Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/FF4EB6B2395811ECA422C462C4F9AE02.roa
File:                     FF4EB6B2395811ECA422C462C4F9AE02.roa (raw, json)
Hash identifier:          kkkJWZ9fDn1htzEtE1zpX7lAAG0cOZUfH1foPNvS114=
Subject key identifier:   00:3E:0D:8A:78:72:6D:29:5E:9C:C8:B3:3C:AA:10:34:81:13:CB:12
Certificate issuer:       /CN=A91A7C77/serialNumber=61B022335F4D85E16D477A006ADC8E3F2FDA9460
Certificate serial:       0411
Authority key identifier: 61:B0:22:33:5F:4D:85:E1:6D:47:7A:00:6A:DC:8E:3F:2F:DA:94:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/FF4EB6B2395811ECA422C462C4F9AE02.roa
Signing time:             Thu 19 Sep 2024 00:33:40 +0000
ROA not before:           Thu 19 Sep 2024 00:33:40 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     141004
IP address blocks:        103.171.180.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1041 (0x411)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7C77/serialNumber=61B022335F4D85E16D477A006ADC8E3F2FDA9460
        Validity
            Not Before: Sep 19 00:33:40 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66eb7164-b7d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:19:10:24:89:d2:a4:17:c8:4b:d6:15:28:c1:
                    a1:46:f5:53:f9:71:c6:59:9b:03:64:3c:cb:ab:d2:
                    cf:f9:d9:2e:af:a4:64:e4:1d:9e:f2:13:ee:73:85:
                    db:ef:7f:75:bc:f0:2b:44:b3:a9:78:71:6e:03:58:
                    85:90:dc:ac:87:d1:aa:18:25:6f:87:cf:8f:5b:fb:
                    a7:8c:32:b3:3a:29:da:54:9d:a4:f5:8b:7b:37:ac:
                    75:3f:30:59:c4:7a:4d:3c:e3:28:74:03:b3:73:c5:
                    dc:78:a7:83:5c:b3:96:af:91:ba:26:ae:06:23:3d:
                    59:a3:65:ff:f1:3c:4d:68:ca:71:a1:23:b3:13:dd:
                    e3:a5:4b:24:f6:9c:80:79:d4:58:17:e5:df:e5:d8:
                    91:f0:b3:a8:1c:0b:51:6a:e8:6c:9b:5c:80:73:ae:
                    b7:8c:18:f3:82:19:55:79:e5:f9:7d:b3:bf:90:69:
                    86:64:f3:1c:67:04:85:dc:f7:80:ec:2f:bc:42:af:
                    2c:c9:56:72:6e:25:15:32:ff:ff:1f:8a:c4:dd:a8:
                    85:48:71:eb:e7:82:f0:48:79:1d:ad:1b:8f:5d:d2:
                    93:46:49:29:0b:43:ca:59:ea:2f:61:81:a7:98:8b:
                    11:7e:b4:e3:58:1b:6f:f9:37:e5:99:d9:fa:11:7a:
                    73:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3E:0D:8A:78:72:6D:29:5E:9C:C8:B3:3C:AA:10:34:81:13:CB:12
            X509v3 Authority Key Identifier:
                keyid:61:B0:22:33:5F:4D:85:E1:6D:47:7A:00:6A:DC:8E:3F:2F:DA:94:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/FF4EB6B2395811ECA422C462C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:78:87:ef:59:a9:46:41:87:f4:66:c0:02:02:1f:1e:20:5d:
         03:ab:7c:11:98:74:13:bd:f9:27:59:46:4b:22:32:53:11:7b:
         c2:bb:fd:bd:6d:12:97:a2:68:d0:cd:a3:23:39:6f:53:13:74:
         59:15:c2:7f:9b:f2:44:a7:af:e0:45:24:e6:67:e3:8a:96:16:
         d6:1e:af:1c:00:13:9d:ce:91:a8:d3:75:89:7e:3d:ac:91:0e:
         85:eb:ba:e7:be:a1:48:bd:bc:84:bc:5e:d0:19:d1:60:0e:ad:
         28:c5:fe:6d:3c:59:28:ae:cc:67:62:b3:d7:3e:a1:48:22:25:
         9a:22:6a:25:19:79:f3:45:e0:ab:7f:93:6f:9a:ef:f6:a7:95:
         d1:f7:50:fd:c5:e5:80:cb:d6:8d:ee:25:5d:4d:8c:15:33:2a:
         47:33:d3:95:be:25:f1:06:ab:1d:fe:b2:84:5d:f0:f7:bb:60:
         bd:dc:14:18:a9:69:8e:eb:6f:0c:29:8c:74:24:cd:aa:e1:4a:
         f9:b4:e4:e4:34:6c:4e:7a:0f:fd:b3:0a:42:55:3d:cf:6a:63:
         5d:6c:54:75:d3:59:9c:60:84:dc:f4:32:c0:e7:c5:b0:c4:58:
         6c:78:8a:8a:82:8f:06:4f:c0:e0:ba:bf:f5:73:d7:cb:a9:f4:
         b5:b9:ef:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:27 2024 by rpki-client on console-ams.rpki-client.org