Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/07B85890C29D11EBBAF29939C4F9AE02.roa
File:                     07B85890C29D11EBBAF29939C4F9AE02.roa (raw, json)
Hash identifier:          Wbd4SNbG7n2IN5fFqW7xiw4LueCafFj4BsRNKFvE840=
Subject key identifier:   DE:7D:7A:3A:15:0C:E3:04:46:EC:5E:9E:4F:CE:EC:BD:53:E3:12:16
Certificate issuer:       /CN=A91A6DF8/serialNumber=7A506C217A31078E42178160380DD2C83928D92E
Certificate serial:       0C34
Authority key identifier: 7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/07B85890C29D11EBBAF29939C4F9AE02.roa
Signing time:             Thu 24 Oct 2024 18:56:49 +0000
ROA not before:           Thu 24 Oct 2024 18:56:49 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     138212
IP address blocks:        103.122.136.0/22 maxlen: 24
                          2403:9040::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl
                          rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3124 (0xc34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6DF8/serialNumber=7A506C217A31078E42178160380DD2C83928D92E
        Validity
            Not Before: Oct 24 18:56:49 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=671a9871-ba56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7d:48:bc:c8:b6:e6:46:5f:45:a0:e2:f2:10:
                    5f:12:6f:e7:72:e3:2b:8b:c7:37:e3:1b:04:79:1a:
                    e8:66:ad:47:6c:c8:12:c1:17:fb:2a:cb:67:a0:7f:
                    d8:da:7e:5a:81:93:aa:89:2f:5a:e8:3a:65:fa:c7:
                    ae:84:fe:ea:f5:03:d7:14:b6:6f:ec:ea:60:5e:28:
                    d0:df:d0:5d:85:23:6c:27:b0:8e:af:4e:dd:25:03:
                    db:6a:09:45:90:fd:d8:c6:3b:9c:15:1b:c8:7a:18:
                    8e:eb:e1:69:e3:46:9f:19:e4:34:3c:ab:35:9e:65:
                    33:5d:c9:cc:2e:0a:40:0c:09:99:34:0e:9b:77:37:
                    b1:2b:15:93:57:02:8e:43:2b:6d:41:fc:fd:1b:01:
                    37:9f:ad:ea:46:db:f3:4c:9e:a3:be:dd:31:8c:ae:
                    31:42:7f:19:b7:e8:7e:c3:d0:f3:ff:b0:72:16:15:
                    88:fd:70:1d:26:7b:e3:ca:18:d7:69:71:65:41:2c:
                    81:df:c0:78:13:4a:a5:43:fe:cf:ac:9f:27:57:4e:
                    29:c3:06:0b:11:a1:40:67:78:19:e9:f2:22:1f:2b:
                    b9:b9:31:55:9c:6c:bf:c6:0d:db:d9:a4:d9:ae:be:
                    8a:7e:56:3f:30:48:4d:ae:f0:27:7f:34:40:8b:db:
                    fb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7D:7A:3A:15:0C:E3:04:46:EC:5E:9E:4F:CE:EC:BD:53:E3:12:16
            X509v3 Authority Key Identifier:
                keyid:7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/07B85890C29D11EBBAF29939C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.136.0/22
                IPv6:
                  2403:9040::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:51:c1:58:b3:a0:82:3d:0b:58:78:b1:3a:77:85:0a:7a:61:
         f8:44:f0:20:45:10:6a:2f:2c:f9:32:33:63:f3:dd:42:06:7f:
         66:15:a0:bd:32:63:fb:f2:4b:4a:3b:e2:e4:98:f5:f5:65:1d:
         f7:4b:45:2b:3b:e3:b9:53:35:b3:08:26:d3:ae:f7:cb:a6:d1:
         d9:9f:7e:00:50:a7:ef:16:17:6f:37:47:b2:53:cd:e3:ef:ac:
         bc:37:94:33:95:1c:33:91:bb:05:f6:5f:56:2d:00:0d:47:25:
         90:a2:3c:e6:ef:24:69:57:1b:15:96:ef:b6:56:b2:6c:aa:5e:
         59:49:47:02:d4:e1:f4:30:f5:3d:bf:b9:9a:7b:51:36:8b:59:
         83:0c:81:ae:ae:a9:50:97:e1:ac:ca:5e:5a:1c:95:c7:76:ae:
         79:79:3c:a7:a4:56:ba:78:8e:05:f7:78:62:c9:2d:be:e7:66:
         08:df:5b:fc:52:01:d0:52:22:ae:3a:d6:4b:9b:f8:e3:a2:c0:
         7d:39:ac:d2:19:80:e3:24:db:8c:b5:c0:d8:66:65:99:59:44:
         4b:74:a8:2a:f6:b0:cc:37:cf:dc:9c:6a:dc:74:34:1e:21:08:
         6a:c2:9b:21:93:60:31:f9:cc:ab:44:d9:98:0d:f2:5c:3c:ea:
         3e:e6:d7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:15 2024 by rpki-client on console-ams.rpki-client.org