Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/78A3D4AE6AC011ED9C15EE6BC4F9AE02.roa
File:                     78A3D4AE6AC011ED9C15EE6BC4F9AE02.roa (raw, json)
Hash identifier:          hEiN61azCzCVDsRROVBC0HW2s55XG0VY8MhC1abTRg8=
Subject key identifier:   08:E9:F7:F1:EE:7E:BD:4D:5B:1C:C5:F1:94:16:CA:2A:75:C3:2C:FA
Certificate issuer:       /CN=A91F5B0D/serialNumber=02E3870EC3C61E2777716D7018B34CB3357A02C4
Certificate serial:       05CD
Authority key identifier: 02:E3:87:0E:C3:C6:1E:27:77:71:6D:70:18:B3:4C:B3:35:7A:02:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/78A3D4AE6AC011ED9C15EE6BC4F9AE02.roa
Signing time:             Sat 06 Jul 2024 23:51:18 +0000
ROA not before:           Sat 06 Jul 2024 23:51:18 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     55550
IP address blocks:        103.115.100.0/24 maxlen: 24
                          2402:e4c0::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1485 (0x5cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5B0D/serialNumber=02E3870EC3C61E2777716D7018B34CB3357A02C4
        Validity
            Not Before: Jul  6 23:51:18 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=6689d876-14dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c8:58:37:5d:fa:c5:66:c1:7f:5e:e1:1a:aa:
                    70:ec:19:80:f4:30:b2:a0:76:39:58:42:87:e8:3b:
                    83:34:f6:d5:21:97:71:5c:e5:0f:9b:e5:90:3d:e4:
                    ab:40:72:d5:6e:6e:5c:84:ae:ae:07:28:dc:a9:34:
                    1c:02:ae:3d:42:de:cc:4e:1d:dd:a2:d5:b4:ae:cf:
                    67:5f:ec:0b:0e:34:34:95:cc:ee:d8:10:fc:1a:77:
                    91:a6:aa:b0:23:42:84:e0:2b:95:72:c4:b6:5e:84:
                    4d:0e:2e:fe:c4:6d:c0:60:2b:ea:0d:f7:81:8e:e2:
                    6a:6e:41:d5:fd:bd:23:b7:48:e3:a1:64:ca:fc:48:
                    4d:6a:71:5c:3e:c0:22:60:38:b1:52:7f:3c:0a:57:
                    cc:57:ee:af:39:50:eb:39:76:ec:6a:ab:79:ab:84:
                    ae:66:41:83:60:b8:d5:5e:19:2b:06:38:47:20:55:
                    10:2b:50:a4:08:d1:37:d9:64:95:2b:5b:a1:8f:3c:
                    38:dc:d1:00:79:6d:20:81:98:de:b6:71:a4:05:19:
                    c7:09:c4:ac:66:80:a1:92:ac:c0:78:a9:1d:9b:f1:
                    90:b8:68:9e:c2:49:9b:e5:06:9e:51:50:03:f8:c0:
                    01:42:0c:15:75:3c:2e:50:36:16:8c:32:34:e9:4d:
                    bd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E9:F7:F1:EE:7E:BD:4D:5B:1C:C5:F1:94:16:CA:2A:75:C3:2C:FA
            X509v3 Authority Key Identifier:
                keyid:02:E3:87:0E:C3:C6:1E:27:77:71:6D:70:18:B3:4C:B3:35:7A:02:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/78A3D4AE6AC011ED9C15EE6BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.100.0/24
                IPv6:
                  2402:e4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:e6:81:0d:d3:76:60:66:d9:92:fb:6a:63:c6:35:70:8e:25:
         90:78:2a:ac:e1:40:06:54:53:ec:16:33:a9:51:17:fc:6f:dd:
         2c:ef:2f:49:3f:42:29:e0:c9:5c:8b:e7:99:30:a0:32:c9:9a:
         cf:63:88:55:9f:32:e5:ae:20:b8:a0:59:e2:c7:c8:bd:e2:ef:
         5f:2e:8a:f4:b0:0f:e0:7e:ab:45:0c:eb:19:65:cb:3c:51:78:
         aa:92:76:8b:e6:98:b5:09:3e:10:be:8a:a0:0c:fd:85:30:c0:
         92:a7:44:27:b0:9c:9c:c1:e9:22:dc:a8:27:bc:f7:50:0e:dd:
         c2:be:e9:75:4b:22:b1:f6:78:35:8d:d9:70:f4:72:41:d9:ca:
         57:2d:2e:9e:6d:db:ed:63:9c:0d:62:a8:df:1a:15:37:b9:db:
         6d:3c:18:fc:c9:8c:6a:92:ab:2b:65:5e:86:e9:1f:6e:c3:a2:
         23:68:03:d2:7e:ce:03:65:53:55:b3:33:b3:53:e2:f6:6d:c3:
         84:c3:08:86:88:ca:8e:03:a2:99:14:90:24:14:64:5e:ea:01:
         58:60:d5:2d:a4:00:54:50:d6:36:04:e7:73:ad:a9:71:b6:a3:
         12:fd:c8:45:cf:b6:0d:d3:08:91:c7:e7:ab:83:05:61:3a:4c:
         52:c4:96:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:37 2024 by rpki-client on console-fra.rpki-client.org