Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/35C99D4C845611EFB053C341C4F9AE02.roa
File:                     35C99D4C845611EFB053C341C4F9AE02.roa (raw, json)
Hash identifier:          V78F/sUvRrSVdDJyDfEyty7/vxO3/r50Hl6d0lC1src=
Subject key identifier:   9C:66:04:72:D3:CA:C3:65:0E:C4:E5:E0:70:D9:79:54:08:69:EF:29
Certificate issuer:       /CN=A91BC4FF/serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F
Certificate serial:       03
Authority key identifier: 49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/35C99D4C845611EFB053C341C4F9AE02.roa
Signing time:             Mon 07 Oct 2024 02:45:28 +0000
ROA not before:           Mon 07 Oct 2024 02:45:28 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     151656
IP address blocks:        103.13.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl
                          rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 05:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC4FF/serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F
        Validity
            Not Before: Oct  7 02:45:28 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=67034b47-a646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:90:f4:f2:b1:9a:90:7b:93:af:25:5b:ac:47:
                    32:75:32:1b:c9:bf:5f:95:9c:7f:2e:a9:39:d2:21:
                    e5:96:44:b8:ed:41:61:f9:75:9f:73:23:03:3f:b2:
                    8c:aa:a3:1f:50:d7:32:40:3e:0e:6d:3d:2b:1d:d5:
                    51:a3:20:ac:4f:b5:ec:20:61:3b:56:62:f7:bf:6d:
                    da:5a:d9:a8:53:6d:c7:d2:38:77:2a:78:fd:63:1e:
                    76:50:0e:13:13:ca:44:f5:fd:36:52:5f:34:e3:d9:
                    f2:28:ed:d4:d5:36:ff:4a:8e:a7:62:0b:83:a4:1f:
                    ef:c4:bd:fc:5c:ee:2c:c4:88:79:b9:00:09:7e:0d:
                    f6:73:f4:08:9f:19:69:d9:30:c2:65:d6:ee:cd:27:
                    35:8a:d4:ec:0b:6f:4b:19:86:76:23:e7:7b:3a:c0:
                    f8:13:ab:f5:98:bf:f5:06:62:34:73:6f:d6:72:ad:
                    51:5b:49:28:5c:21:38:bc:7c:19:60:b0:61:29:53:
                    95:99:12:e2:d3:51:bc:c8:58:3b:b8:92:f5:b2:d0:
                    4a:0a:1a:5c:87:b9:91:be:58:3b:75:89:6f:08:26:
                    59:57:83:fb:65:05:0d:f2:26:d9:dc:c1:a3:c7:f3:
                    3e:4c:a2:69:a7:63:a9:a6:c4:56:8d:e0:e9:01:26:
                    0c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:66:04:72:D3:CA:C3:65:0E:C4:E5:E0:70:D9:79:54:08:69:EF:29
            X509v3 Authority Key Identifier:
                keyid:49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/35C99D4C845611EFB053C341C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:c2:dc:c1:98:af:06:95:66:aa:81:36:87:05:53:b4:d3:66:
         a7:06:ea:01:45:07:15:6e:fe:03:fd:a2:c7:45:98:b2:c5:1c:
         46:fc:86:ae:77:e7:ea:86:24:92:f7:0a:66:dc:85:ac:cb:54:
         89:46:34:23:1b:f3:0a:dc:97:a3:e2:9c:fc:01:fb:cd:92:28:
         64:1b:46:7c:5e:b6:9e:8c:68:80:f1:a1:e1:d7:68:37:46:35:
         0c:a8:54:6e:02:86:18:57:0f:c2:af:6b:69:58:75:76:5b:13:
         fc:5e:03:a0:3f:d5:3d:c5:1a:fd:0e:a4:94:98:2f:e3:30:e1:
         50:58:ac:f2:1f:5f:58:71:e9:86:fa:21:ac:8d:48:1f:39:dc:
         1b:3d:ee:93:b6:58:5b:01:64:af:8b:61:54:f1:40:05:d3:64:
         64:04:36:3f:c8:5b:c1:ea:be:b1:8a:4a:6c:8c:b5:3c:a4:df:
         fc:8c:86:86:38:98:ae:6b:bd:71:a4:4a:4c:b3:d4:98:08:6a:
         1e:d3:c3:5d:39:06:b5:a7:6e:85:bd:63:00:f5:01:27:6d:22:
         39:a7:1c:fc:92:5c:40:64:9b:10:1e:bd:9f:7d:57:d1:df:9e:
         12:7c:a6:56:48:a2:7b:92:a8:7e:fc:12:1a:42:b1:2f:b7:b8:
         10:0b:59:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 07:33:24 2024 by rpki-client on console-fra.rpki-client.org