Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/2ADC134C973F11EEA24DBE15C4F9AE02.roa
File:                     2ADC134C973F11EEA24DBE15C4F9AE02.roa (raw, json)
Hash identifier:          KbAWgwBBoHx2CRpDzOmGlIIM8xmr+9u457k+7yk+pvo=
Subject key identifier:   5D:1C:4B:32:83:D3:6C:CE:09:B0:29:9F:8D:6C:C5:F6:92:ED:75:44
Certificate issuer:       /CN=A91C7672/serialNumber=51569B48C03891454E469853A67DB909BEC2CAD6
Certificate serial:       1B18
Authority key identifier: 51:56:9B:48:C0:38:91:45:4E:46:98:53:A6:7D:B9:09:BE:C2:CA:D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/2ADC134C973F11EEA24DBE15C4F9AE02.roa
Signing time:             Mon 12 Feb 2024 16:43:52 +0000
ROA not before:           Mon 12 Feb 2024 16:43:52 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     135882
IP address blocks:        103.78.252.0/24 maxlen: 24
                          103.78.253.0/24 maxlen: 24
                          103.78.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.crl
                          rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:15:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6936 (0x1b18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7672/serialNumber=51569B48C03891454E469853A67DB909BEC2CAD6
        Validity
            Not Before: Feb 12 16:43:52 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65ca4ac8-bf40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:da:ba:be:72:15:c6:25:db:3e:84:96:61:03:
                    b3:c7:01:f4:25:8b:0a:2c:51:ee:0d:12:70:dd:3e:
                    17:53:ef:a2:e3:5f:93:dd:6f:9d:ef:4c:28:82:68:
                    51:f8:91:19:61:cf:79:0a:31:16:cb:67:54:ee:a6:
                    41:0a:a6:34:99:5e:4e:aa:9b:58:9f:4b:f6:9a:57:
                    6b:79:38:9b:b2:5f:e3:69:47:5e:f8:d0:c4:a8:b4:
                    42:63:12:93:a0:de:19:24:56:c9:72:cd:2a:7e:39:
                    1a:f7:bf:09:af:a5:d1:62:d0:01:d0:ad:c1:2c:84:
                    11:2c:8b:ae:b9:fb:b6:a2:17:f9:25:97:b6:85:f8:
                    4a:1a:70:9b:5d:84:f0:08:8d:3e:75:95:cb:57:ed:
                    2f:01:c5:b4:23:c1:99:65:c6:0d:68:f3:f8:e0:aa:
                    82:f6:ee:94:04:c7:94:b9:86:4c:5b:ca:55:c2:0d:
                    74:c3:63:c1:23:6b:ae:0f:ad:b3:f3:68:2f:e2:66:
                    78:41:9f:44:ce:8d:af:6b:83:34:12:b5:be:c9:56:
                    3f:74:fe:f5:0b:a8:05:d9:a5:de:3b:bd:7a:e6:e2:
                    1a:6e:2d:16:8e:a1:ef:04:6f:7e:44:c1:de:33:0a:
                    81:19:51:80:fe:e8:46:a2:8a:5b:49:7a:2d:ee:bd:
                    61:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1C:4B:32:83:D3:6C:CE:09:B0:29:9F:8D:6C:C5:F6:92:ED:75:44
            X509v3 Authority Key Identifier:
                keyid:51:56:9B:48:C0:38:91:45:4E:46:98:53:A6:7D:B9:09:BE:C2:CA:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/2ADC134C973F11EEA24DBE15C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.252.0-103.78.254.255

    Signature Algorithm: sha256WithRSAEncryption
         50:9a:0a:b1:cb:ec:6a:5d:16:54:bd:8c:2f:f5:96:e3:c7:96:
         65:22:58:9d:a4:cf:86:ca:10:08:e3:4d:12:63:60:0c:bb:64:
         ee:ed:85:01:85:ff:c8:5f:0a:ac:1a:ce:4d:bd:3d:19:89:7c:
         c8:7b:59:43:1e:16:0f:ea:81:16:b7:f5:3e:e0:f3:d4:ce:3f:
         08:8d:c8:31:f1:b9:de:44:4a:61:36:cd:16:c7:ab:44:e5:6e:
         16:04:b7:c8:1b:ab:25:49:a5:20:20:3b:21:84:0b:19:71:ff:
         fa:69:31:9e:7a:d4:e9:b1:be:19:5e:83:95:73:7e:f5:ed:34:
         22:4a:74:86:37:85:f4:72:ec:54:48:04:9c:fc:1a:06:6e:e7:
         17:d2:de:2f:de:9b:76:f9:81:5b:8a:02:54:33:a9:e7:66:41:
         0f:84:50:c6:02:93:c2:df:46:5c:6d:16:66:33:28:bd:66:34:
         40:e6:22:f6:76:07:4c:a7:99:9e:e5:4a:b5:7e:f1:43:4d:1d:
         5d:4c:cc:90:a7:02:ef:57:c6:6f:1a:be:45:8b:d6:54:86:32:
         a9:c9:b3:2a:eb:90:c2:d9:e5:7e:63:b0:e4:8f:c1:e5:83:76:
         0d:f4:b5:62:2a:f9:1b:b4:78:fb:60:4a:70:9f:96:cd:34:f1:
         bd:96:28:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:56:20 2024 by rpki-client on console-fra.rpki-client.org