Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/503D2222018111EBB0502527C4F9AE02.roa
File:                     503D2222018111EBB0502527C4F9AE02.roa (raw, json)
Hash identifier:          3enXPqnFzMHU9dBHb+GMjG4Ixqaeyokw5ixU8F4DMjc=
Subject key identifier:   91:32:84:54:EA:AB:36:28:46:AF:74:2A:1D:79:CA:25:7A:98:54:A0
Certificate issuer:       /CN=A91B66C5/serialNumber=FEF13AB852B892ABA28B7F4B25257089964D766B
Certificate serial:       0918
Authority key identifier: FE:F1:3A:B8:52:B8:92:AB:A2:8B:7F:4B:25:25:70:89:96:4D:76:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/503D2222018111EBB0502527C4F9AE02.roa
Signing time:             Sun 18 Feb 2024 20:59:16 +0000
ROA not before:           Sun 18 Feb 2024 20:59:16 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     49645
IP address blocks:        103.148.42.0/24 maxlen: 24
                          103.157.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.crl
                          rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2328 (0x918)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B66C5/serialNumber=FEF13AB852B892ABA28B7F4B25257089964D766B
        Validity
            Not Before: Feb 18 20:59:16 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65d26fa4-008b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fc:f1:d5:e2:13:30:b8:a8:cc:2d:40:48:05:
                    17:62:5d:66:12:70:ef:d3:5d:e0:73:37:fb:1a:3a:
                    f2:d4:cf:12:48:50:f7:a6:d6:61:d6:64:22:09:1d:
                    a7:8f:58:77:4e:b6:17:d0:43:94:dc:99:59:a3:7b:
                    21:32:23:a5:f0:1a:e5:b2:bf:2c:4b:ab:66:54:d1:
                    16:9f:f2:a4:b3:b4:eb:41:dc:c8:cc:84:18:f0:bf:
                    d3:c8:7d:d7:80:3a:33:b9:71:fa:c1:ad:79:7a:06:
                    c5:bf:3c:88:64:99:f0:96:15:34:9a:ed:3a:f5:d3:
                    d9:10:8b:7d:21:13:ee:8b:4f:d5:1e:79:f1:60:dd:
                    83:74:bd:75:b4:dd:86:69:eb:98:b5:13:14:07:f1:
                    33:66:3a:e0:f0:fc:c4:7e:34:6a:c4:c2:72:0f:b7:
                    01:75:ee:1b:d0:3e:72:18:a5:7a:12:ea:ac:df:6c:
                    35:e4:73:20:82:0e:e3:3e:a1:ee:48:d6:c1:b9:17:
                    ce:54:fe:52:52:a4:c6:31:45:cd:51:d0:08:ef:2b:
                    aa:14:e9:b1:b4:1e:bd:81:1c:5a:5f:55:57:41:df:
                    93:11:dd:d9:98:a1:ae:cd:02:9f:10:c5:3e:67:fb:
                    61:e7:fd:e1:e6:91:d4:4b:8f:0f:b4:5e:d6:6f:8b:
                    17:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:32:84:54:EA:AB:36:28:46:AF:74:2A:1D:79:CA:25:7A:98:54:A0
            X509v3 Authority Key Identifier:
                keyid:FE:F1:3A:B8:52:B8:92:AB:A2:8B:7F:4B:25:25:70:89:96:4D:76:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/503D2222018111EBB0502527C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.42.0/24
                  103.157.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:b7:60:df:6d:0c:41:e7:e5:80:19:e0:43:88:26:f8:63:84:
         59:51:0d:8b:1c:b8:78:50:04:52:59:a1:58:5f:d7:1c:af:59:
         6c:64:a9:e9:09:0d:f2:f4:9e:3a:14:01:d9:c1:76:18:b7:66:
         6f:78:3c:17:dc:29:bc:c8:fe:98:de:2f:e5:4f:f9:60:5c:f1:
         03:d7:30:fb:c9:0b:8d:ab:01:3f:4b:13:65:d6:6d:b0:0b:19:
         e4:22:80:a1:7a:a6:47:4b:f1:98:c4:06:bd:2b:08:0c:50:e2:
         22:84:a5:2f:42:4b:1e:38:78:89:b2:75:a9:cd:30:50:db:b0:
         03:c8:a3:93:1f:05:9a:c4:2b:c1:30:33:af:b0:95:3e:0e:d3:
         b0:f9:f7:f6:40:f6:52:ac:72:78:48:50:01:af:f0:bd:11:c3:
         ab:45:97:a0:f6:73:9c:57:1a:c4:dc:dc:d2:41:52:ae:2e:f7:
         f7:04:a3:e0:ef:1c:cb:b3:70:5c:3c:51:ca:a0:79:97:ff:b6:
         80:9f:7a:31:21:03:ac:81:72:a0:3e:6c:49:80:24:3c:84:21:
         9e:9a:00:14:09:69:f5:f7:15:48:0f:70:5c:68:95:de:17:10:
         b2:58:9d:24:9a:0d:4c:ea:32:18:90:8f:f0:cb:e2:4c:e3:d5:
         8a:56:b7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:32 2024 by rpki-client on console-fra.rpki-client.org