Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/3763B68C774C11EE81607E76C4F9AE02.roa
File:                     3763B68C774C11EE81607E76C4F9AE02.roa (raw, json)
Hash identifier:          7xbva2x/2mRF/+1fr2KpL4N7Zq29lf7peyPdqH7ozvw=
Subject key identifier:   0E:42:C6:2F:29:15:10:6C:F8:45:55:78:F2:51:BB:2A:02:2B:82:9C
Certificate issuer:       /CN=A91AD09B/serialNumber=1AF3C89CF147F2FEB51DAAE8957DB99D387263B8
Certificate serial:       E8
Authority key identifier: 1A:F3:C8:9C:F1:47:F2:FE:B5:1D:AA:E8:95:7D:B9:9D:38:72:63:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/3763B68C774C11EE81607E76C4F9AE02.roa
Signing time:             Sun 03 Nov 2024 03:57:27 +0000
ROA not before:           Sun 03 Nov 2024 03:57:27 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     150774
IP address blocks:        103.7.120.0/23 maxlen: 23
                          103.7.120.0/24 maxlen: 24
                          103.7.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.crl
                          rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD09B/serialNumber=1AF3C89CF147F2FEB51DAAE8957DB99D387263B8
        Validity
            Not Before: Nov  3 03:57:27 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=6726f4a7-72a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:53:cd:46:71:1a:cb:92:7c:d6:02:74:f9:40:
                    31:af:30:e9:d5:5c:bb:80:67:95:86:56:eb:d7:12:
                    24:bd:66:c7:c5:42:83:62:ce:98:15:d1:11:f7:5b:
                    2c:b6:e5:65:c1:22:a5:ab:87:73:0f:a6:c9:d7:53:
                    fb:8f:6e:3f:03:59:21:40:1d:0f:ec:4f:15:51:6a:
                    c3:d6:18:6b:cb:c2:96:f9:0c:0d:04:29:71:08:9f:
                    4c:5a:e5:07:f6:55:53:58:c9:c0:16:d8:d9:2f:31:
                    5a:4c:20:93:f1:5e:85:17:fa:0d:6b:9c:4b:38:48:
                    45:98:ab:62:fc:3b:36:0e:6d:52:14:aa:93:3f:4e:
                    0b:31:81:8c:88:27:70:e1:3d:68:b2:b3:19:42:be:
                    f8:43:53:e0:ef:a2:b6:80:bb:66:ca:72:40:48:7a:
                    43:7e:08:6f:74:b4:45:5c:3b:74:63:f4:30:c2:55:
                    ef:72:08:7f:8a:ca:f1:f9:07:66:11:a3:99:99:0f:
                    05:77:ca:42:86:24:03:69:64:d0:c6:73:67:5c:0d:
                    a7:9a:11:c8:31:35:d5:a7:43:4c:38:fe:ee:6b:88:
                    35:a1:63:3b:fc:17:e0:00:e7:6e:12:a1:cb:f8:fc:
                    8a:76:92:17:3e:bf:39:ff:5d:b1:09:18:fb:e3:4f:
                    70:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:42:C6:2F:29:15:10:6C:F8:45:55:78:F2:51:BB:2A:02:2B:82:9C
            X509v3 Authority Key Identifier:
                keyid:1A:F3:C8:9C:F1:47:F2:FE:B5:1D:AA:E8:95:7D:B9:9D:38:72:63:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/3763B68C774C11EE81607E76C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:b8:71:67:ab:24:13:a6:74:d7:b2:4b:a1:98:8d:8d:b8:b5:
         7b:c2:26:a4:cf:d3:26:b8:84:fc:77:e2:7d:fb:a6:9c:d7:4d:
         ef:1c:35:10:e0:14:51:b2:e5:4a:31:f4:84:67:e0:80:fd:21:
         d5:65:7c:69:55:2f:51:57:e7:4e:9a:63:ff:bb:82:80:6f:cf:
         ca:71:b1:89:eb:66:ee:2e:b0:bf:49:29:76:6d:6f:58:0b:9f:
         4a:09:f6:35:7c:37:d8:3d:da:79:52:91:af:03:91:4a:44:4c:
         2c:2a:c7:eb:47:7e:f6:f7:b4:cd:ef:3a:21:b9:5f:3c:d0:d1:
         9d:1b:cc:51:c0:9a:48:9a:da:78:fe:14:b0:8e:57:3d:8a:59:
         9a:7a:c3:a6:26:06:22:e2:98:66:08:dc:90:73:b9:94:a2:c5:
         74:59:4e:f2:e4:73:7f:e1:35:02:64:70:ff:1c:a0:e8:64:37:
         ae:a3:50:2f:d7:ec:3a:44:5c:f5:ae:e5:f5:f0:2d:64:b3:c8:
         30:34:88:f5:7f:67:ce:df:5a:1f:39:ab:04:e6:2f:c9:71:0f:
         9a:eb:bc:d3:16:95:78:c2:1b:2d:69:90:00:fa:ec:25:03:7b:
         df:fa:c5:ce:38:75:12:65:59:7a:b7:62:57:bd:ee:e2:49:5a:
         b2:23:20:d6
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUQwOUIxMTAvBgNVBAUTKDFBRjNDODlDRjE0N0YyRkVCNTFEQUFFODk1N0RCOTlE
Mzg3MjYzQjgwHhcNMjQxMTAzMDM1NzI3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzI2ZjRhNy03MmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnlPNRnEay5J81gJ0+UAxrzDp1Vy7gGeVhlbr1xIkvWbHxUKDYs6YFdER91ss
tuVlwSKlq4dzD6bJ11P7j24/A1khQB0P7E8VUWrD1hhry8KW+QwNBClxCJ9MWuUH
9lVTWMnAFtjZLzFaTCCT8V6FF/oNa5xLOEhFmKti/Ds2Dm1SFKqTP04LMYGMiCdw
4T1osrMZQr74Q1Pg76K2gLtmynJASHpDfghvdLRFXDt0Y/QwwlXvcgh/isrx+Qdm
EaOZmQ8Fd8pChiQDaWTQxnNnXA2nmhHIMTXVp0NMOP7ua4g1oWM7/BfgAOduEqHL
+PyKdpIXPr85/12xCRj7409wcwIDAQABo4IClTCCApEwHQYDVR0OBBYEFA5Cxi8p
FRBs+EVVePJRuyoCK4KcMB8GA1UdIwQYMBaAFBrzyJzxR/L+tR2q6JV9uZ04cmO4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDA5Qi8xRTJGQkVENDVD
NjQxMUVFQTU5QTgyMUVDNEY5QUUwMi9HdlBJblBGSDh2NjFIYXJvbFgyNW5UaHlZ
N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0d2UEluUEZIOHY2MUhhcm9sWDI1blRoeVk3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUQwOUIvMUUyRkJFRDQ1QzY0MTFFRUE1OUE4MjFFQzRGOUFFMDIvMzc2M0I2OEM3
NzRDMTFFRTgxNjA3RTc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnB3gwDQYJKoZIhvcNAQELBQADggEBAFO4cWerJBOmdNey
S6GYjY24tXvCJqTP0ya4hPx34n37ppzXTe8cNRDgFFGy5Uox9IRn4ID9IdVlfGlV
L1FX506aY/+7goBvz8pxsYnrZu4usL9JKXZtb1gLn0oJ9jV8N9g92nlSka8DkUpE
TCwqx+tHfvb3tM3vOiG5XzzQ0Z0bzFHAmkia2nj+FLCOVz2KWZp6w6YmBiLimGYI
3JBzuZSixXRZTvLkc3/hNQJkcP8coOhkN66jUC/X7DpEXPWu5fXwLWSzyDA0iPV/
Z87fWh85qwTmL8lxD5rrvNMWlXjCGy1pkAD67CUDe9/6xc44dRJlWXq3Yle97uJJ
WrIjINY=
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:55 2024 by rpki-client on console-fra.rpki-client.org