Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C43B8148BF0611EC889EE54DC4F9AE02.roa
File:                     C43B8148BF0611EC889EE54DC4F9AE02.roa (raw, json)
Hash identifier:          9aujMkcPGlBEQbc0NbigCmVRYA5yxu/F9z7Dqnkcazc=
Subject key identifier:   C2:C2:1D:DE:3C:AC:14:9E:E0:3C:85:87:84:E2:2C:6B:7A:01:3E:8B
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4580
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C43B8148BF0611EC889EE54DC4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:32:53 +0000
ROA not before:           Thu 05 Sep 2024 03:32:53 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     135969
IP address blocks:        103.137.186.0/24 maxlen: 24
                          103.137.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17792 (0x4580)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:32:53 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d92665-eb66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0d:bd:33:1b:ea:17:45:12:7a:0c:85:67:c8:
                    e3:03:c6:50:f0:d8:b4:c2:90:c8:69:76:3d:5f:54:
                    13:90:3c:71:27:96:4d:59:15:1e:9b:77:9c:45:a3:
                    82:a7:02:e1:43:a6:af:63:08:52:d9:76:f5:1b:44:
                    a7:72:c3:ef:b4:c1:31:d5:07:37:dd:a3:f0:44:51:
                    5e:ed:04:b5:be:78:d3:b8:59:0d:8e:b4:32:3a:5a:
                    f2:95:0c:9c:c6:96:cd:a9:3f:c5:ad:56:9c:35:b4:
                    7c:93:32:61:53:93:45:d6:62:80:20:d4:f5:78:0e:
                    bd:bf:de:95:cf:9d:4d:0a:c2:b1:bd:ca:9a:4d:b4:
                    e9:97:27:d8:7a:72:58:8b:ae:ef:cc:4a:3d:d1:7e:
                    f9:28:b3:de:50:68:82:35:a7:c8:f7:31:8a:30:41:
                    89:21:ed:77:42:a6:52:a1:f9:92:ae:b6:bc:67:fd:
                    b6:70:4d:f7:4b:09:1e:d9:10:f4:f0:51:c6:81:1d:
                    e2:8c:76:06:cb:42:e7:58:60:be:ec:e2:82:0d:e3:
                    fe:4a:bd:ea:64:fc:e4:c3:49:e0:cd:40:d8:08:18:
                    a5:52:be:d0:b0:d0:7b:17:b3:89:fb:2a:20:89:3d:
                    1f:98:d4:97:43:0a:93:55:49:c8:b7:7d:d0:85:e9:
                    e2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C2:1D:DE:3C:AC:14:9E:E0:3C:85:87:84:E2:2C:6B:7A:01:3E:8B
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C43B8148BF0611EC889EE54DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:3f:39:a4:28:db:92:75:13:dc:b3:51:85:dd:8b:68:e3:56:
         d1:4e:89:1f:ce:b8:72:4c:63:90:a3:51:51:26:b6:ed:17:ed:
         b1:af:4b:9c:a1:aa:f2:6d:bf:42:19:fc:52:a1:b8:cb:e7:a0:
         cd:24:7c:21:1c:a4:14:ed:fc:55:25:c0:c4:d1:bf:a5:b0:f7:
         ba:a4:77:13:6d:41:6c:83:6b:ec:1e:c1:19:33:ea:88:0a:cf:
         ee:a6:29:ce:9a:36:05:10:b4:84:f1:9b:e8:1f:0c:eb:21:0d:
         6d:6e:7e:d1:7a:2e:9b:14:08:89:e6:12:fd:2e:b2:43:af:89:
         76:1b:83:82:9e:5d:a4:86:58:8c:1d:78:03:57:7d:bc:b8:8e:
         b5:82:c6:10:f2:5d:35:cb:7d:2a:b3:d1:72:db:68:a6:b3:21:
         87:46:30:cc:79:dc:dc:ee:c2:81:55:8f:01:8c:26:eb:97:77:
         ad:fd:a3:f0:8b:49:c7:0b:be:8a:02:90:93:88:d3:36:51:1d:
         12:fa:60:72:8a:03:cd:f5:18:30:6b:b7:df:83:e3:0a:c4:63:
         5c:47:1b:2e:aa:02:8c:4b:89:e9:58:28:ac:c4:2a:4d:da:4f:
         34:cc:e1:7f:64:b3:c8:31:ac:70:40:a4:dc:11:e9:1b:9d:15:
         19:9d:89:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:33 2024 by rpki-client on console-ams.rpki-client.org