Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7E2C4774F5C911ECAE15AE0BC4F9AE02.roa
File:                     7E2C4774F5C911ECAE15AE0BC4F9AE02.roa (raw, json)
Hash identifier:          nxvepbVCEHUMkQ4D3RGxdZeLwf92zOAdXi2gX+oywnM=
Subject key identifier:   7A:3D:0C:FB:F1:7A:CB:B6:67:46:77:65:D0:8E:F0:01:83:06:B2:73
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       455B
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7E2C4774F5C911ECAE15AE0BC4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:32:22 +0000
ROA not before:           Thu 05 Sep 2024 03:32:22 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     135901
IP address blocks:        103.68.68.0/24 maxlen: 24
                          103.68.69.0/24 maxlen: 24
                          103.68.70.0/24 maxlen: 24
                          103.68.71.0/24 maxlen: 24
                          103.172.78.0/24 maxlen: 24
                          103.172.79.0/24 maxlen: 24
                          103.188.245.0/24 maxlen: 24
                          113.192.16.0/24 maxlen: 24
                          113.192.17.0/24 maxlen: 24
                          2401:57e0::/48 maxlen: 48
                          2406:cbc0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17755 (0x455b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:32:22 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d92645-2573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:82:b6:c2:48:53:cb:bc:bd:78:5e:3a:fb:74:
                    68:97:ce:6c:01:88:e4:20:ea:44:62:87:cf:6a:15:
                    7b:47:37:33:d8:f0:38:a0:45:a3:b2:48:9c:7b:ed:
                    df:ea:9b:4d:25:de:e3:2b:f5:8a:1f:4e:f0:9c:d9:
                    6f:b7:96:ab:15:32:bd:e4:7d:a6:6d:c0:5f:8d:7d:
                    3c:94:7e:a8:4b:06:8d:69:55:26:bd:16:c1:5d:9b:
                    86:1b:23:e3:07:63:10:ea:a4:c7:ec:87:b6:b5:cc:
                    b2:bd:41:55:4d:68:e4:98:90:38:e9:9f:2c:f0:d8:
                    fc:4a:39:32:7b:f5:a0:2d:54:45:a0:95:7e:5b:a1:
                    3b:1a:6d:55:e3:a2:ee:03:5f:c7:cc:e5:cd:42:b3:
                    17:53:65:55:44:8b:dd:86:82:ad:27:f7:e5:d4:d6:
                    d5:a4:50:dc:7e:f6:d7:d3:49:e6:dc:38:1e:ec:e5:
                    2f:91:81:cf:37:5d:c6:9d:dc:a7:85:df:18:f4:99:
                    c3:18:87:77:8a:4a:c1:49:a8:5e:7e:59:d6:15:c4:
                    85:8b:46:3a:43:02:c3:9d:2a:08:1a:46:5a:5a:47:
                    6c:4e:77:6d:97:d5:c6:bc:4d:27:50:2e:c9:92:a7:
                    e6:d6:e9:43:55:f9:c7:59:e5:4f:24:87:98:31:f9:
                    f3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3D:0C:FB:F1:7A:CB:B6:67:46:77:65:D0:8E:F0:01:83:06:B2:73
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7E2C4774F5C911ECAE15AE0BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.68.0/22
                  103.172.78.0/23
                  103.188.245.0/24
                  113.192.16.0/23
                IPv6:
                  2401:57e0::/48
                  2406:cbc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:b0:1c:fe:2d:91:0b:89:5d:d7:96:e3:e9:7a:3c:32:24:1f:
         06:c6:ad:0f:82:36:f5:08:2f:f0:19:b8:99:2f:d3:7a:55:68:
         b4:31:be:8e:ae:31:14:30:39:7f:86:c5:37:8d:c9:9c:ab:5e:
         c5:2d:b6:d1:86:08:5d:3f:13:3a:70:06:d6:da:29:68:64:4d:
         5b:d8:c9:ea:a0:dc:de:2e:1f:52:ac:78:28:29:44:95:b8:89:
         0e:a9:f4:f5:14:f8:30:9b:44:97:86:43:71:af:e3:e8:e0:87:
         12:04:f6:04:dc:f9:76:d8:1b:78:08:e4:be:0c:ad:d7:6a:58:
         54:3f:fb:78:e1:77:72:57:8a:33:8e:27:2e:df:64:b8:6f:6e:
         f9:70:a0:ce:ec:08:51:e2:f2:66:a9:28:6f:3a:9a:d2:aa:ad:
         ef:9e:ed:69:f1:2a:03:33:99:87:96:2e:c7:ce:fa:5d:4c:b9:
         52:a4:0b:67:32:70:24:40:ea:f8:a6:62:05:4d:48:9f:01:fe:
         0a:3d:ec:ed:b4:50:00:c4:fe:01:f6:c4:04:b1:ee:5b:a2:7f:
         72:5f:b6:7a:cb:9e:a1:62:99:66:12:b3:49:62:8c:86:6f:f9:
         43:2b:da:e4:c2:31:21:62:3e:02:9d:ab:88:95:3c:5d:f4:83:
         2c:9d:c7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:32 2024 by rpki-client on console-ams.rpki-client.org