Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/132D82FC6F5311EFA28F470DC4F9AE02.roa
File:                     132D82FC6F5311EFA28F470DC4F9AE02.roa (raw, json)
Hash identifier:          tipUEyHFeevBmawX/bXNcdieJzZd0jT9YfUzt9eIqTE=
Subject key identifier:   D8:62:53:26:12:CF:19:27:74:B9:92:28:10:5E:A2:8B:47:43:9F:E0
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       46A8
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/132D82FC6F5311EFA28F470DC4F9AE02.roa
Signing time:             Tue 10 Sep 2024 09:02:01 +0000
ROA not before:           Tue 10 Sep 2024 09:02:01 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     135959
IP address blocks:        103.126.160.0/22 maxlen: 24
                          2001:df7:7e80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18088 (0x46a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep 10 09:02:01 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66e00b09-da7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1e:f2:1b:cb:a1:4a:ac:3d:d1:a7:ec:5f:08:
                    e6:3c:3d:4d:74:82:78:81:7b:ac:1f:27:1a:e9:7b:
                    da:4f:de:4c:48:bc:87:c6:b8:d3:4e:bf:4c:fe:4c:
                    8d:74:f2:5b:f0:d6:85:fb:58:f4:61:b0:70:b9:62:
                    a9:4a:c9:8a:a1:41:29:15:0c:c8:57:19:8d:60:c5:
                    33:08:97:fc:fa:90:72:86:17:77:13:2e:5a:3f:38:
                    61:3a:eb:4a:66:15:16:a0:43:8b:d1:ce:65:2c:64:
                    10:54:03:6b:84:60:ee:14:15:8b:7d:d7:e2:2e:e5:
                    83:0d:64:dc:62:bd:8a:27:55:bd:cc:93:44:3e:83:
                    00:56:0d:82:77:0c:c4:2e:58:48:61:26:92:5c:75:
                    ac:df:a0:9c:39:89:2d:f1:c1:48:4b:16:38:e6:a6:
                    b2:e0:16:3b:f5:eb:42:65:11:19:61:ad:34:6b:69:
                    de:87:5c:00:82:3c:48:7c:67:46:b6:15:43:f1:4a:
                    a5:4d:c8:df:d6:59:ac:e5:26:ee:98:6d:08:38:cd:
                    82:02:cd:f9:6f:16:dd:d2:21:ab:7c:8f:86:be:ea:
                    bd:dc:3f:49:ba:23:d2:01:2a:e2:71:0d:a5:f3:f9:
                    59:f1:d1:10:28:54:16:e3:95:1b:ad:6b:92:d0:45:
                    66:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:62:53:26:12:CF:19:27:74:B9:92:28:10:5E:A2:8B:47:43:9F:E0
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/132D82FC6F5311EFA28F470DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.160.0/22
                IPv6:
                  2001:df7:7e80::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:74:f4:46:11:55:95:20:a5:a5:d0:90:e4:86:3f:b6:df:db:
         66:c3:7b:bf:80:69:c9:26:50:c0:52:89:3d:06:5d:df:96:5c:
         50:d5:72:c7:d8:e5:c3:50:42:d7:c6:43:fa:df:cf:f2:1a:c1:
         8b:35:3b:94:b2:b1:6f:d6:6b:8c:be:ce:7b:71:a5:4a:15:56:
         a5:db:c2:4a:cf:f6:2e:f4:44:8b:7e:5d:97:37:46:e3:69:48:
         4d:06:c3:47:b3:23:c1:73:ea:44:58:6a:e8:bb:55:05:c9:86:
         48:f0:26:1f:3c:7a:9a:f6:21:a5:9d:2b:39:0c:4b:12:ec:96:
         a2:f1:20:ea:07:e6:eb:53:8b:16:6a:67:a0:89:9d:8b:1a:df:
         13:bc:24:f0:f3:79:c9:f5:f3:90:f2:eb:7f:86:8b:92:9b:f1:
         ef:02:fa:40:11:cb:04:c8:ba:36:ca:a2:68:a7:8e:3a:8b:1c:
         72:39:5c:0b:14:cd:cb:57:52:82:77:9e:7c:0d:35:cd:6d:68:
         38:4d:e2:2e:e4:61:8a:97:85:7a:ca:c1:d4:5c:ff:50:c2:29:
         f8:95:9a:40:3e:bb:ed:14:2d:15:a9:f0:a2:d2:56:9d:7d:87:
         2c:89:f9:62:eb:4c:63:22:bb:50:30:e4:f8:18:5d:bd:41:16:
         df:b1:b5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:05:15 2024 by rpki-client on console-fra.rpki-client.org