Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/DDA375B433E911EA818BA21BC4F9AE02.roa
File:                     DDA375B433E911EA818BA21BC4F9AE02.roa (raw, json)
Hash identifier:          HnTBs0uJc7B2wZIC0p6EsmCtE1h1nepd2rRBNKI7CVA=
Subject key identifier:   22:1A:52:6D:E0:B4:40:CC:C2:64:3D:29:B6:BD:55:28:9A:80:7D:39
Certificate issuer:       /CN=A91A7D85/serialNumber=5827E4BD870277EDF0EB10563A9B41C1E4BE7C81
Certificate serial:       0A00
Authority key identifier: 58:27:E4:BD:87:02:77:ED:F0:EB:10:56:3A:9B:41:C1:E4:BE:7C:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/DDA375B433E911EA818BA21BC4F9AE02.roa
Signing time:             Sat 08 Jul 2023 19:56:21 +0000
ROA not before:           Sat 08 Jul 2023 19:56:21 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     136469
IP address blocks:        103.20.245.0/24 maxlen: 24
                          203.24.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.crl
                          rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Jun 2024 20:18:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2560 (0xa00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7D85/serialNumber=5827E4BD870277EDF0EB10563A9B41C1E4BE7C81
        Validity
            Not Before: Jul  8 19:56:21 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64a9bf65-32ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2b:ed:f5:8f:54:d0:e3:1d:1f:21:c4:9d:4b:
                    85:9d:0f:bf:eb:2a:5a:25:25:02:0f:44:75:68:de:
                    a7:9b:85:51:35:42:92:ea:5f:6a:8e:85:dd:68:ae:
                    15:79:89:da:d1:d3:8b:57:cd:83:1b:a9:77:73:37:
                    bd:17:29:85:0a:3b:d4:b3:64:3f:26:7e:9f:19:34:
                    f3:cd:6b:3a:45:66:f3:32:cd:d5:7d:a9:92:d5:a4:
                    e5:39:54:9e:02:e3:2c:c2:49:78:b8:ef:87:f6:55:
                    cd:85:dc:00:e8:c9:2a:09:09:91:b2:3b:4b:84:2a:
                    f3:36:d5:a2:df:ce:34:87:48:5e:d1:7b:f7:ec:3e:
                    43:6f:64:1b:c0:00:f4:8f:7b:00:73:75:6e:9a:2c:
                    b0:52:24:50:d2:ee:38:7a:a2:e9:08:b6:e0:d4:48:
                    79:39:12:e3:b9:d5:27:90:73:f1:59:f3:e9:74:2d:
                    38:14:75:42:b1:26:3a:1e:ce:83:9e:00:ff:6f:a0:
                    34:fa:1c:48:07:c5:61:50:9a:17:59:04:54:91:e9:
                    1a:98:d4:25:34:64:58:12:c1:0c:ee:56:cc:54:bc:
                    f0:74:09:ba:20:28:e9:8c:14:6f:7a:f4:82:13:49:
                    42:67:27:5b:3f:c3:0d:1d:b4:cb:fa:29:81:1e:d1:
                    45:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1A:52:6D:E0:B4:40:CC:C2:64:3D:29:B6:BD:55:28:9A:80:7D:39
            X509v3 Authority Key Identifier:
                keyid:58:27:E4:BD:87:02:77:ED:F0:EB:10:56:3A:9B:41:C1:E4:BE:7C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/DDA375B433E911EA818BA21BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.20.245.0/24
                  203.24.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:57:3e:d6:66:0f:47:53:a9:78:31:04:c2:1c:3a:e8:9f:b9:
         e2:74:1f:11:fa:5a:6e:dd:0f:1d:7b:1e:51:fe:1c:4a:e1:3a:
         6e:a8:9d:53:16:87:5f:b6:2d:8f:79:a3:6a:17:7a:d4:3a:25:
         cd:cf:de:60:38:19:bc:42:f0:67:92:68:a9:be:22:c2:5c:6c:
         11:ca:db:65:09:41:18:9f:d9:77:3b:69:66:55:cd:77:29:da:
         ee:62:f2:00:1b:b7:42:1b:1a:63:36:f0:3c:41:03:fb:08:37:
         f7:5e:b3:23:14:37:4e:1f:8a:f7:7b:6c:d1:ee:13:99:ae:da:
         fe:b1:1b:13:b5:5c:fa:cc:5e:6c:3c:d9:8c:7e:8c:f9:3e:f2:
         38:a1:d4:3e:66:2b:95:3e:9f:44:ae:8a:df:9a:f8:07:f7:91:
         86:f3:0a:6f:84:c0:49:aa:82:db:19:d6:6b:e0:cf:fc:20:11:
         d2:39:52:a3:c5:aa:ee:fc:46:19:93:89:19:f9:79:9a:21:38:
         5a:f0:41:49:50:e7:95:7d:07:3b:92:71:11:c8:ef:09:5d:b0:
         58:53:96:89:95:d8:74:63:98:40:0f:70:1b:81:53:17:73:46:
         29:4f:cb:6c:8f:5d:8b:fa:49:f0:c5:dc:33:88:6a:be:c7:bb:
         bf:55:62:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 23:05:37 2024 by rpki-client on console-ams.rpki-client.org