Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/E5DA330E9FF411EABA55D530C4F9AE02.roa
File:                     E5DA330E9FF411EABA55D530C4F9AE02.roa (raw, json)
Hash identifier:          WPNbmXIljXf5DGJzTyP9mhxu+4YyVGP6cfR3qyAMYCc=
Subject key identifier:   8C:E9:41:D6:E9:EA:27:D4:2C:6A:AA:EC:90:40:1D:62:CE:23:17:83
Certificate issuer:       /CN=A91FED7C/serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06
Certificate serial:       0866
Authority key identifier: B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/E5DA330E9FF411EABA55D530C4F9AE02.roa
Signing time:             Tue 14 May 2024 22:01:29 +0000
ROA not before:           Tue 14 May 2024 22:01:29 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     28959
IP address blocks:        103.138.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl
                          rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:13:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2150 (0x866)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FED7C/serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06
        Validity
            Not Before: May 14 22:01:29 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6643df39-e720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7a:cc:96:e4:64:93:80:ec:af:fa:f3:37:15:
                    a1:7f:87:9b:ed:0c:f3:98:90:b9:e1:1b:7d:65:9f:
                    ab:95:2f:c6:6d:49:7e:46:77:03:db:2b:e0:4e:ff:
                    4e:14:05:4d:6e:54:35:bc:6d:84:4d:72:73:7e:f8:
                    eb:92:eb:0a:56:bc:53:3e:83:c3:45:91:4c:67:25:
                    b5:5d:a4:60:f7:18:de:5d:02:fc:02:4c:f4:22:c1:
                    df:85:c4:5b:c8:40:7f:f3:ee:e3:b1:40:f6:e3:0c:
                    e6:bc:92:9d:94:ce:ea:4c:29:96:38:02:ce:6d:97:
                    ed:f6:c9:53:e9:0a:7f:57:2f:9c:50:fa:91:6b:d5:
                    fd:6a:95:a7:ce:6f:0e:7e:79:51:17:52:01:e9:b8:
                    3d:0a:9c:85:a2:36:24:2c:0e:90:16:a6:85:e0:41:
                    7e:62:d7:af:1e:7c:4a:5b:ab:ce:d6:f0:84:ba:ed:
                    54:81:f2:ab:7f:be:a8:e3:11:52:13:66:3d:a8:5e:
                    b5:d6:84:ae:2a:0d:19:3a:19:8a:5a:2e:43:6d:7d:
                    89:87:7d:fb:2b:ab:e5:d5:5a:80:9a:c0:c2:e6:c3:
                    32:df:ac:53:40:70:5b:3a:d0:f4:eb:46:ad:36:6e:
                    3b:5d:20:76:8a:0d:e1:83:7f:75:5e:f8:30:6f:ce:
                    e8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E9:41:D6:E9:EA:27:D4:2C:6A:AA:EC:90:40:1D:62:CE:23:17:83
            X509v3 Authority Key Identifier:
                keyid:B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/E5DA330E9FF411EABA55D530C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:80:23:04:06:91:75:42:ad:f8:f2:d4:7f:81:1c:06:6d:62:
         2a:be:3e:a6:52:8d:eb:84:7c:17:dc:50:75:ae:64:5e:28:22:
         73:b9:5b:1b:f9:1b:12:43:31:35:3b:d0:20:55:1b:6b:d5:66:
         a2:ab:da:6d:4b:fc:de:1a:e2:7a:a7:cd:d7:2b:84:59:3e:39:
         c1:41:e6:d7:b4:6f:b5:5b:de:d9:5e:39:f8:cf:0e:2c:7c:b7:
         f6:5a:b1:21:61:0f:be:34:d3:09:c4:1f:e7:e9:e1:b7:0a:c4:
         e5:7d:1a:4e:17:34:68:d1:b9:e4:65:a9:33:1e:c9:69:27:5a:
         f4:bf:3a:ad:f8:69:fa:87:18:36:ef:9a:7e:fe:6d:3b:73:5c:
         ae:9d:38:95:c1:3b:80:8f:8d:33:42:83:ca:a8:89:97:99:23:
         80:64:98:2a:b7:35:bc:5c:39:52:44:83:f2:58:2b:f2:d3:91:
         2c:d2:40:59:a9:ab:3b:64:32:6b:dd:b5:31:48:e6:48:d3:0d:
         14:2e:62:e4:46:4e:be:1c:c9:c1:6d:ac:ac:28:97:72:88:05:
         7c:97:32:a4:3f:80:fc:1f:6f:f9:c9:c5:a3:28:61:09:12:82:
         e5:b2:54:1c:37:8e:59:ff:d1:4d:f7:ce:13:ce:9b:14:ab:2e:
         6c:b5:f5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:50 2024 by rpki-client on console-ams.rpki-client.org