Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/E70CF0985A0511EF92608A5AC4F9AE02.roa
File:                     E70CF0985A0511EF92608A5AC4F9AE02.roa (raw, json)
Hash identifier:          EZ1VbcZHsoMz7Sd9EvSQ3My9clfOZzps00wK3EeAjnE=
Subject key identifier:   72:A5:FC:19:36:1E:16:9D:A6:2B:EE:D7:7C:36:84:C8:AE:FC:83:36
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       355A
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/E70CF0985A0511EF92608A5AC4F9AE02.roa
Signing time:             Tue 29 Oct 2024 06:46:13 +0000
ROA not before:           Tue 29 Oct 2024 06:46:13 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     151734
IP address blocks:        103.68.120.0/24 maxlen: 24
                          103.230.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 14:47:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13658 (0x355a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Oct 29 06:46:13 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=672084b5-f753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:cb:95:fc:a9:b8:2b:75:c6:43:ca:38:ce:00:
                    6e:86:b7:69:c7:51:55:c5:63:bc:38:84:42:8a:cf:
                    49:08:4d:ef:3a:0c:e1:e1:a0:ea:5b:f8:02:2d:6f:
                    53:7a:29:c5:ae:c1:38:10:9a:d4:3d:86:f3:d9:0f:
                    55:61:c7:df:7b:16:05:9e:c0:83:06:59:9a:38:56:
                    8d:f3:5c:b9:f4:a9:61:8a:a1:9e:cf:72:14:94:b1:
                    db:5e:e8:08:ea:75:bd:53:54:76:b9:4d:23:8b:e5:
                    94:98:87:51:8b:a8:c7:94:34:e3:0c:a9:3b:76:c4:
                    72:c9:a3:03:07:41:36:30:31:b0:88:f4:bc:e7:96:
                    a7:da:ab:b1:74:69:a3:86:7a:f1:55:c2:29:ef:fe:
                    ea:25:f6:72:a4:1d:d0:9b:8d:f3:54:32:0c:23:d2:
                    14:0e:c6:48:a8:3f:c6:b2:81:e5:9a:4b:07:fb:be:
                    cb:6c:e8:d4:b0:ae:2a:68:88:57:50:73:9f:48:9c:
                    12:48:14:52:63:af:59:e9:aa:0d:dc:30:54:85:07:
                    05:c4:08:cb:90:32:a7:0c:29:9f:cd:d8:cb:60:58:
                    3e:f6:14:0c:20:f8:e7:eb:ff:f1:29:d8:62:3d:d6:
                    83:f1:93:fd:b2:4a:74:b2:fb:d3:b1:68:45:96:8c:
                    ab:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A5:FC:19:36:1E:16:9D:A6:2B:EE:D7:7C:36:84:C8:AE:FC:83:36
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/E70CF0985A0511EF92608A5AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.120.0/24
                  103.230.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:d1:35:fc:71:6d:22:49:4a:e4:7d:06:b0:11:76:cf:0c:e2:
         7c:89:61:8d:0e:eb:b3:ad:0c:d4:cb:4d:a5:8a:cc:b2:e1:e6:
         bd:4d:1c:93:9d:37:e8:cf:c7:7d:62:e1:13:de:71:7d:35:dc:
         9e:dc:9d:5a:ec:0c:b0:4e:05:b0:dd:4c:2c:dd:15:00:2a:76:
         d4:0b:72:b2:45:b5:e9:2b:fc:d1:1c:a1:d3:ac:02:f4:89:d7:
         45:25:88:a5:5b:bb:51:cb:bf:a6:e7:7e:17:19:d9:bf:e6:ec:
         0b:5c:04:47:d8:51:0a:d4:04:99:24:4e:bb:63:39:8a:a4:b8:
         6d:6d:06:66:23:6f:27:f0:ac:ec:23:bf:77:ef:58:e4:bd:db:
         57:e3:a7:57:ef:f7:c3:9f:49:30:51:e5:db:e1:cb:af:e7:68:
         97:32:b4:fe:2c:84:99:a5:77:19:d8:63:99:85:c1:80:97:20:
         bd:b6:21:39:48:e3:70:45:fb:ed:f9:bb:c8:5c:9e:ac:6a:6e:
         5d:04:78:cd:55:ae:b3:93:ab:dc:a2:e9:70:fd:01:e5:01:5c:
         44:e1:80:96:21:03:06:9a:1a:b6:02:c9:9c:51:4c:a8:c0:e0:
         0c:1a:61:0a:af:5b:77:6e:63:06:12:b6:43:70:86:68:5e:91:
         aa:a4:a3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:24:58 2024 by rpki-client on console-ams.rpki-client.org