Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/0000FD82284811EFADB77468C4F9AE02.roa
File:                     0000FD82284811EFADB77468C4F9AE02.roa (raw, json)
Hash identifier:          w1bbBa3f8haD8dXl0Sh3tS90MqNdPu73xuXaH88DKo0=
Subject key identifier:   97:9E:61:B0:D0:DC:67:E2:C9:81:96:38:2A:04:6D:74:3E:93:DE:D3
Certificate issuer:       /CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Certificate serial:       341D
Authority key identifier: C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/0000FD82284811EFADB77468C4F9AE02.roa
Signing time:             Tue 11 Jun 2024 23:16:45 +0000
ROA not before:           Tue 11 Jun 2024 23:16:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     132145
IP address blocks:        103.6.12.0/22 maxlen: 22
                          103.6.12.0/24 maxlen: 24
                          103.6.13.0/24 maxlen: 24
                          103.6.14.0/24 maxlen: 24
                          103.6.15.0/24 maxlen: 24
                          180.233.128.0/22 maxlen: 22
                          180.233.128.0/24 maxlen: 24
                          180.233.129.0/24 maxlen: 24
                          180.233.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
                          rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13341 (0x341d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
        Validity
            Not Before: Jun 11 23:16:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6668dadc-038f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3e:c9:e0:53:dd:32:07:de:b8:b2:43:75:bf:
                    e9:e5:00:5d:f1:f4:3d:1c:25:90:29:e1:63:5f:55:
                    c9:1e:d5:db:0b:15:7e:06:6a:46:2b:49:4d:0e:cf:
                    4a:f5:99:95:b8:b5:1c:ef:93:1d:26:54:8b:47:7d:
                    af:79:90:69:d4:23:a2:57:62:ae:78:66:7f:a2:08:
                    ed:45:09:a9:e2:42:e8:4e:bd:75:63:4f:68:06:34:
                    85:f5:95:66:83:e2:ac:70:2d:3f:df:af:ce:bd:bb:
                    2f:a1:94:bb:1b:ff:e6:62:ed:86:ab:19:f0:5e:3f:
                    02:7a:74:16:a2:c1:62:a3:70:b3:74:34:08:72:06:
                    5a:47:93:6e:71:e7:2e:1a:95:c5:99:9b:6e:44:e4:
                    97:d1:d6:e2:b1:35:e4:38:a5:ac:17:93:be:0e:cc:
                    1b:57:3e:e6:51:00:95:32:6a:d6:61:71:52:d8:c7:
                    ee:52:72:ec:e1:5d:53:5d:f5:ea:3f:1a:65:f4:15:
                    d3:fb:74:e6:a9:c1:3f:05:16:e8:86:b5:1f:88:a5:
                    ed:0d:ea:20:81:c1:52:f6:7e:f8:c5:1c:ec:bc:23:
                    69:13:55:df:fe:fa:cd:01:4c:9a:41:20:37:e6:40:
                    71:62:d7:54:91:4d:86:1b:92:39:7c:3f:9b:e4:6f:
                    e0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9E:61:B0:D0:DC:67:E2:C9:81:96:38:2A:04:6D:74:3E:93:DE:D3
            X509v3 Authority Key Identifier:
                keyid:C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/0000FD82284811EFADB77468C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.12.0/22
                  180.233.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:b6:d0:eb:3e:02:15:27:c3:c6:d1:9f:6b:f9:9e:84:40:05:
         27:a5:46:c7:82:fc:57:96:3f:06:88:4f:e1:ad:de:39:b5:eb:
         34:83:df:45:ba:cf:fb:8b:55:df:e5:c1:3a:e8:77:f3:9f:5f:
         2f:00:86:fc:97:d2:71:66:16:5e:a3:8d:de:ab:01:ba:29:e3:
         27:88:69:6c:b4:f3:0f:c1:23:e2:6f:9b:3a:8c:90:1b:11:60:
         80:fa:8e:47:ec:83:94:74:b5:ae:9f:12:f8:20:d5:32:18:74:
         25:c5:8a:87:c2:9f:f2:ca:79:9c:90:88:46:aa:c5:da:12:c2:
         98:6e:d5:ef:7d:e6:07:42:ad:39:bb:2f:58:b9:df:ef:33:31:
         3b:5c:2f:8c:2c:ca:bf:8a:8f:7f:32:64:d6:53:94:b0:d7:b4:
         70:66:c8:cb:c7:6f:9c:be:4b:84:5b:0a:1f:94:74:56:70:54:
         ba:b4:72:2b:35:9e:ee:44:4a:c0:a0:b9:86:9d:94:0b:55:72:
         b0:4b:23:1b:6b:fc:23:bb:22:d3:b0:a7:cb:1a:6c:03:47:46:
         94:02:29:67:96:8e:aa:6f:d1:26:06:68:85:0b:f3:b9:95:2c:
         9f:47:99:7e:95:06:64:59:d0:16:a5:4e:be:a9:09:e3:d8:fe:
         f2:1d:0b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:25:43 2024 by rpki-client on console-fra.rpki-client.org