Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/A60805D653EB11EEA1F43363C4F9AE02.roa
File:                     A60805D653EB11EEA1F43363C4F9AE02.roa (raw, json)
Hash identifier:          Z62331QXn+f9H4+WNs003qjSugQvwDu9f8FfBukZEH0=
Subject key identifier:   1A:AF:42:0D:DD:54:28:B5:FB:C1:20:F8:A6:F3:2F:15:AF:EC:29:56
Certificate issuer:       /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Certificate serial:       02E3
Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/A60805D653EB11EEA1F43363C4F9AE02.roa
Signing time:             Thu 07 Nov 2024 01:14:41 +0000
ROA not before:           Thu 07 Nov 2024 01:14:41 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     30103
IP address blocks:        103.122.166.0/24 maxlen: 24
                          103.122.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
                          rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 739 (0x2e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
        Validity
            Not Before: Nov  7 01:14:41 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=672c1481-60c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:63:d0:d3:41:60:04:27:4f:46:79:58:79:fc:
                    58:2e:a5:ab:32:6f:38:23:96:e0:3f:98:58:21:3a:
                    6e:10:40:75:09:bd:d6:96:08:2a:6d:6f:81:bd:ed:
                    36:5e:0b:a1:9d:5b:fc:28:61:45:db:19:1b:fc:b8:
                    58:69:96:db:dc:2a:b4:5f:ff:d3:5c:de:97:fe:d9:
                    39:65:e6:de:86:4e:b9:0e:8a:a2:26:59:90:05:46:
                    d4:25:1d:2a:03:d2:b6:18:12:08:0e:25:38:7e:5a:
                    e8:47:31:a4:25:53:1c:3e:71:4e:e6:e1:20:a4:2f:
                    d0:9d:56:1d:60:0e:80:b2:93:ba:b2:4b:aa:3a:34:
                    71:05:40:ef:d2:fd:03:52:71:57:e7:c7:13:d6:5c:
                    51:f8:01:fa:57:4e:7a:ce:ac:05:be:f9:e5:2b:57:
                    9c:ac:5c:4c:ff:90:91:77:95:7f:24:54:a7:ff:8c:
                    5e:fa:00:da:06:89:cf:9c:67:1d:31:44:8a:c5:0e:
                    a8:d2:75:02:8e:0c:ae:2d:b0:de:e1:dc:a7:00:fa:
                    55:00:c3:6a:bc:18:a2:8b:1f:d2:5b:df:55:99:06:
                    48:88:21:0e:b5:97:db:dd:d1:3a:a2:f4:22:60:bd:
                    9b:a7:c9:7d:24:45:ed:d8:5a:27:c2:98:b9:d8:d0:
                    3e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AF:42:0D:DD:54:28:B5:FB:C1:20:F8:A6:F3:2F:15:AF:EC:29:56
            X509v3 Authority Key Identifier:
                keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/A60805D653EB11EEA1F43363C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:16:ef:62:86:59:74:ed:b0:04:a7:54:fa:bc:7c:13:36:f4:
         9d:14:02:47:20:fd:00:82:e8:bb:1b:27:89:83:fd:c5:0e:94:
         55:47:c0:4e:f7:a3:09:b5:b3:b8:28:7c:df:ef:ca:c7:d7:09:
         e9:19:d5:37:03:1d:ae:d3:7a:7c:de:d7:8f:a0:0f:35:24:5a:
         6e:9b:d0:2c:c5:0f:b6:5f:ee:dc:5f:d0:f0:26:7c:7f:b0:4a:
         ac:d5:bb:6f:d1:01:3e:d4:03:41:67:8b:96:d3:57:7d:c4:77:
         6f:b9:23:ca:15:a9:8d:c0:df:ea:4b:6c:4f:0e:a5:1f:7f:ea:
         5a:9f:f3:a9:be:3a:a2:1f:10:4a:81:82:20:1b:25:0c:fc:9c:
         66:2a:4e:f9:b3:91:58:c7:82:63:48:12:07:c0:00:85:af:7c:
         fa:54:e4:0e:c6:df:fe:13:c9:34:c6:5b:4a:45:e8:a1:12:af:
         2a:3d:a8:ca:51:6e:d4:dd:18:e8:3a:b4:67:43:85:90:9e:3a:
         78:56:cb:42:87:85:54:70:9e:9a:ae:84:5f:92:7b:14:08:27:
         63:0f:9e:03:0a:c7:8d:e7:fa:c8:9e:56:99:81:66:57:60:01:
         d9:b0:75:51:6d:2b:3d:d6:4b:e7:a0:0a:27:d0:30:46:fc:c5:
         07:94:86:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:12:07 2024 by rpki-client on console-fra.rpki-client.org