Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/813F208AE5E611E9A31D0F15C4F9AE02.roa
File:                     813F208AE5E611E9A31D0F15C4F9AE02.roa (raw, json)
Hash identifier:          TkTv3Z7gNpifQ4P5rE0+fJOw+J2G+8lPdPOcWNUUfVw=
Subject key identifier:   5C:20:FB:E5:94:6A:61:8A:24:7C:F1:80:AA:07:93:01:3A:CA:AE:BF
Certificate issuer:       /CN=A91F59A6/serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1
Certificate serial:       0BFC
Authority key identifier: 30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/813F208AE5E611E9A31D0F15C4F9AE02.roa
Signing time:             Fri 22 Dec 2023 19:06:58 +0000
ROA not before:           Fri 22 Dec 2023 19:06:58 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     138394
IP address blocks:        103.124.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl
                          rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3068 (0xbfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F59A6/serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1
        Validity
            Not Before: Dec 22 19:06:58 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6585de51-c46a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:72:c9:47:6d:45:87:05:72:34:46:15:df:89:
                    9b:02:5c:c8:3f:68:d3:ef:5f:97:ed:35:30:75:c7:
                    31:53:af:32:81:31:32:ec:6e:5c:bf:f8:09:9d:4c:
                    9c:0d:36:3c:3c:5a:f4:77:ad:79:1f:ed:d3:38:0d:
                    78:80:ea:21:98:80:df:af:c4:e4:a1:ce:29:07:28:
                    83:fd:ef:a2:c6:5c:00:67:50:e8:af:89:76:34:62:
                    a3:56:3b:e9:e3:b5:5d:84:62:5d:73:ba:88:e4:1e:
                    59:f0:e0:92:d4:13:e7:a4:b9:1f:9d:e3:67:5a:c2:
                    82:f8:91:4a:c4:ab:cf:c4:8a:9b:f0:cb:a8:cf:be:
                    ec:a2:6b:ac:8c:4c:67:bb:c3:74:6e:e5:09:4c:f0:
                    32:8d:c6:11:4e:bd:d5:74:1c:4f:e0:c3:75:75:ac:
                    2d:3e:98:08:e2:73:75:86:11:b2:62:b0:a4:ca:02:
                    c2:33:da:ff:fc:28:18:ac:a5:fd:b5:6e:f1:bd:8c:
                    50:6e:81:28:cd:51:af:fd:90:87:6c:6a:ef:4c:41:
                    47:ce:73:bc:24:f1:ac:00:bf:a9:16:2e:86:79:a5:
                    57:13:a4:13:33:e2:02:fc:f5:ca:57:1b:75:08:15:
                    44:34:fd:87:fd:28:65:f1:b1:bd:97:0a:d5:f6:e6:
                    49:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:20:FB:E5:94:6A:61:8A:24:7C:F1:80:AA:07:93:01:3A:CA:AE:BF
            X509v3 Authority Key Identifier:
                keyid:30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/813F208AE5E611E9A31D0F15C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:75:39:fb:88:e5:1e:d1:7d:99:9f:a6:41:ab:6e:d4:0a:2e:
         1c:f8:24:e4:23:8d:67:d9:57:51:48:23:b8:e5:a7:ed:f0:06:
         54:c2:51:75:da:cc:9d:3b:e8:7d:bc:d6:58:b2:c5:38:ef:5b:
         16:47:fe:22:c6:db:34:b2:83:5a:5b:0e:de:a3:4e:55:c6:95:
         d1:fd:26:30:31:71:d0:ea:fe:69:8f:33:7b:02:bb:43:92:86:
         1e:d7:10:fd:5b:7c:e9:12:d8:08:53:25:ff:5a:ec:21:5e:9e:
         1e:55:d2:78:eb:b0:80:07:07:74:7f:fa:30:53:de:2b:39:d6:
         7a:8e:64:b0:0d:a4:21:78:a4:c8:b3:f1:86:69:bd:b4:af:31:
         78:2e:0f:f6:12:8a:dd:b2:1f:f5:9a:ca:41:55:88:2f:50:36:
         90:8d:c7:82:32:6d:9e:2a:9a:f9:44:28:b0:4c:c0:6c:15:18:
         39:45:d5:05:f7:b0:e6:d7:84:22:65:7a:e0:11:63:75:6e:c1:
         24:86:7a:dd:ce:e0:1d:67:53:29:5c:14:be:a1:39:b4:40:e1:
         c4:81:47:77:94:73:5c:d2:5a:f9:7f:82:5c:b4:04:4d:ed:79:
         95:ac:06:be:46:84:9a:9e:ca:80:c2:52:29:83:17:06:30:9c:
         b7:2c:0c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:22 2024 by rpki-client on console-ams.rpki-client.org