Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/B2790B3C2FB111EB89A04D37C4F9AE02.roa
File:                     B2790B3C2FB111EB89A04D37C4F9AE02.roa (raw, json)
Hash identifier:          cbi8nIiFu7yZyu87usC4sqYN/jQpg6I6lG7FiVSdUVI=
Subject key identifier:   4F:A6:2C:58:5A:20:46:4A:31:38:CD:97:C7:E3:A4:77:A9:54:9F:4F
Certificate issuer:       /CN=A91F1029/serialNumber=832CC056E23E388AE3781A520BDD91169636E59B
Certificate serial:       06B0
Authority key identifier: 83:2C:C0:56:E2:3E:38:8A:E3:78:1A:52:0B:DD:91:16:96:36:E5:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/B2790B3C2FB111EB89A04D37C4F9AE02.roa
Signing time:             Fri 06 Sep 2024 23:11:58 +0000
ROA not before:           Fri 06 Sep 2024 23:11:58 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     136977
IP address blocks:        103.141.210.0/24 maxlen: 24
                          2001:df1:1080::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.crl
                          rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1712 (0x6b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1029/serialNumber=832CC056E23E388AE3781A520BDD91169636E59B
        Validity
            Not Before: Sep  6 23:11:58 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66db8c3d-f3b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ba:26:73:95:f4:69:c0:26:ec:68:39:e2:6d:
                    ab:0b:c6:12:6b:1f:ef:14:64:0e:51:f5:7c:42:ac:
                    cd:39:2c:bf:13:23:51:d6:25:3f:9f:f6:73:ae:2f:
                    a5:17:30:3f:e9:2b:c0:ec:36:62:87:bc:f6:6d:1e:
                    b9:ea:b7:9d:e2:59:83:b7:a7:ab:33:6f:8d:36:dd:
                    25:2a:82:f6:85:07:ef:ba:a7:71:99:19:75:c8:70:
                    cb:99:2c:4a:10:8f:dd:13:46:b5:f6:c0:2c:17:72:
                    a7:33:2d:b9:66:ca:cb:8d:fe:1a:9e:4e:db:d7:c2:
                    e0:91:f9:43:f4:37:75:c4:ad:1e:4b:43:96:a2:51:
                    69:76:3d:23:c8:a0:70:e0:da:6e:3e:43:67:3c:da:
                    c0:1e:5e:59:4b:00:fc:79:ca:be:f1:56:71:98:c0:
                    04:39:9d:83:e7:cf:e9:8f:82:6c:72:fd:f0:5e:4c:
                    00:b3:48:68:1a:c8:0a:c3:a1:59:2d:89:d2:8e:55:
                    cf:ee:70:af:5f:d6:03:9d:c7:4f:f8:89:65:1b:61:
                    8e:8b:54:ee:83:d1:99:68:8c:2c:32:4a:44:01:9d:
                    fe:ea:c6:6b:ae:39:b2:df:ee:51:53:9e:7a:f7:70:
                    73:6e:3a:75:af:27:07:6c:73:87:02:74:be:4c:aa:
                    f9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A6:2C:58:5A:20:46:4A:31:38:CD:97:C7:E3:A4:77:A9:54:9F:4F
            X509v3 Authority Key Identifier:
                keyid:83:2C:C0:56:E2:3E:38:8A:E3:78:1A:52:0B:DD:91:16:96:36:E5:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/B2790B3C2FB111EB89A04D37C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.210.0/24
                IPv6:
                  2001:df1:1080::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:66:9c:c7:60:de:ab:49:e5:42:ad:5e:eb:52:60:dc:31:35:
         74:4f:c4:5b:a0:74:0c:7b:cb:d4:63:1b:38:2d:5c:29:32:8b:
         a5:4b:ec:20:d3:fe:2c:c0:d2:ab:91:f4:24:ae:f5:01:3f:7d:
         68:0f:7c:ec:e8:2d:99:ac:95:5d:1f:01:b4:c9:bd:5e:e0:81:
         f8:9f:ba:55:7d:29:f1:85:a9:91:e0:f2:48:a5:04:90:98:ae:
         6e:23:90:26:b1:fd:0a:dc:33:33:8d:da:df:58:5a:2a:4b:fe:
         96:37:32:62:f3:8d:9e:10:04:78:33:27:6a:88:09:7d:35:19:
         16:59:58:77:b9:17:a5:62:76:d9:79:50:94:dc:b2:44:4a:3f:
         8f:48:ee:f7:08:40:7f:44:cc:9b:7f:ba:8e:19:64:91:7d:a6:
         f9:8c:9d:54:01:ca:05:ee:d0:29:7f:ae:cd:ec:af:0a:e0:a2:
         87:2d:d0:92:d6:d9:9f:38:cf:da:e5:0e:3d:93:8d:01:33:76:
         07:ec:e4:76:52:88:2c:3f:31:86:3a:f5:77:cc:87:29:b7:f5:
         28:8c:5a:d3:c6:c8:24:c7:21:a2:42:49:b6:9e:2b:14:98:b5:
         8b:8b:2a:cb:ce:d8:37:5a:0d:e3:da:59:d1:72:c6:6d:eb:0f:
         3a:31:c4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:14 2024 by rpki-client on console-fra.rpki-client.org