Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/280B8550FD3611EEB7932778C4F9AE02.roa
File:                     280B8550FD3611EEB7932778C4F9AE02.roa (raw, json)
Hash identifier:          k6THokNNgkgErJRrYrousZIlobYn3ymk37svdAyXZD0=
Subject key identifier:   B3:25:78:3D:A5:2F:77:F3:C7:EA:EB:FD:E1:38:A3:8E:A2:F7:ED:CB
Certificate issuer:       /CN=A91F5266/serialNumber=62D1119F188E3F7C1355F6539E06436DA268FF9D
Certificate serial:       032F
Authority key identifier: 62:D1:11:9F:18:8E:3F:7C:13:55:F6:53:9E:06:43:6D:A2:68:FF:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/280B8550FD3611EEB7932778C4F9AE02.roa
Signing time:             Tue 03 Sep 2024 02:45:30 +0000
ROA not before:           Tue 03 Sep 2024 02:45:30 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     142615
IP address blocks:        103.170.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.crl
                          rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 815 (0x32f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5266/serialNumber=62D1119F188E3F7C1355F6539E06436DA268FF9D
        Validity
            Not Before: Sep  3 02:45:30 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d6784a-19db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:db:a8:50:db:f8:37:0a:f0:35:23:d7:cd:cd:
                    4c:6f:28:20:34:70:2c:ef:6b:d7:6e:f4:b0:c7:2d:
                    c0:06:95:ed:b7:88:ba:03:15:c1:80:76:6e:86:50:
                    cd:80:3d:ab:08:1b:0d:3e:a3:dc:0f:ae:20:c6:4f:
                    82:d0:00:31:4b:24:f1:60:4c:ee:35:82:7c:4c:51:
                    71:23:51:5c:41:e1:1d:5d:8a:49:05:0b:c0:4e:0d:
                    2c:fe:54:8c:58:7b:14:1e:3d:d2:13:2e:2e:ad:53:
                    a1:63:72:f6:d5:34:52:d7:06:1d:d6:4a:6b:75:d2:
                    83:9d:fc:a3:34:19:d7:d6:d0:86:5f:8a:26:88:da:
                    26:2e:76:93:2f:1a:c5:28:76:e4:9e:1f:fd:1f:f3:
                    ae:1c:7e:29:6e:1b:30:cc:26:50:24:9c:f2:f1:e8:
                    29:7e:3d:43:76:82:82:84:1c:25:d3:75:2a:9d:5a:
                    c0:52:b2:42:78:47:ac:d4:73:2e:42:05:8a:66:fa:
                    4e:4a:2e:de:46:da:62:8d:57:3c:b4:4e:e8:a0:50:
                    2b:7e:17:49:f5:25:24:32:ea:e4:b0:30:0a:67:1a:
                    35:e8:cc:35:93:03:6a:a3:91:ea:10:46:19:a1:eb:
                    28:24:a1:23:be:35:4b:43:9d:c6:a4:e8:94:82:bd:
                    08:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:25:78:3D:A5:2F:77:F3:C7:EA:EB:FD:E1:38:A3:8E:A2:F7:ED:CB
            X509v3 Authority Key Identifier:
                keyid:62:D1:11:9F:18:8E:3F:7C:13:55:F6:53:9E:06:43:6D:A2:68:FF:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/280B8550FD3611EEB7932778C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:25:f3:ac:9a:d2:0b:4a:e3:48:81:f5:92:ff:a8:56:3e:49:
         54:26:87:66:2c:d5:a5:21:ea:24:5f:5b:bf:0c:1b:b5:03:30:
         92:5c:28:f0:07:6c:ed:ca:c3:77:d6:92:38:08:f1:b9:95:d9:
         d0:c3:5e:ad:a8:71:1c:92:8a:07:d2:0b:72:98:75:75:81:2b:
         a9:e7:b3:9e:05:b5:ef:9f:ca:01:9a:ef:e5:2b:f3:8a:b4:e3:
         ef:42:fc:5e:af:c3:cd:e7:d4:6b:6d:f6:60:8c:31:72:1f:d9:
         ad:ae:a5:09:99:49:6e:aa:9e:08:ff:66:94:ac:0a:a0:f4:bd:
         9a:49:63:ee:85:1b:2f:a1:65:82:77:f1:bf:e1:3d:68:01:98:
         52:98:e9:3f:88:1f:40:cf:1e:b9:b9:af:0e:67:11:1f:cd:42:
         08:d0:88:e0:17:f6:ca:d7:21:2a:0e:04:61:10:03:2f:27:eb:
         e6:bf:c0:ce:ac:48:72:48:fc:d6:f6:03:35:8a:df:eb:9e:1e:
         be:c4:f0:00:57:82:b3:25:65:98:3f:fd:67:05:8a:7c:dd:a1:
         09:94:52:f7:51:25:27:cc:ee:c1:1b:c3:76:85:bd:0e:81:e4:
         44:7e:75:9d:72:74:00:ea:fd:33:95:b3:8f:86:6b:e6:00:d8:
         f4:41:7c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:30 2024 by rpki-client on console-ams.rpki-client.org