Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/87EEC61CCB4111ED8A4D796BC4F9AE02.roa
File:                     87EEC61CCB4111ED8A4D796BC4F9AE02.roa (raw, json)
Hash identifier:          rKLrttUEooqqo4Xu4KvSMb8N9FyLtqpX00NFmZPM+iA=
Subject key identifier:   03:20:46:46:73:AD:49:AB:07:18:65:B7:D5:03:2B:20:E6:2D:24:9A
Certificate issuer:       /CN=A91F5246/serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B
Certificate serial:       013D
Authority key identifier: 4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/87EEC61CCB4111ED8A4D796BC4F9AE02.roa
Signing time:             Mon 07 Oct 2024 06:27:21 +0000
ROA not before:           Mon 07 Oct 2024 06:27:21 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     147303
IP address blocks:        103.29.180.0/24 maxlen: 24
                          103.29.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl
                          rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:32:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5246/serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B
        Validity
            Not Before: Oct  7 06:27:21 2024 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=67037f49-fbf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ac:bb:f0:3a:cb:8c:4d:53:55:f1:d3:51:e5:
                    b5:89:ce:f5:bc:0d:a2:71:e4:bf:99:c5:79:fa:2d:
                    cc:e0:40:56:71:d3:da:fc:30:18:c2:ed:e0:2a:9f:
                    8c:40:7c:3d:7c:90:51:bf:41:46:f5:70:2d:ae:1f:
                    a5:e4:c4:8b:67:41:db:0d:22:2a:ca:04:e2:fa:11:
                    2a:87:64:c9:4f:dd:26:44:0d:48:e9:5a:5f:52:30:
                    b5:d0:08:f2:e5:8f:fc:28:30:6a:d9:57:3b:ca:a2:
                    50:5a:d6:93:6f:90:02:a3:fc:29:ce:8b:61:4a:28:
                    2e:df:bc:62:26:47:8f:58:d6:64:24:fe:56:16:66:
                    ad:d0:a9:b8:86:d5:e8:7c:28:e0:64:87:89:25:e1:
                    73:45:6b:d1:84:2c:b1:49:56:d3:fc:49:23:0f:12:
                    b8:58:31:41:88:8c:21:f6:dc:06:0b:7f:30:c4:dd:
                    bf:33:69:17:b8:ec:40:6a:2d:a0:fa:75:5e:4f:62:
                    41:a9:17:17:01:09:92:1a:4f:55:ce:ca:71:e3:55:
                    a4:66:8e:7f:9a:19:e2:75:37:d9:ed:99:d8:a2:a2:
                    f5:47:3a:e4:b8:87:12:c9:83:3d:03:72:ec:28:0a:
                    94:d4:2a:6f:36:fd:6e:93:1f:fd:89:0a:30:5a:ac:
                    6b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:20:46:46:73:AD:49:AB:07:18:65:B7:D5:03:2B:20:E6:2D:24:9A
            X509v3 Authority Key Identifier:
                keyid:4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/87EEC61CCB4111ED8A4D796BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.29.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:32:93:72:14:b1:df:f2:a1:f1:01:b6:85:58:af:0f:7b:2a:
         04:47:7f:44:a9:36:96:5a:9d:44:a3:06:49:04:18:9b:53:9d:
         dd:b3:d7:c3:ed:98:9a:da:dd:48:ef:9a:4d:72:40:20:bb:a8:
         40:f9:02:d2:4a:c9:d5:7f:b8:93:6b:14:fd:7b:62:60:d6:ce:
         69:de:57:0d:f7:d2:a4:b9:f0:4d:c3:5b:22:32:fc:a9:69:c8:
         04:25:2d:75:97:93:1f:8e:ec:b4:c1:70:57:e2:fb:9b:b9:34:
         2b:c0:74:1d:16:1a:b1:66:73:e3:27:69:72:ef:a2:19:57:a0:
         33:a1:cb:95:2e:48:a0:93:b6:37:2b:09:c6:73:22:f0:b6:1c:
         0d:6d:3f:da:8a:e8:fc:c6:d8:10:79:e8:21:c4:9f:a2:c0:1e:
         4f:f8:b7:14:78:fe:56:b1:c7:91:39:3d:21:70:17:2d:ad:6d:
         c4:5c:99:d7:25:40:b0:30:21:e4:6b:ef:7b:09:f4:3e:71:ec:
         ca:da:ac:3f:d5:ba:6e:a3:7b:54:ab:5b:fa:a0:d5:9b:96:fc:
         da:e5:9a:59:14:f3:36:7f:19:30:19:7f:62:5d:7c:8e:43:9c:
         d8:49:b5:24:4f:a0:9a:68:cf:3b:22:2c:c3:7f:37:2e:dc:d8:
         96:50:dc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:00 2024 by rpki-client on console-fra.rpki-client.org