Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/378FB0D25B9211EEB8E7453DC4F9AE02.roa
File:                     378FB0D25B9211EEB8E7453DC4F9AE02.roa (raw, json)
Hash identifier:          XHpwnOzWirhZDyC+O+dd8moXeBpb4e61IwD/RSr7i40=
Subject key identifier:   EF:A5:D4:31:47:AC:FB:D9:77:63:89:2C:D5:49:21:2F:2E:64:E5:F0
Certificate issuer:       /CN=A91C08EE/serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC
Certificate serial:       018B
Authority key identifier: 15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/378FB0D25B9211EEB8E7453DC4F9AE02.roa
Signing time:             Thu 29 Aug 2024 03:46:01 +0000
ROA not before:           Thu 29 Aug 2024 03:46:01 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     131275
IP address blocks:        103.203.88.0/24 maxlen: 24
                          103.203.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl
                          rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:52:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395 (0x18b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C08EE/serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC
        Validity
            Not Before: Aug 29 03:46:01 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66cfeef9-9ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5d:fc:89:25:b3:0f:fd:66:88:b6:bf:46:6d:
                    5f:eb:34:b9:dc:91:7f:93:7e:6a:65:9b:22:12:df:
                    e5:c6:07:4d:3a:82:f2:00:3e:44:b6:43:9b:46:60:
                    a3:ae:44:f6:ed:d2:5d:97:af:e1:8f:fa:ff:b5:41:
                    7b:37:35:e3:8d:3c:4e:32:69:af:ab:44:24:41:a1:
                    2a:c7:31:47:7e:95:5c:f9:ee:d9:19:ae:ec:8b:f2:
                    e6:08:ae:75:ee:b1:74:17:8c:eb:0a:6e:02:f4:55:
                    b7:26:33:3f:79:bf:5c:fc:cd:94:11:45:79:91:46:
                    94:ee:4f:8f:89:73:d5:e5:b5:05:39:ee:21:d1:13:
                    bf:05:c5:0e:56:9c:33:56:7d:73:df:44:c7:1c:cb:
                    da:0a:00:8c:cc:31:6e:47:d4:c0:65:74:6a:ae:d4:
                    b2:b2:79:34:86:11:9b:62:7d:ca:4a:cd:16:8c:24:
                    04:a9:0a:44:d8:69:73:9f:4e:a5:95:bc:05:e2:90:
                    dd:f1:cd:a5:21:58:c5:2a:b4:a4:a2:c6:27:8d:2d:
                    b9:45:fa:4a:79:c1:1c:73:5b:64:71:e3:b4:d5:e6:
                    9a:5c:ee:58:82:75:1c:52:58:02:07:b2:2a:f2:c1:
                    a7:1a:d3:a7:32:ae:6f:97:30:38:ec:4c:2a:f0:51:
                    cb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A5:D4:31:47:AC:FB:D9:77:63:89:2C:D5:49:21:2F:2E:64:E5:F0
            X509v3 Authority Key Identifier:
                keyid:15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/378FB0D25B9211EEB8E7453DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:cc:fe:e1:0c:d5:bf:17:5b:f0:cc:f9:7e:01:42:4b:f4:b5:
         a4:34:73:6b:a9:10:05:2e:f5:4d:4e:56:0c:e5:5b:2a:91:b7:
         be:31:1c:8d:a9:1f:59:5f:d5:fc:21:40:b1:b1:d3:1e:d2:ae:
         58:c8:04:74:72:a1:40:c7:5c:cb:04:1b:b7:58:c0:0f:cb:f9:
         af:22:af:87:04:d0:28:9f:35:6d:d7:45:9a:d8:6b:5a:82:6b:
         dc:d0:94:de:dc:9e:0a:2f:79:d7:2b:45:2d:96:16:f9:58:af:
         94:f4:2b:a6:77:22:85:15:cf:80:dc:6d:ef:2f:35:2b:e5:b4:
         0b:43:65:8f:1a:73:cc:fb:f3:11:42:21:83:85:b0:91:b1:06:
         c7:55:ec:3f:b8:9c:af:83:c0:0d:1e:9a:73:38:39:8f:26:28:
         23:54:06:32:54:70:4e:9f:a5:e5:2d:ad:21:4e:53:c0:95:db:
         24:bd:99:e2:41:72:b7:7d:49:cd:b6:73:3d:37:f7:9d:0a:b9:
         c9:f3:ee:39:2b:98:24:8f:cf:71:84:c5:c5:f1:d6:b9:9d:49:
         c9:8a:ca:1a:d8:da:11:f6:9f:05:53:05:03:8e:41:b0:66:8a:
         49:cb:76:53:94:25:25:a4:83:ed:fb:03:74:d2:7d:d9:85:0f:
         d6:4f:eb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:50 2024 by rpki-client on console-ams.rpki-client.org