Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/804FEC802F6711EEB6EECA5BC4F9AE02.roa
File:                     804FEC802F6711EEB6EECA5BC4F9AE02.roa (raw, json)
Hash identifier:          3Dli7pFjerFJHZdvZGuoM+mTT8Fntf3sMb0Ui6DVQHo=
Subject key identifier:   05:75:9C:6B:A9:8E:8F:BC:3B:CC:C7:1D:53:28:2F:E0:7E:54:3F:39
Certificate issuer:       /CN=A91EE099/serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8
Certificate serial:       CD
Authority key identifier: F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/804FEC802F6711EEB6EECA5BC4F9AE02.roa
Signing time:             Mon 19 Aug 2024 05:26:50 +0000
ROA not before:           Mon 19 Aug 2024 05:26:50 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     55933
IP address blocks:        103.245.24.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl
                          rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE099/serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8
        Validity
            Not Before: Aug 19 05:26:50 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66c2d79a-79c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fe:c9:5c:73:ed:0c:fe:c1:5b:5b:12:3d:ff:
                    d1:70:75:1a:98:5f:07:a5:11:11:e1:55:43:31:ed:
                    59:c8:6f:74:6c:74:03:88:1c:68:76:b7:ef:2a:60:
                    ea:45:ee:3d:16:e2:b4:53:0f:24:96:8a:cc:29:22:
                    b6:d0:9f:b7:22:1b:02:21:e0:82:9c:37:3d:75:77:
                    ac:f8:20:48:4a:6f:5e:98:3b:a5:b5:58:49:09:98:
                    89:7a:91:f1:05:dd:7c:00:de:de:74:ef:ea:c0:6c:
                    9c:60:01:45:06:1e:0e:0a:77:47:99:a3:ca:53:0f:
                    6f:a7:63:ef:5f:dd:a2:9d:f2:ae:7f:a3:76:4c:dd:
                    93:ea:39:3a:55:38:99:88:81:44:21:af:88:a5:8a:
                    93:3b:c3:02:8e:a9:dd:40:5c:ee:2e:0f:d7:66:39:
                    a9:24:8a:88:29:68:39:5b:6f:b2:30:3a:68:5e:57:
                    83:56:20:30:d0:df:98:c1:df:f4:70:47:48:ff:52:
                    db:9a:7b:3d:e2:09:85:77:50:d2:ee:b1:ba:56:ae:
                    d4:2f:1b:58:8c:b4:7a:f3:f4:e2:1e:20:46:1e:32:
                    37:c1:0e:dc:d2:7b:91:cf:6a:b7:dd:e9:f8:42:46:
                    79:5a:dd:f3:f3:11:65:33:6e:8c:9c:6b:33:da:bb:
                    42:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:75:9C:6B:A9:8E:8F:BC:3B:CC:C7:1D:53:28:2F:E0:7E:54:3F:39
            X509v3 Authority Key Identifier:
                keyid:F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/804FEC802F6711EEB6EECA5BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:3f:83:13:ca:c1:34:ce:cf:2e:8b:29:2f:1e:40:94:52:f8:
         30:2c:61:9d:e2:02:da:a8:9c:81:56:71:74:f6:3e:4f:b0:ad:
         92:d9:5c:fd:bd:dc:19:44:d8:00:73:0d:92:2c:68:f7:44:cd:
         a0:ef:5d:5c:2b:10:47:f1:b2:5e:8a:00:de:32:6f:19:a9:4a:
         04:e7:a6:ef:77:40:79:ca:ac:cd:63:11:81:a5:80:3d:e9:1c:
         d2:c2:f7:f9:a3:80:6a:5e:89:cd:66:06:10:4b:bf:c3:c4:69:
         9b:28:4c:a0:24:c5:13:69:16:ac:bb:6a:45:b5:7a:bd:a5:bc:
         a6:98:c1:ab:3c:4c:6a:55:30:f3:9a:41:aa:13:b5:30:e5:c8:
         f8:84:d8:11:85:36:1f:40:96:45:f4:c8:c4:72:e7:d8:16:07:
         7b:d1:92:0f:ea:c1:02:df:f5:6f:5d:2c:a0:bc:62:5e:aa:20:
         24:fc:54:96:38:fe:2a:b6:36:cd:f0:f6:bb:28:79:ab:a0:16:
         9f:ee:5f:08:21:bc:4a:30:b7:78:43:37:96:6b:0b:92:dd:81:
         11:78:83:f4:2d:d4:68:ae:02:58:26:2a:c7:b5:10:47:7b:8f:
         6b:48:5d:57:55:a6:4c:6d:83:6a:b3:27:7d:6a:1f:03:1e:8c:
         a1:e5:44:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:06:08 2024 by rpki-client on console-fra.rpki-client.org