Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/80379A8A09EA11EC8762242CC4F9AE02.roa
File:                     80379A8A09EA11EC8762242CC4F9AE02.roa (raw, json)
Hash identifier:          bLDcJFTKOtM843ZtxHRVBda6/t9v0F+nd+NQWcmzuYk=
Subject key identifier:   6D:7C:95:A5:39:FD:54:2E:D4:F1:74:FC:39:E7:8F:8A:9E:E5:5B:11
Certificate issuer:       /CN=A91F6CB0/serialNumber=6D175A74C1A098BFA2DF7EE4371605FF6A304249
Certificate serial:       0489
Authority key identifier: 6D:17:5A:74:C1:A0:98:BF:A2:DF:7E:E4:37:16:05:FF:6A:30:42:49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRdadMGgmL-i337kNxYF_2owQkk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/80379A8A09EA11EC8762242CC4F9AE02.roa
Signing time:             Sat 03 Aug 2024 01:43:53 +0000
ROA not before:           Sat 03 Aug 2024 01:43:53 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     139664
IP address blocks:        103.22.196.0/22 maxlen: 22
                          103.22.196.0/24 maxlen: 24
                          103.22.197.0/24 maxlen: 24
                          103.22.198.0/24 maxlen: 24
                          103.22.199.0/24 maxlen: 24
                          115.31.88.0/21 maxlen: 21
                          115.31.88.0/24 maxlen: 24
                          115.31.89.0/24 maxlen: 24
                          115.31.90.0/24 maxlen: 24
                          115.31.91.0/24 maxlen: 24
                          115.31.92.0/24 maxlen: 24
                          115.31.93.0/24 maxlen: 24
                          115.31.94.0/24 maxlen: 24
                          115.31.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.crl
                          rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRdadMGgmL-i337kNxYF_2owQkk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1161 (0x489)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6CB0/serialNumber=6D175A74C1A098BFA2DF7EE4371605FF6A304249
        Validity
            Not Before: Aug  3 01:43:53 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66ad8b59-d4eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:a0:56:dc:47:3e:6b:f0:77:f6:26:f0:6f:b7:
                    81:4b:5f:c8:83:ae:74:b6:ff:5a:24:89:79:3a:ca:
                    53:d4:50:59:66:47:bd:dd:42:4c:99:5b:ac:be:25:
                    fa:5e:05:8f:6c:3c:bc:d2:35:c5:47:30:6c:d2:3e:
                    83:14:7c:1d:97:a0:6b:32:9f:ad:a2:d6:e6:03:8e:
                    c3:84:f9:20:1d:a6:35:f0:8f:d3:42:79:28:f0:49:
                    b6:3c:8a:27:ef:99:26:a4:8d:2f:36:75:52:f8:2f:
                    50:cc:cb:8c:fc:b3:c1:a6:6a:2b:eb:9f:6b:7b:ce:
                    48:7d:bd:8d:af:fe:dc:b2:24:d8:02:89:d5:9c:e3:
                    fc:e2:37:6e:bb:c3:65:49:1d:af:2b:b5:6c:1a:cb:
                    6b:63:72:d6:29:7a:bb:97:ea:20:52:cc:35:ba:6e:
                    12:9b:50:51:39:bc:aa:1c:22:d6:86:4a:4b:b4:1a:
                    5f:43:0f:93:d1:b2:93:0e:71:cd:38:76:01:b8:36:
                    15:2f:01:a5:34:f9:bb:67:df:c1:5c:1a:d1:65:dd:
                    1a:e6:1e:4e:93:4b:77:7b:57:df:6f:64:e5:d4:d0:
                    0b:2f:80:35:bb:ec:70:5c:69:2f:14:0d:52:0b:eb:
                    2e:95:d1:5a:ed:a7:bd:b7:1c:1f:d5:c3:52:88:32:
                    fc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7C:95:A5:39:FD:54:2E:D4:F1:74:FC:39:E7:8F:8A:9E:E5:5B:11
            X509v3 Authority Key Identifier:
                keyid:6D:17:5A:74:C1:A0:98:BF:A2:DF:7E:E4:37:16:05:FF:6A:30:42:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRdadMGgmL-i337kNxYF_2owQkk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/80379A8A09EA11EC8762242CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.22.196.0/22
                  115.31.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d9:a0:64:35:06:60:b9:32:3a:b2:8b:a1:f7:a0:2a:3e:ea:81:
         80:f2:e1:76:ab:04:67:98:9c:ed:8f:99:b9:bd:66:cf:93:25:
         50:05:d4:5a:3d:0b:b6:f6:65:db:42:5b:c2:9e:f7:26:a7:12:
         25:37:a8:31:a5:38:c9:c0:72:57:7d:79:41:1e:37:e1:73:34:
         c2:c3:74:50:da:3b:c6:73:cf:64:94:c0:8d:56:c9:5d:fd:eb:
         af:2e:5b:70:94:fe:d6:4c:00:ed:c3:07:5f:0b:6c:f1:97:39:
         37:f4:96:e2:ae:17:ec:29:07:55:55:85:ad:67:af:7d:19:9c:
         39:a9:c1:18:3c:8f:7e:56:cb:0e:a5:94:98:42:8c:c0:47:46:
         e3:7c:6a:e6:04:a9:07:14:83:d8:30:2b:1e:95:7d:6a:44:72:
         59:ee:8d:21:3e:9a:0e:59:38:fb:c5:6f:c2:ad:c4:84:a4:ff:
         92:d9:54:93:2f:56:ce:13:a6:b6:b7:f4:d4:f9:08:a1:ea:ab:
         d0:37:1a:4f:a7:2d:82:c7:58:4f:b9:0a:53:15:8e:10:64:cb:
         a9:1e:14:a4:df:db:e9:e6:f8:19:0b:66:5d:18:09:51:dd:68:
         28:f0:02:be:ca:1b:43:1c:c7:53:63:12:82:fb:69:83:61:45:
         23:d7:59:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:39 2024 by rpki-client on console-fra.rpki-client.org