Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9154D088595B11EC89B4C272C4F9AE02.roa
File:                     9154D088595B11EC89B4C272C4F9AE02.roa (raw, json)
Hash identifier:          mEEL35CXEWiN0fiDpAPHRtcw6u8ARAw8DcGcGCgo9LU=
Subject key identifier:   14:C4:D6:4E:A4:03:ED:DC:0A:68:57:06:E6:11:8C:0B:34:56:12:B8
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       455F
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9154D088595B11EC89B4C272C4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:32:25 +0000
ROA not before:           Thu 05 Sep 2024 03:32:25 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     135906
IP address blocks:        103.177.38.0/23 maxlen: 24
                          2001:df0:1b40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17759 (0x455f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:32:25 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d92649-ea74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ca:3d:b8:82:6b:6b:88:43:b1:cb:29:58:ab:
                    5c:2b:f4:45:e2:83:19:2b:8a:e0:c2:ce:10:4f:10:
                    79:af:dc:81:e0:ba:95:98:e2:11:a8:7d:81:c1:49:
                    f7:f7:37:32:e7:79:01:d5:80:83:85:a9:68:35:cd:
                    6e:72:5c:95:0f:49:59:64:80:b5:88:0f:ac:56:9d:
                    2d:6e:75:af:03:d3:bd:41:29:3f:f9:b8:34:a8:2f:
                    94:bb:66:cd:b1:02:96:2f:2d:dc:3f:9e:56:f5:2b:
                    18:88:90:40:33:24:81:08:45:0e:3a:f0:b1:23:35:
                    46:93:86:02:18:89:fa:c4:28:fe:80:4d:91:dd:f4:
                    cf:08:d6:83:97:78:14:bc:b5:2d:7b:a2:8e:93:b6:
                    90:29:f1:f1:3a:c1:6c:2a:c1:59:a5:e2:49:d4:a6:
                    2a:b4:5e:7d:97:86:aa:44:a8:09:c0:fe:9f:1a:3b:
                    02:9a:26:a8:da:fe:88:30:b9:93:3e:87:64:a5:dc:
                    75:e1:9a:10:90:b9:8f:05:ff:a0:5d:25:20:82:60:
                    ef:39:bf:9e:f2:f3:71:27:4e:18:11:12:b8:a0:d9:
                    ee:12:9a:a8:df:d8:55:fe:0f:fd:79:88:1d:02:65:
                    a0:ea:96:00:58:60:9b:e8:74:52:47:a9:f8:a3:84:
                    c6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C4:D6:4E:A4:03:ED:DC:0A:68:57:06:E6:11:8C:0B:34:56:12:B8
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9154D088595B11EC89B4C272C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.38.0/23
                IPv6:
                  2001:df0:1b40::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:b0:d7:d9:ef:00:23:75:cd:13:e8:fe:f4:a4:16:8e:db:71:
         49:22:e6:49:72:d0:be:68:3b:71:ed:5f:60:80:3c:76:ea:1f:
         ae:b0:4b:b9:19:71:d8:71:e2:d0:96:89:5b:d5:ea:e6:31:9f:
         7c:6a:ff:03:11:e8:43:8a:ec:37:fc:b3:61:5b:9b:ba:a9:c8:
         74:e4:68:b8:61:bc:df:63:95:11:ad:3d:b4:99:8c:83:4c:d7:
         6d:f6:fc:b0:84:07:fb:24:85:2a:4b:c6:fe:13:80:d7:67:22:
         5a:c0:12:eb:ed:16:93:6b:ae:b2:a3:66:de:48:47:aa:3e:bb:
         12:28:81:fb:24:d4:aa:4a:a5:eb:ee:a5:81:3c:28:82:69:72:
         05:3c:ca:c1:c5:0b:d2:2e:cc:e1:3e:b4:28:62:dc:d6:b3:51:
         e4:bf:fa:92:56:d4:f7:dc:e6:6e:f5:a2:c5:70:d1:0e:89:cf:
         74:64:dc:ca:d0:48:29:3d:5a:c2:de:e0:4a:55:2e:4f:9b:78:
         78:10:a6:af:61:95:a3:b0:1e:a3:f1:29:14:1e:6d:fc:85:b7:
         d9:40:e3:cf:04:6e:2c:4c:d9:46:ee:fa:50:1b:3a:6c:47:49:
         6c:76:97:60:78:a2:07:43:c1:65:2e:72:8e:85:0f:d3:69:d5:
         06:ee:3c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:05:15 2024 by rpki-client on console-fra.rpki-client.org