Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/36D1D2606FAD11EC9F0C2164C4F9AE02.roa
File:                     36D1D2606FAD11EC9F0C2164C4F9AE02.roa (raw, json)
Hash identifier:          U/NDgsX0G4y7tl8DRfTCN8lb2TYpIIqwhr/nnhJ74HE=
Subject key identifier:   13:D7:01:A9:EB:BC:01:3D:71:33:86:0D:8E:08:F6:7F:25:4C:74:4F
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       45B6
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/36D1D2606FAD11EC9F0C2164C4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:33:41 +0000
ROA not before:           Thu 05 Sep 2024 03:33:41 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     149065
IP address blocks:        103.177.170.0/23 maxlen: 24
                          2001:df0:27c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17846 (0x45b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:33:41 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d92695-8e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:88:a0:35:bf:d4:de:63:b3:f6:04:2f:c5:f2:
                    19:2a:e2:0b:de:0d:2e:8a:24:8f:5f:1d:8f:96:46:
                    b9:7a:d1:67:23:18:d2:5a:1b:d0:6d:03:88:f8:48:
                    0b:a4:b4:ce:e5:8e:b9:02:cc:26:ff:74:71:24:03:
                    fe:88:09:2a:b3:b1:f0:30:4b:4b:31:01:67:1c:24:
                    83:88:7a:a9:48:2f:f0:0c:96:88:5e:aa:e7:b7:e1:
                    b3:55:35:d8:d3:68:47:32:1c:f9:0f:e7:e7:b2:66:
                    fd:9b:d7:5e:3c:f9:ca:c1:bb:1a:af:92:1f:04:79:
                    0d:95:69:8d:12:42:cf:72:a3:87:fa:33:eb:90:21:
                    ac:f6:b9:35:c6:52:f3:91:5e:7f:22:4d:81:50:17:
                    b1:9a:b6:02:77:17:bd:e9:94:07:a5:f1:9f:be:ab:
                    38:6c:e6:68:9d:54:68:d5:f3:95:70:63:36:df:f0:
                    4a:2d:d9:ca:f9:3e:6f:8e:ed:12:71:8b:e9:84:31:
                    ae:0b:76:97:23:02:9e:3e:8a:92:5c:d8:de:a0:1a:
                    6b:cf:3a:e8:3d:f9:93:27:f1:7f:f8:c8:34:cc:2c:
                    01:42:65:bd:3c:07:99:e8:35:ed:62:47:51:63:c0:
                    61:95:d9:5f:b1:88:43:b7:58:eb:74:db:2a:9e:5d:
                    be:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D7:01:A9:EB:BC:01:3D:71:33:86:0D:8E:08:F6:7F:25:4C:74:4F
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/36D1D2606FAD11EC9F0C2164C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.170.0/23
                IPv6:
                  2001:df0:27c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:f2:64:9a:58:49:97:1d:0b:c1:24:8c:4e:2c:14:8a:d2:5b:
         65:d1:72:b9:d1:7a:85:3c:70:9a:e7:1d:34:42:d3:62:5c:bc:
         df:b0:64:1e:3e:01:8a:28:9e:37:a7:93:3a:5e:1f:4f:73:69:
         6c:d4:c3:30:99:69:6a:ff:d8:73:b1:91:ae:4f:39:45:99:0c:
         f6:11:95:c6:0a:d3:38:46:87:81:03:5f:78:03:e7:9f:93:5f:
         61:c9:27:e4:f4:bd:ed:ed:08:25:92:8c:f1:66:97:f6:b5:bd:
         a4:1d:ae:9c:99:10:f4:3c:71:22:03:c0:33:25:e3:12:ce:08:
         c0:1e:d1:67:f8:0c:3f:75:15:05:1e:3e:b6:bd:26:64:65:05:
         e0:af:f6:91:9c:d4:38:7b:a3:29:36:fa:11:f0:9f:69:07:29:
         a9:b7:81:09:46:c4:dd:05:b0:bb:11:21:ff:f1:34:2a:1b:ba:
         2a:3e:0d:ad:ab:cd:c1:ee:4c:87:17:84:9a:d1:9b:28:e9:78:
         02:10:6e:3b:b5:ce:e2:6c:0d:ef:27:28:af:1f:e3:72:ef:8a:
         f9:8b:d5:d7:40:74:4a:5d:6e:8b:da:b9:22:a1:a0:5e:b1:ba:
         b8:1f:61:09:80:ec:c6:04:11:91:47:85:62:59:d7:cf:28:21:
         1f:be:9e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:05:15 2024 by rpki-client on console-fra.rpki-client.org