b7:aa:cd:27:ca:15:
         4d:ad:79:bd:db:ee:2d:f7:9e:36:5e:3b:05:1f:7a:84:18:79:
         87:ae:f0:aa:ef:cf:23:ce:bd:91:a3:59:5b:3e:17:37:54:8c:
         9d:e2:1a:7e:2f:b3:ad:48:56:cd:9d:2e:26:c8:54:3a:ef:b2:
         4c:47:32:05:9b:0c:c6:a9:40:6e:4b:3b:7c:12:5c:ca:25:e2:
         ac:38:24:c8:54:e8:db:76:43:59:43:6a:ae:51:36:e8:87:b8:
         7f:59:51:c2:66:14:24:84:01:49:d8:ce:4b:3e:5a:5c:48:ab:
         0b:59:fc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:12:00 2024 by rpki-client on console-fra.rpki-client.org