Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/C38C54A2650411EE89EC7112C4F9AE02.roa
File:                     C38C54A2650411EE89EC7112C4F9AE02.roa (raw, json)
Hash identifier:          2IeO54Cp6b06u4xrChfhugqf5OR3NU+qoLsUiOOPr8M=
Subject key identifier:   9E:BA:05:30:4E:8C:F7:C0:00:1A:E1:D8:A7:8F:B1:24:E4:A0:56:F4
Certificate issuer:       /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Certificate serial:       0295
Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/C38C54A2650411EE89EC7112C4F9AE02.roa
Signing time:             Wed 07 Aug 2024 02:44:41 +0000
ROA not before:           Wed 07 Aug 2024 02:44:41 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     142032
IP address blocks:        103.97.176.0/22 maxlen: 24
                          103.242.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
                          rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 661 (0x295)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
        Validity
            Not Before: Aug  7 02:44:41 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66b2df98-b2f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:39:fd:ed:86:a8:52:a4:56:83:fd:74:2f:27:
                    81:d9:4c:ea:91:a7:e9:b0:dc:f4:f4:5c:f9:8d:5c:
                    51:35:59:20:68:34:5c:77:33:b5:2a:28:fb:57:fd:
                    29:c7:e9:90:96:4f:17:a1:30:87:55:6a:58:10:cb:
                    47:05:f6:35:d0:35:13:c1:13:2b:1c:74:e9:da:c3:
                    b2:3f:c4:29:59:cb:1a:c0:9f:2d:3d:05:25:5c:db:
                    eb:a8:d8:e1:40:8b:5e:24:a1:31:a6:62:cc:00:3f:
                    40:1a:0b:68:07:bb:e4:72:d2:83:64:b1:aa:6e:83:
                    38:07:2d:56:0e:1f:c4:d7:d1:57:1a:c1:9a:95:16:
                    6a:27:24:43:83:16:6f:cd:8c:80:cf:85:08:2c:b7:
                    b1:71:8f:2d:23:c3:e0:23:78:5c:27:1e:2d:e5:40:
                    fb:fb:7b:57:00:91:fa:c1:17:ba:70:01:15:d0:4e:
                    54:79:98:2d:58:08:67:a8:d7:8e:80:34:04:12:1f:
                    ff:5b:2a:4e:d1:a2:51:de:e7:6f:ef:15:9c:2a:9e:
                    14:52:d6:b1:13:e8:c3:d9:90:80:cb:bd:88:70:ed:
                    3b:d0:cf:93:b8:f9:6b:fb:01:1c:74:74:06:85:c2:
                    d3:5f:6e:59:8c:fd:37:57:ba:b7:eb:bc:86:3c:89:
                    80:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BA:05:30:4E:8C:F7:C0:00:1A:E1:D8:A7:8F:B1:24:E4:A0:56:F4
            X509v3 Authority Key Identifier:
                keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/C38C54A2650411EE89EC7112C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.176.0/22
                  103.242.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:f4:02:fa:d3:4f:46:ca:63:b1:40:2a:d7:99:ff:27:93:57:
         17:e4:05:b5:6d:d2:e2:a5:ae:7b:09:01:0c:dd:a9:e2:11:f7:
         c7:70:26:d5:51:eb:fa:25:1c:b6:ec:dd:d3:86:0c:60:30:aa:
         fc:6a:e7:40:de:3c:30:7b:1f:59:dd:30:b1:95:b7:5c:22:25:
         35:ba:c3:bd:c3:dd:a9:bc:4a:48:f6:ec:c6:70:8e:0f:c4:16:
         c7:38:c2:f1:85:e6:18:b0:a7:a8:38:f0:3d:34:5b:19:6f:14:
         33:b0:54:ee:f1:c4:30:35:88:db:12:d3:84:41:4a:64:d9:df:
         bd:20:63:25:9b:cb:2e:c1:36:2a:c8:bf:60:78:d0:15:9c:dd:
         c9:9f:ef:ec:43:fb:56:df:6e:66:9d:30:2c:07:7c:2f:14:50:
         68:3c:61:89:a9:75:ec:51:48:aa:df:e6:8f:cb:e5:ee:95:68:
         5f:1c:b0:da:5f:d3:97:7e:38:83:fa:f5:db:10:b2:65:49:6f:
         20:00:4f:f0:d6:50:0a:f5:fb:7b:3f:d8:de:e6:f9:ac:db:f4:
         f1:3a:14:83:90:63:41:8f:c7:2d:d1:9f:74:09:19:a3:ff:81:
         27:da:18:50:a3:10:35:e3:63:9f:47:7f:5d:e2:e2:b4:45:f1:
         51:57:4a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:12:09 2024 by rpki-client on console-fra.rpki-client.org