Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/AC63C4A4A62E11ECBDD6843FC4F9AE02.roa
File:                     AC63C4A4A62E11ECBDD6843FC4F9AE02.roa (raw, json)
Hash identifier:          w67HRNi/yFu6FrtkXk67zQVeYi9FWWK0Yn59oMaToP8=
Subject key identifier:   30:77:0F:75:31:02:42:09:3F:45:32:C6:C1:9F:59:65:62:FB:B5:FB
Certificate issuer:       /CN=A91A3FFF/serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8
Certificate serial:       03F5
Authority key identifier: DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/AC63C4A4A62E11ECBDD6843FC4F9AE02.roa
Signing time:             Thu 03 Oct 2024 00:34:24 +0000
ROA not before:           Thu 03 Oct 2024 00:34:24 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     138186
IP address blocks:        103.173.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl
                          rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1013 (0x3f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3FFF/serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8
        Validity
            Not Before: Oct  3 00:34:24 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66fde690-7ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:73:93:bb:3d:5a:24:e8:c9:0c:d9:b2:c1:e0:
                    75:db:d2:ae:84:d1:19:b6:5e:cf:b1:23:06:5b:c4:
                    dd:fe:73:7c:2e:e6:b1:f0:bd:f5:5b:be:8b:27:db:
                    88:4c:5a:63:c7:9c:7b:15:2f:28:60:65:05:fc:70:
                    ee:74:da:82:63:7c:6f:5e:6d:70:32:95:5d:31:34:
                    6d:15:c5:5d:4c:41:96:8e:25:a5:03:a7:15:66:c4:
                    26:33:8a:50:85:61:cc:cb:51:46:d1:e4:a9:7c:b0:
                    db:f0:42:24:ee:a3:69:64:9d:ae:4d:fa:8c:48:54:
                    72:0a:95:af:b1:d4:4b:95:d1:ae:a8:ac:d2:16:8f:
                    52:8f:a6:2f:2c:17:4a:fb:98:88:d2:b7:de:21:ed:
                    61:c5:6e:34:af:2f:94:51:93:30:b1:99:80:ed:fa:
                    31:8d:7d:38:86:bf:9a:4e:5b:fe:b9:10:79:1f:5c:
                    20:dd:36:4a:99:7f:69:35:ba:b9:45:53:f4:80:e0:
                    30:04:2c:8c:dd:43:dc:14:bb:9c:0c:c7:26:3d:bd:
                    f6:4e:06:04:3d:3f:6d:c7:9a:56:05:6a:4e:25:2a:
                    ef:b7:4e:c8:66:b8:7d:ae:5b:92:c7:11:f5:5a:11:
                    24:0a:a4:55:dc:6b:ac:eb:de:8a:fd:55:a6:1b:a2:
                    1f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:77:0F:75:31:02:42:09:3F:45:32:C6:C1:9F:59:65:62:FB:B5:FB
            X509v3 Authority Key Identifier:
                keyid:DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/AC63C4A4A62E11ECBDD6843FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:68:bb:7c:da:b6:d4:5d:89:c5:d2:75:8f:1e:58:d5:d7:df:
         0f:a6:2a:13:a7:d6:f0:0d:44:d9:48:75:af:9f:7c:3b:71:e8:
         bd:0a:8a:65:bb:57:0b:cd:e8:bc:da:54:8a:79:34:a5:06:95:
         55:83:6c:a6:c9:f8:4d:bb:27:5b:6b:a6:21:32:8a:89:dd:74:
         7a:b0:1e:97:69:67:4d:03:d9:37:c5:5a:ee:62:86:3a:96:43:
         2a:50:22:2d:ae:32:55:93:e6:02:c8:9e:fc:e4:f2:3d:14:3f:
         be:3a:0f:ae:5d:3d:18:bf:7d:46:11:cc:00:92:c7:a3:18:03:
         39:fb:60:43:a7:77:ac:aa:ef:53:4c:42:a3:df:fe:a1:44:54:
         b6:6a:1a:e2:a9:16:77:3f:1f:54:a9:0a:89:88:5d:ec:ce:cf:
         1d:96:a7:fd:2c:68:9e:d2:b9:8a:75:05:bd:1e:f7:24:25:f1:
         be:bf:bc:14:71:c2:75:25:ac:ab:80:ae:81:46:82:ad:8b:75:
         2e:35:e3:56:98:9e:bf:74:25:81:73:45:59:6e:8c:e4:be:7b:
         30:40:39:4e:c8:7f:5c:e4:a3:f4:59:c6:ed:16:bb:03:82:ec:
         55:97:a0:e6:aa:31:64:81:eb:3e:18:95:a5:bb:6b:f3:02:20:
         fd:b1:5e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:27 2024 by rpki-client on console-ams.rpki-client.org