Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/D254B444679111EF8A2C9062C4F9AE02.roa
File:                     D254B444679111EF8A2C9062C4F9AE02.roa (raw, json)
Hash identifier:          CDaN9JryAkx9RMyPLM9uKZplauy/FoddZWZ4bsbwg48=
Subject key identifier:   43:26:E1:8B:9F:A8:90:24:4C:F0:6F:36:8D:42:7A:F1:1B:32:82:46
Certificate issuer:       /CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Certificate serial:       03CB
Authority key identifier: BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/D254B444679111EF8A2C9062C4F9AE02.roa
Signing time:             Sat 31 Aug 2024 12:09:07 +0000
ROA not before:           Sat 31 Aug 2024 12:09:07 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     134788
IP address blocks:        103.178.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl
                          rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 971 (0x3cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
        Validity
            Not Before: Aug 31 12:09:07 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=66d307e3-cd5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1c:bc:29:d2:79:28:f4:50:f0:06:1f:09:0e:
                    f3:01:e1:89:61:49:2d:08:78:e3:dc:93:e6:a3:17:
                    a4:54:b8:1e:9a:b2:38:0f:a3:51:b1:9d:f5:65:47:
                    6c:ae:0c:fa:55:bb:8d:50:ea:4a:a6:6d:70:e9:98:
                    c8:4d:c6:c3:44:48:ce:a1:8a:99:63:e9:4f:48:ff:
                    ae:8c:4d:05:61:c1:b5:a1:e2:e2:b1:7e:fd:2c:77:
                    09:e8:93:18:ce:c3:48:37:93:5d:9b:ba:9d:9c:af:
                    6a:ce:63:da:ba:07:e4:03:2d:f8:73:75:c5:86:e7:
                    ea:b6:b4:a0:82:6c:ee:52:54:df:5e:cc:01:f3:2f:
                    2b:3e:a6:dc:ba:67:df:ea:72:54:dc:0d:0d:72:8f:
                    cb:c7:0d:ff:66:0f:e4:24:a2:46:03:05:7d:11:69:
                    75:1d:00:55:bd:c1:c8:70:b1:84:2b:38:eb:b3:e5:
                    13:3f:e6:b8:39:97:02:4a:c2:5e:5f:6e:2e:46:1a:
                    17:04:64:a7:46:11:0c:f1:f0:32:bd:8f:a3:ce:ea:
                    9e:8a:10:67:5c:c7:0b:91:45:be:33:7d:d3:68:f3:
                    83:29:de:be:01:13:e8:d0:d1:ed:5c:d4:3a:ea:8c:
                    2a:fa:72:91:4d:ed:ef:4b:2b:8b:85:06:8c:06:51:
                    f4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:26:E1:8B:9F:A8:90:24:4C:F0:6F:36:8D:42:7A:F1:1B:32:82:46
            X509v3 Authority Key Identifier:
                keyid:BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/D254B444679111EF8A2C9062C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:b9:a9:62:64:93:16:51:33:37:36:c5:2d:28:da:98:ac:83:
         ba:87:7d:35:50:38:c9:51:03:7d:9b:08:83:fc:98:b9:96:60:
         f9:a3:27:ee:44:64:e2:ba:c6:a8:f1:d5:dc:48:90:cd:92:06:
         5d:2b:65:5f:eb:24:a2:de:1e:cc:6c:1e:95:70:07:86:50:de:
         ff:10:29:b9:86:9b:41:18:19:7c:b7:58:d0:42:b2:8b:35:17:
         ae:41:c0:73:83:1c:80:12:9a:53:cb:93:3f:61:bb:f0:d9:f6:
         87:10:3e:d1:b0:ed:9d:21:d2:3a:7b:3f:2f:32:3c:66:f3:2b:
         84:d1:45:db:7b:9a:67:37:f0:ac:cd:e1:5e:f1:49:bf:e1:d6:
         b7:b4:ed:c4:c3:25:46:dd:fd:5d:c2:64:06:8e:c8:c6:e1:40:
         e5:8f:ff:17:a2:af:c2:10:6b:6a:e0:35:df:5a:3a:5a:dd:94:
         22:32:e6:ce:d4:64:18:86:8a:1c:de:58:b6:73:c4:56:b7:6b:
         16:a5:50:bd:be:74:c5:75:cd:8d:ef:c2:86:86:a5:f9:6c:3e:
         35:11:39:91:0d:cc:2f:74:84:43:f6:f2:82:33:c8:f2:d8:ca:
         d9:d8:fb:e1:f4:85:4d:d8:5d:85:36:67:39:23:07:a3:34:ee:
         34:d5:62:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:30 2024 by rpki-client on console-ams.rpki-client.org