Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/6E98B3182D3411ED92165562C4F9AE02.roa
File:                     6E98B3182D3411ED92165562C4F9AE02.roa (raw, json)
Hash identifier:          lDaMLlKkOnOEtKB4HQw14YL4MByHOHikQc7Dy/TLNpg=
Subject key identifier:   CC:30:23:44:28:26:9C:D4:E8:4C:3A:D5:0D:DD:08:0B:7A:2C:80:5A
Certificate issuer:       /CN=A91FA1BE/serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2
Certificate serial:       0182
Authority key identifier: 95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/6E98B3182D3411ED92165562C4F9AE02.roa
Signing time:             Wed 03 Jul 2024 04:05:21 +0000
ROA not before:           Wed 03 Jul 2024 04:05:21 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     14618
IP address blocks:        103.10.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl
                          rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA1BE/serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2
        Validity
            Not Before: Jul  3 04:05:21 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=6684ce01-c610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d4:79:11:09:9f:f1:fd:e8:63:e0:1e:b5:de:
                    2a:9a:6b:8e:13:9f:98:32:db:eb:3c:06:6a:d3:62:
                    b5:78:83:2b:b2:4f:ee:46:7e:98:df:27:e4:8c:a9:
                    88:4f:6f:ae:39:20:76:f1:ad:93:46:c1:ec:1f:7d:
                    42:4c:d4:d9:59:85:dc:6b:9a:8f:50:6b:a6:27:41:
                    f8:d3:c8:4b:95:6e:f0:dc:46:78:8d:68:6e:27:4d:
                    02:2a:84:67:4f:fe:66:b5:b7:4b:ae:12:86:3f:d9:
                    c6:64:5f:87:b2:95:70:04:a2:13:44:10:4f:a4:7b:
                    91:f2:0c:25:2d:4c:ff:c8:a5:6f:8b:15:a6:d9:d7:
                    0e:de:43:27:90:cf:c4:be:09:8d:15:c4:da:f2:a9:
                    dc:cd:89:a3:ba:11:b4:a8:a2:cf:ef:36:90:53:ce:
                    70:d8:ac:79:44:8d:c9:45:af:9a:3d:71:64:d4:0e:
                    f3:da:0d:19:e1:d7:76:29:6c:77:b2:a0:ee:0a:68:
                    ac:f0:3a:5f:50:f0:63:8d:8b:51:1c:52:72:fa:54:
                    3f:f6:b1:af:ba:c7:2f:92:ac:2f:17:ec:6e:6c:19:
                    36:12:e8:68:b4:8e:8b:d2:08:b4:6e:18:cf:08:e7:
                    69:d4:c9:46:98:76:d4:f9:7b:e2:77:12:c1:e9:b9:
                    67:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:30:23:44:28:26:9C:D4:E8:4C:3A:D5:0D:DD:08:0B:7A:2C:80:5A
            X509v3 Authority Key Identifier:
                keyid:95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/6E98B3182D3411ED92165562C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:b0:0b:91:c3:5a:9d:f4:16:e1:82:46:be:2d:e4:b9:67:0a:
         cf:c3:7c:b1:c2:b5:ee:54:57:56:32:51:f5:69:e8:be:a6:20:
         76:9c:86:09:2b:75:e3:9b:75:10:cd:22:b0:1d:a7:89:19:05:
         c5:9b:73:0b:39:35:04:ae:9d:3b:40:29:f7:5f:fb:20:53:41:
         c4:3d:19:fd:7b:8a:c4:3a:10:67:1e:38:b3:28:5d:c4:0e:61:
         8d:bf:53:3a:b1:b7:82:68:65:e1:8d:cd:c0:ca:4b:85:48:34:
         da:cf:8a:bd:ca:37:52:73:f9:84:ae:bc:6b:32:59:90:5a:a1:
         a2:b3:72:68:1b:fb:cc:11:24:70:b2:56:11:db:51:da:0c:80:
         d8:d4:93:34:a4:59:ee:fe:07:1a:66:06:62:82:8c:ab:f8:97:
         f8:59:8d:ed:c3:d2:da:16:83:82:19:54:bd:ee:5a:d4:26:4f:
         dd:6b:5d:52:31:dc:dc:00:84:14:76:4e:cd:9f:30:7f:16:11:
         96:e5:1d:3b:bf:a8:38:f8:b7:70:d4:6b:5f:04:16:4e:af:21:
         4c:64:fc:77:57:20:70:60:dd:60:28:c2:8f:f0:e3:81:de:8a:
         2f:bb:f1:63:6b:3e:e0:c1:8b:3b:1e:e3:bc:93:4d:be:14:0c:
         9e:f6:b8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:57 2024 by rpki-client on console-ams.rpki-client.org