Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/32B24F6425FD11EDA4097785C4F9AE02.roa
File:                     32B24F6425FD11EDA4097785C4F9AE02.roa (raw, json)
Hash identifier:          1DnKSzLoM0CTCgb09q8W/MqI67bjoZqKAzNGq6PC5cw=
Subject key identifier:   01:43:25:F2:12:BB:47:A7:59:9A:CD:19:81:93:B4:C9:41:C0:67:F2
Certificate issuer:       /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9
Certificate serial:       0540
Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/32B24F6425FD11EDA4097785C4F9AE02.roa
Signing time:             Wed 03 Jul 2024 00:42:36 +0000
ROA not before:           Wed 03 Jul 2024 00:42:36 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     9267
IP address blocks:        103.167.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl
                          rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1344 (0x540)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9
        Validity
            Not Before: Jul  3 00:42:36 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66849e7c-42e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8d:20:7f:0e:1b:51:e1:8e:de:ff:32:67:5a:
                    f0:09:d2:21:e4:ab:95:19:7f:7d:0f:6c:98:be:39:
                    dd:8f:11:3d:f3:66:60:67:02:d9:23:9e:c4:d5:29:
                    86:db:4f:26:f9:14:e1:4d:d4:f3:ce:45:92:88:f6:
                    66:ed:2d:79:da:12:67:51:aa:70:5d:51:7d:bd:64:
                    df:34:9c:d2:03:4a:67:4d:de:63:20:6d:a5:e7:fc:
                    c2:d0:18:b2:25:0d:91:66:64:f2:b2:fa:28:cf:6f:
                    63:30:19:89:2b:30:99:05:2a:8a:45:bd:3b:90:e4:
                    98:3a:ae:f7:e4:57:3a:70:10:80:9e:c1:f7:b4:7f:
                    78:b4:5c:91:27:06:ac:a8:ae:9d:fc:ac:7d:16:2e:
                    d7:35:58:2f:f0:02:1f:c8:07:f3:2a:24:1a:1b:dd:
                    fc:1b:9a:62:91:58:88:12:7e:3c:d5:24:a8:98:5f:
                    68:f0:0c:d6:16:70:00:32:ae:8d:36:e3:fa:29:db:
                    38:07:0c:e2:c9:54:dd:87:86:36:4f:41:af:03:04:
                    1a:f7:50:46:84:22:1a:6e:ca:9a:c2:92:03:57:53:
                    b0:4d:85:7b:62:d2:93:62:e5:4b:e9:73:ed:fa:ec:
                    1c:23:a7:8d:9a:a6:73:6d:f2:9c:27:d7:04:61:ff:
                    2f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:43:25:F2:12:BB:47:A7:59:9A:CD:19:81:93:B4:C9:41:C0:67:F2
            X509v3 Authority Key Identifier:
                keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/32B24F6425FD11EDA4097785C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:d7:4b:a8:c6:c4:53:62:e0:34:ba:05:2d:41:16:37:55:a8:
         96:0f:83:ad:4e:60:88:64:e7:5b:bf:39:70:4c:44:4a:7a:87:
         97:c9:42:7c:67:fa:81:e1:e1:f9:34:ce:6c:01:c9:48:27:29:
         65:5b:f0:64:07:f9:eb:6f:d3:29:5d:ef:21:85:96:03:19:90:
         0a:52:7e:e2:f2:25:71:2b:95:1d:ed:07:8c:70:df:a4:5d:76:
         3e:1a:25:cb:58:e5:23:25:15:b1:32:84:5e:83:2d:bd:6d:c8:
         32:cc:26:85:35:78:d7:5c:59:b4:be:da:3b:7b:32:e1:ba:30:
         7e:91:31:47:5f:a0:c4:55:fd:62:e8:ec:c6:1e:68:c5:b2:36:
         a8:25:ec:8c:bd:e8:42:bd:6b:0f:63:c0:9f:c1:13:96:7b:25:
         4f:64:03:4a:d6:55:b9:c4:fe:75:06:4b:04:ea:db:4b:04:dc:
         7c:b0:f0:61:47:98:71:dd:f1:b1:46:a0:fc:ff:c5:b9:fd:bc:
         f4:c8:c9:9f:b3:74:d2:06:32:0d:0c:6b:95:d5:37:ad:2c:d0:
         47:f7:3e:71:3f:64:dc:b8:e3:ab:e1:ae:42:db:35:26:d9:60:
         36:b0:0a:cc:37:d6:33:aa:e6:70:1e:98:b5:a4:13:c3:80:cf:
         67:3e:da:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:55:50 2024 by rpki-client on console-ams.rpki-client.org