Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/7A27A6E45FDB11EBA5C9EA7CC4F9AE02.roa
File:                     7A27A6E45FDB11EBA5C9EA7CC4F9AE02.roa (raw, json)
Hash identifier:          HPFeGwKq86ZcwbWrB7sqcvfz9Xbe89k8mMFhGyrTd2o=
Subject key identifier:   D7:8C:3E:B1:2D:10:EF:F5:05:4A:4C:D8:71:08:FF:B8:9B:5A:6F:06
Certificate issuer:       /CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Certificate serial:       0603
Authority key identifier: 86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/7A27A6E45FDB11EBA5C9EA7CC4F9AE02.roa
Signing time:             Wed 01 May 2024 00:32:57 +0000
ROA not before:           Wed 01 May 2024 00:32:57 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     134599
IP address blocks:        103.136.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
                          rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1539 (0x603)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
        Validity
            Not Before: May  1 00:32:57 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66318db9-6728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cd:7b:e5:75:87:9b:dc:0f:c7:81:a6:d6:89:
                    e7:ed:08:6d:f9:4d:0f:b3:6c:e4:eb:92:88:20:94:
                    c5:a0:60:9c:db:95:f5:b1:b9:5a:42:a2:e0:bb:93:
                    52:b9:e1:ff:63:b6:b7:68:e2:30:e7:c9:23:27:bf:
                    e5:69:4f:23:40:1b:e9:da:2e:0b:8c:e1:0c:3c:0e:
                    a1:9e:2f:0b:50:a7:9a:bb:43:7b:e2:0e:1b:4c:42:
                    f2:15:48:d1:e1:14:a5:e3:05:c0:e8:d4:4f:b3:f4:
                    fa:a3:8a:91:6e:b2:5f:4a:2e:a9:d4:97:d2:56:f1:
                    09:89:9c:ad:aa:79:6d:90:ec:ec:ea:02:e8:74:05:
                    08:c8:9a:72:dc:e0:be:41:02:de:ea:1d:06:fe:58:
                    72:d5:25:ca:5f:51:af:11:3c:5b:c0:8d:46:6a:58:
                    a3:70:fe:15:5d:23:bc:1d:a3:bb:22:6d:ee:80:20:
                    21:75:e0:33:b2:70:64:dc:37:8b:d4:c1:96:3d:51:
                    cf:27:86:32:db:ba:54:8a:7d:76:cd:9c:6b:b3:e2:
                    bb:9d:73:55:be:76:ce:3f:02:af:99:96:a7:25:b5:
                    3e:bd:be:bc:e7:5b:d8:a9:0b:69:1f:a3:d8:af:ae:
                    f8:6f:87:71:de:d3:f7:bc:b4:5d:42:25:54:66:91:
                    cf:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8C:3E:B1:2D:10:EF:F5:05:4A:4C:D8:71:08:FF:B8:9B:5A:6F:06
            X509v3 Authority Key Identifier:
                keyid:86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/7A27A6E45FDB11EBA5C9EA7CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:38:78:ad:9f:83:4a:13:53:9a:35:08:82:a7:e5:8b:fa:97:
         17:44:61:bc:f1:c5:48:c4:e2:df:5c:53:88:b7:84:7a:d6:3b:
         11:9a:a5:d8:9c:92:80:30:e2:06:7a:1d:01:8a:54:0c:00:54:
         07:ec:33:ba:2d:3c:7d:fd:a8:59:a7:eb:66:18:c0:b5:5a:45:
         2a:e6:ef:c5:ff:4c:ce:c0:98:22:30:4c:98:25:4e:90:46:31:
         f8:55:d4:76:31:18:37:61:f3:f9:d3:3c:96:c1:88:98:bc:20:
         07:07:40:07:4a:b1:7a:48:ce:d4:db:f3:5f:6b:2b:48:4c:8a:
         7c:d1:cf:29:e7:57:2d:d6:9b:a5:e9:80:b1:4f:10:19:35:fc:
         b2:29:08:63:7e:3f:fb:97:ff:15:ed:a0:2b:26:b9:2d:23:92:
         24:63:ac:77:05:22:17:8d:84:63:10:a7:02:f1:01:83:d7:f3:
         b7:22:c4:aa:95:ed:54:bf:8b:52:4a:22:e6:a6:aa:5a:fc:0f:
         31:aa:10:8a:b8:c4:08:26:80:b2:58:eb:19:74:99:cc:d6:b8:
         15:b9:36:44:d9:1c:13:66:6c:81:fa:ff:ac:7a:44:1e:ea:2f:
         17:d4:31:fc:35:a9:32:70:df:1e:f5:84:e1:90:fd:9f:e4:b9:
         4e:69:bc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:53 2024 by rpki-client on console-ams.rpki-client.org