Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/9BA13212344C11ED8F22CB70C4F9AE02.roa
File:                     9BA13212344C11ED8F22CB70C4F9AE02.roa (raw, json)
Hash identifier:          dSvt8WCJ5sX7UlCP0MxYFfwdeu8sA3Ot5FCk8B7masI=
Subject key identifier:   82:81:42:FB:85:13:E3:49:0B:40:FF:F1:1B:B4:DA:0D:DF:88:A2:BA
Certificate issuer:       /CN=A91EAD63/serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386
Certificate serial:       01B0
Authority key identifier: 77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/9BA13212344C11ED8F22CB70C4F9AE02.roa
Signing time:             Thu 07 Nov 2024 01:54:55 +0000
ROA not before:           Thu 07 Nov 2024 01:54:55 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     138357
IP address blocks:        103.131.80.0/23 maxlen: 23
                          103.131.80.0/24 maxlen: 24
                          103.131.81.0/24 maxlen: 24
                          2001:df1:47c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl
                          rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 432 (0x1b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAD63/serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386
        Validity
            Not Before: Nov  7 01:54:55 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=672c1def-a5eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:dd:0f:94:d2:94:14:13:80:13:b5:34:aa:1e:
                    9e:05:ca:65:8d:56:ae:35:10:ae:34:0d:e6:49:48:
                    a2:b5:72:02:ce:2e:19:4e:5d:15:31:51:ed:3d:e7:
                    64:25:d4:9f:d8:a5:8c:de:bf:f0:e5:9a:21:b4:40:
                    b3:a6:8a:96:d4:37:c0:34:01:a8:19:ff:10:2f:45:
                    50:50:f2:04:38:5d:89:3c:8d:d8:be:c9:b3:2c:34:
                    9a:ae:67:69:f0:57:48:fa:b5:7d:e3:ac:c6:65:20:
                    73:c5:21:fd:32:9e:28:b1:4c:5a:f1:e0:07:32:82:
                    82:8b:b2:a9:1a:bf:b8:29:c7:a4:a6:92:7d:cf:3d:
                    2d:3b:0c:a7:0d:88:cd:c6:ea:f9:90:5a:7f:7e:87:
                    5c:fb:b7:d2:c3:b1:1e:d3:96:ce:24:8e:32:c6:9a:
                    ac:19:f2:b1:4b:13:20:62:78:d0:50:bb:61:2c:76:
                    71:9f:3e:89:73:6d:78:50:55:e1:75:73:f2:10:f9:
                    6f:ca:49:15:e5:ee:27:c4:f5:78:fd:37:03:ae:4a:
                    7c:d8:36:2d:4e:73:cb:24:42:aa:46:87:36:a1:80:
                    89:de:cb:29:fe:9f:7a:e5:74:bc:43:9a:47:be:11:
                    46:f1:e3:0a:27:60:f0:be:69:1c:6c:48:3e:39:3f:
                    f1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:81:42:FB:85:13:E3:49:0B:40:FF:F1:1B:B4:DA:0D:DF:88:A2:BA
            X509v3 Authority Key Identifier:
                keyid:77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/9BA13212344C11ED8F22CB70C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.80.0/23
                IPv6:
                  2001:df1:47c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:06:e4:eb:22:12:9a:3f:af:fe:2f:4f:7a:df:4f:91:9b:77:
         5f:98:b3:7f:90:0d:eb:e3:e0:6a:34:82:4f:a2:3a:e4:6a:07:
         09:b1:b6:79:74:40:62:e4:78:d6:64:19:44:5f:cd:b9:7b:90:
         48:ed:b9:12:50:2b:3c:77:fe:13:d3:92:6a:bc:eb:0c:d1:be:
         ab:a4:25:ae:91:24:73:f9:d9:e7:6c:e7:bd:63:e3:a6:a4:c4:
         38:71:8f:a2:17:22:dc:f7:aa:59:3d:42:e6:2e:c3:2b:16:59:
         1e:9b:35:f1:f2:39:e0:9a:28:88:9b:d7:8c:42:49:78:16:5d:
         b8:eb:e0:9f:23:fc:40:08:63:a3:42:a4:7d:85:8c:ed:66:6d:
         50:ec:06:27:86:fd:2a:d6:57:c8:3b:39:1c:98:e7:7d:0d:8a:
         79:c3:2c:f1:d0:71:75:54:8f:3b:04:61:4e:16:55:70:41:11:
         44:e0:df:35:c3:cb:ba:62:c1:07:9a:4a:9a:e1:32:34:d6:ae:
         72:f6:37:da:51:d1:a0:ee:db:da:95:11:28:39:c5:40:9f:24:
         fe:55:24:e0:4a:60:13:db:de:d7:46:91:2c:2a:ba:d1:51:2f:
         82:0b:ac:0d:03:97:73:fc:21:a6:a6:08:55:9f:6e:eb:78:ef:
         36:14:6b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:49 2024 by rpki-client on console-fra.rpki-client.org