Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/6084E4F217E811EC8A22700DC4F9AE02.roa
File:                     6084E4F217E811EC8A22700DC4F9AE02.roa (raw, json)
Hash identifier:          /RmAWe3bm7uFqeMNb4uaNurOTOXrUZgieKkDs6gSDuQ=
Subject key identifier:   ED:54:E9:09:7B:F3:18:C0:5F:DA:ED:A8:E1:B5:17:DE:0D:DA:1D:E5
Certificate issuer:       /CN=A91E8B44/serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107
Certificate serial:       0480
Authority key identifier: 21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/6084E4F217E811EC8A22700DC4F9AE02.roa
Signing time:             Fri 25 Oct 2024 00:15:00 +0000
ROA not before:           Fri 25 Oct 2024 00:15:00 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     56264
IP address blocks:        103.173.100.0/24 maxlen: 24
                          103.173.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl
                          rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1152 (0x480)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8B44/serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107
        Validity
            Not Before: Oct 25 00:15:00 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=671ae304-4548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f4:a9:a3:1b:29:e0:29:b8:c5:17:e0:e2:ef:
                    70:b2:95:19:ad:d6:2f:ee:54:b7:d4:b9:f9:4b:de:
                    a9:95:30:4f:98:59:1c:b7:7a:62:bf:cb:b5:8b:4a:
                    0a:f3:9c:85:9f:51:55:5d:a8:41:6e:f1:78:1e:0b:
                    eb:a9:db:f0:b4:11:10:19:5c:27:09:11:8a:dc:b5:
                    df:20:14:21:62:1e:1c:dd:53:4c:b6:01:14:02:c6:
                    ba:0a:3b:14:bd:29:97:ef:9a:f9:ad:e2:fe:ba:7e:
                    7b:ea:73:58:da:63:b7:3d:6b:30:59:f6:92:9a:9e:
                    9c:a1:01:ee:2f:6b:35:9b:1d:57:d0:37:cd:e1:b8:
                    9a:74:9e:af:be:86:e3:0e:22:d4:9f:b7:69:d4:6f:
                    24:f3:7c:e2:03:bd:58:59:e3:e0:98:c5:e4:d6:09:
                    5e:04:c3:82:27:5b:3a:23:a1:7d:fe:47:b4:1c:06:
                    4f:b3:c2:8c:d0:29:0a:37:38:32:c6:70:cd:cc:2f:
                    61:96:78:07:6c:bf:e1:9a:75:6d:f3:2c:00:c8:e3:
                    f9:78:d9:fa:97:93:ce:75:41:cc:af:4c:2c:1d:01:
                    87:30:5e:a5:5f:89:70:35:c2:49:4d:1d:6a:b4:9f:
                    88:23:b4:bb:55:5b:09:57:66:2f:4e:a1:28:d3:7d:
                    f9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:54:E9:09:7B:F3:18:C0:5F:DA:ED:A8:E1:B5:17:DE:0D:DA:1D:E5
            X509v3 Authority Key Identifier:
                keyid:21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/6084E4F217E811EC8A22700DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:d7:2b:b7:a5:50:bd:b3:d5:0a:f9:93:17:a8:ff:5a:97:f8:
         eb:80:43:9f:a1:45:e2:91:12:fe:d5:db:35:50:d4:92:23:e9:
         81:4c:c1:8c:f1:f5:e0:3c:07:50:b7:99:7f:b9:68:37:69:64:
         2a:db:96:b2:f3:87:90:eb:d1:50:85:11:0b:de:80:58:c0:aa:
         7f:f0:ac:ef:94:3c:21:b1:e9:6b:99:89:84:b3:fa:4c:9b:9b:
         39:3f:27:eb:68:93:4c:ad:9a:3d:2b:19:81:dc:c6:3d:af:1b:
         6b:eb:95:1f:d1:6f:2b:d7:a1:a9:67:0c:48:1d:f1:65:bb:97:
         44:86:b8:1f:16:c4:95:72:16:9f:49:93:f5:9d:47:0d:36:4e:
         64:50:f6:cf:cf:4d:3b:47:17:ea:70:4b:95:7e:fd:f6:57:ef:
         74:3d:eb:67:2f:9d:6e:bf:72:2c:c2:00:d9:d9:cc:c4:14:16:
         97:0d:93:57:01:4b:5d:54:39:6a:74:8f:73:df:f5:5e:48:0c:
         b7:27:91:38:a6:76:ae:e2:ca:c4:11:b9:df:84:e7:95:03:1b:
         97:32:df:b9:15:93:d3:0d:19:f1:28:25:c2:cd:b9:cf:63:3d:
         c6:84:1c:84:b4:0d:19:f9:72:5e:c7:c5:ed:7d:ee:ec:91:0d:
         e3:4b:cc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:29 2024 by rpki-client on console-ams.rpki-client.org