Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/8504C794D12411EBAD06CD48C4F9AE02.roa
File:                     8504C794D12411EBAD06CD48C4F9AE02.roa (raw, json)
Hash identifier:          uMrM22xDpwTeMGgiGogguGB15IQuDVpTwtupOlN4TQA=
Subject key identifier:   EA:93:28:A8:D5:9E:8C:00:A1:03:21:85:E0:CA:8F:85:D6:A2:5E:87
Certificate issuer:       /CN=A91DF55D/serialNumber=60DC375DAACC9781BB702E03882A325FEBBFE9B4
Certificate serial:       0493
Authority key identifier: 60:DC:37:5D:AA:CC:97:81:BB:70:2E:03:88:2A:32:5F:EB:BF:E9:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/8504C794D12411EBAD06CD48C4F9AE02.roa
Signing time:             Thu 21 Dec 2023 01:13:19 +0000
ROA not before:           Thu 21 Dec 2023 01:13:19 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     138505
IP address blocks:        103.160.252.0/23 maxlen: 23
                          103.160.252.0/24 maxlen: 24
                          103.160.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1171 (0x493)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF55D/serialNumber=60DC375DAACC9781BB702E03882A325FEBBFE9B4
        Validity
            Not Before: Dec 21 01:13:19 2023 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=6583912f-af9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c8:e2:74:44:3b:22:73:d1:37:82:47:dc:78:
                    e6:10:95:34:d9:60:31:eb:00:23:e8:2c:a9:8b:70:
                    30:5c:b7:a2:d3:32:65:b7:9b:01:05:9e:57:f6:8c:
                    6c:e2:72:8b:08:25:f5:8a:87:0d:60:bf:ae:17:cf:
                    ca:f9:33:e8:e5:fe:1e:35:e8:5c:0a:36:c5:19:3a:
                    48:0c:c6:2c:63:24:50:09:7a:ca:b3:93:3c:76:9d:
                    74:b6:e8:1e:3e:3d:d0:70:db:11:46:65:6d:b8:c7:
                    b1:01:77:9d:f1:49:5e:8f:c4:76:a7:4c:cf:c2:65:
                    66:a9:72:fb:c5:f6:46:c9:14:62:32:7c:1a:84:e8:
                    e9:5c:d8:78:dc:ab:1c:f4:9c:dd:2f:40:c3:46:4c:
                    31:5e:b7:8a:76:9b:7b:57:65:bd:e2:ab:e5:f0:f1:
                    a9:5c:47:23:70:c2:06:0c:39:8f:72:2f:c3:3a:b7:
                    e9:36:02:de:a6:79:5b:c4:57:4e:f3:00:1c:85:0d:
                    0f:ae:e7:ff:ec:2e:8a:91:3d:e8:60:ca:fc:ac:b9:
                    6b:88:de:b0:6d:ba:46:07:e5:98:bc:57:d1:bc:e0:
                    1b:2f:51:ce:30:8a:49:54:d2:08:3b:30:3b:3a:0e:
                    96:31:32:30:38:86:2c:f9:33:1a:60:6d:e7:ad:ff:
                    e2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:93:28:A8:D5:9E:8C:00:A1:03:21:85:E0:CA:8F:85:D6:A2:5E:87
            X509v3 Authority Key Identifier:
                keyid:60:DC:37:5D:AA:CC:97:81:BB:70:2E:03:88:2A:32:5F:EB:BF:E9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/8504C794D12411EBAD06CD48C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:84:f1:b5:5f:c8:c8:fe:14:bf:c9:5b:11:c2:1a:a2:cf:77:
         1e:24:f8:31:6a:5f:e6:39:ff:06:3a:42:78:c8:2b:40:37:3c:
         ba:a0:fb:2e:ce:d8:61:77:79:ba:62:06:c1:8b:15:42:c1:cb:
         34:06:a0:e0:5a:19:6c:76:51:34:f3:cd:0d:46:cf:42:64:c9:
         b5:0d:fa:01:6d:d5:3c:dc:b1:c1:a4:7b:22:75:e4:e1:2e:88:
         e4:61:65:b5:57:ad:5e:9a:76:d3:16:0d:bb:6a:80:96:08:2d:
         d6:9c:db:79:98:33:8c:ca:43:d5:3e:7c:a9:30:85:d8:65:a8:
         a6:cb:43:fb:25:e3:30:11:50:c0:b6:9a:cd:9b:c6:6d:92:82:
         34:24:79:1c:2a:da:82:f9:03:e4:4b:4b:e2:5c:f8:a1:61:c9:
         51:d3:65:1a:e6:77:34:e3:a6:22:11:c8:86:3a:02:22:f4:f4:
         ed:a0:a2:42:ac:cd:33:d0:7f:c5:6a:a9:45:49:d0:27:a7:dd:
         57:2a:16:d1:d5:23:92:37:e5:1f:17:f2:84:80:85:b3:67:bd:
         74:a9:e1:2d:eb:ab:c2:e6:31:94:ef:55:56:f4:58:91:28:25:
         92:02:14:c8:36:51:e5:3e:46:02:4b:2f:d4:41:db:7d:ff:e7:
         4e:0a:f2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:38 2024 by rpki-client on console-fra.rpki-client.org