Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/743EA894779E11EE842F9D85C4F9AE02.roa
File:                     743EA894779E11EE842F9D85C4F9AE02.roa (raw, json)
Hash identifier:          GCUYfktdJtM3w3x/AngT0svZ6AfcPm8+X/17pTPoOCo=
Subject key identifier:   8E:1F:FB:4F:CA:05:8F:3F:5A:FA:F7:EC:9F:75:18:18:AE:FF:D3:82
Certificate issuer:       /CN=A91D962B/serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1
Certificate serial:       77
Authority key identifier: F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/743EA894779E11EE842F9D85C4F9AE02.roa
Signing time:             Wed 05 Jun 2024 08:27:43 +0000
ROA not before:           Wed 05 Jun 2024 08:27:43 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     135428
IP address blocks:        103.138.184.0/24 maxlen: 24
                          103.219.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl
                          rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D962B/serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1
        Validity
            Not Before: Jun  5 08:27:43 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=6660217f-7a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ed:16:a7:44:32:84:c1:8d:9d:a1:55:50:8c:
                    fd:b4:74:4e:e7:7b:ae:28:1e:85:cc:62:89:44:ed:
                    2d:fe:d0:c0:a1:cb:63:3f:0a:41:05:e9:b0:5b:90:
                    fb:a5:e8:af:d0:fc:49:8f:ac:42:e2:9c:fd:bf:c3:
                    de:88:98:23:99:f3:ff:e3:25:ae:e3:16:0a:c1:cf:
                    25:f7:4c:e4:4f:eb:94:a3:24:af:c6:73:ad:d0:e8:
                    67:ea:e4:f1:f4:77:83:89:52:98:60:58:be:43:7b:
                    5e:c3:21:e8:f8:76:0c:97:0e:bf:15:83:7c:39:0e:
                    5d:49:cc:f8:e0:1a:85:a1:0f:01:45:a5:83:89:af:
                    7a:ac:eb:54:9e:27:e9:32:9e:d3:84:26:d9:23:27:
                    36:b3:98:a7:f5:e1:bc:ab:a9:22:4e:c7:dc:7f:99:
                    21:e5:d1:e8:d5:28:1d:18:23:27:ce:7d:75:29:62:
                    30:b6:54:11:7d:9a:db:72:48:ec:da:69:8a:2e:3c:
                    22:29:3f:63:38:d5:79:ca:d0:2f:9b:f7:40:53:3a:
                    c8:67:51:ec:64:cc:d5:99:e3:ff:cd:40:75:77:99:
                    97:29:be:8c:c5:cd:85:ad:6d:8d:d0:15:d5:cc:e6:
                    54:de:f0:09:c0:91:82:a0:25:fe:21:82:40:17:3a:
                    ee:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1F:FB:4F:CA:05:8F:3F:5A:FA:F7:EC:9F:75:18:18:AE:FF:D3:82
            X509v3 Authority Key Identifier:
                keyid:F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/743EA894779E11EE842F9D85C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.184.0/24
                  103.219.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:c5:ce:3f:42:e3:ec:45:24:15:58:0f:a0:d5:9a:19:14:08:
         9f:f9:eb:76:57:8d:e4:a9:e1:fd:3d:52:af:60:63:98:f9:97:
         95:8b:73:ba:db:09:a5:3d:7d:fa:f7:a4:3b:90:ab:75:6f:8b:
         c4:2e:cd:3f:86:f7:d3:a9:4b:4b:4b:2c:d3:44:5d:88:36:77:
         c2:fc:5f:0b:3e:0e:fb:e2:68:7e:5e:5c:32:26:b7:98:7c:39:
         2d:48:62:d8:98:56:e1:6e:6d:e7:39:dd:a9:a3:f2:29:bb:10:
         dc:99:44:4e:26:57:14:89:7c:43:79:44:ea:80:8e:a0:e7:9d:
         80:cd:17:0b:58:a2:0c:39:a4:7b:f8:af:80:63:7e:79:2a:fc:
         72:36:17:66:58:50:da:0c:09:70:4b:0d:0c:06:97:14:cd:2e:
         7b:fc:7a:17:e4:5b:95:73:f5:a3:0f:e4:29:2d:db:28:55:93:
         7f:37:63:98:b9:a6:e4:65:c0:ba:0f:5a:1b:4b:71:d7:81:db:
         00:33:dc:91:af:30:1e:4a:fb:25:ce:7c:14:97:18:ce:50:58:
         4f:7a:85:e9:af:54:4e:8d:7b:5e:53:15:53:81:a6:2f:c9:2b:
         b4:2d:8e:84:72:47:a0:07:2d:46:c4:96:ea:b2:d8:e2:33:c0:
         8a:d4:57:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:58 2024 by rpki-client on console-fra.rpki-client.org