Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/5F94C5B814A311EDA489B80DC4F9AE02.roa
File:                     5F94C5B814A311EDA489B80DC4F9AE02.roa (raw, json)
Hash identifier:          BsKKSnHr0K52Pi3Gs6fECGV1MzwDOrglwx2HR/FgK3w=
Subject key identifier:   99:AE:5E:C0:1C:9F:BE:A9:26:30:3A:40:44:36:42:C0:2E:0A:C6:73
Certificate issuer:       /CN=A9110795/serialNumber=870AE59A4B38DAFC6A31ABE329CCF878FDF72A8C
Certificate serial:       1675
Authority key identifier: 87:0A:E5:9A:4B:38:DA:FC:6A:31:AB:E3:29:CC:F8:78:FD:F7:2A:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/5F94C5B814A311EDA489B80DC4F9AE02.roa
Signing time:             Tue 28 May 2024 17:26:09 +0000
ROA not before:           Tue 28 May 2024 17:26:09 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     146996
IP address blocks:        103.91.204.0/24 maxlen: 24
                          103.91.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.crl
                          rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 17:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5749 (0x1675)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110795/serialNumber=870AE59A4B38DAFC6A31ABE329CCF878FDF72A8C
        Validity
            Not Before: May 28 17:26:09 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=665613b0-09a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:88:f6:86:0d:f2:2f:33:2e:83:c2:3a:87:0b:
                    59:70:72:6f:5b:5c:78:aa:4a:5c:1d:3a:22:24:f5:
                    32:f5:6e:23:7f:52:b7:ff:7a:11:df:3d:da:0a:00:
                    c6:34:60:ac:9e:b4:97:3a:c8:a2:72:43:21:ee:fd:
                    81:93:99:c5:35:57:b5:f1:7c:41:43:97:25:66:2d:
                    6c:1c:11:34:ee:70:08:61:78:7a:1b:40:ff:14:15:
                    04:18:b6:4a:28:1f:14:5e:86:a1:e2:e6:fa:47:e8:
                    df:16:c8:9c:ad:35:29:87:21:7f:9d:5f:c9:28:a4:
                    03:c9:c8:9e:95:bd:2e:0b:9c:d0:e3:5e:cd:1f:4e:
                    06:dd:d5:e2:40:ec:1e:99:bb:37:5b:7a:c2:f6:96:
                    cb:76:3f:5a:71:1f:2e:34:3d:de:d8:06:5b:2a:54:
                    0d:59:76:48:f9:41:63:ee:dd:ca:8d:15:12:56:3c:
                    c6:4b:64:62:9b:01:b5:42:a1:4b:a1:9e:90:7c:00:
                    5f:95:ff:87:58:0a:c3:10:ee:61:7d:e9:97:3e:a8:
                    ca:7a:10:79:19:5b:02:a6:d3:2c:3e:9b:7f:67:78:
                    02:aa:08:24:b6:da:aa:10:b3:1b:4d:a9:e5:bc:d2:
                    34:32:ba:55:69:af:cf:f3:5f:1c:14:6d:95:9a:ae:
                    05:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AE:5E:C0:1C:9F:BE:A9:26:30:3A:40:44:36:42:C0:2E:0A:C6:73
            X509v3 Authority Key Identifier:
                keyid:87:0A:E5:9A:4B:38:DA:FC:6A:31:AB:E3:29:CC:F8:78:FD:F7:2A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/5F94C5B814A311EDA489B80DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:ff:f4:ac:4f:f6:56:c3:52:56:7a:76:b2:2a:4a:58:96:ed:
         82:8f:fa:30:05:2f:22:76:40:a7:7d:e6:7a:31:7d:df:08:70:
         94:32:55:78:6d:51:20:59:77:61:63:a9:e2:6e:d2:2d:ed:9f:
         d5:6e:8c:50:60:c1:4e:07:e6:cf:2d:28:50:a7:d9:20:dc:84:
         c0:38:a0:7a:ab:7b:db:f1:77:d4:74:a5:8b:79:cd:c9:ba:bb:
         56:a3:17:cb:2e:75:11:3a:7d:ed:27:4e:39:ec:6a:28:1e:7c:
         22:7c:b0:68:c2:6c:3c:d2:db:77:1e:86:88:6d:48:a4:18:57:
         4b:62:7f:c1:6c:ef:bb:ec:13:0e:39:74:da:f9:bd:4e:0b:77:
         96:93:ef:5c:97:91:8a:3c:b7:55:b2:f7:b4:5b:59:83:51:45:
         52:ef:be:5c:dc:ec:57:b4:21:a9:64:85:df:02:62:1a:99:52:
         86:bd:27:55:af:2a:d3:14:39:d2:af:f4:d8:d6:74:71:b4:0f:
         74:a9:85:ef:99:c4:6a:ca:e1:e1:4d:26:ff:95:98:87:02:3e:
         29:f1:a7:eb:10:89:ba:fc:ac:7b:fa:a0:b7:55:3b:5e:27:4e:
         50:09:57:1d:14:58:90:d4:78:82:0f:65:08:65:41:9f:e1:db:
         4a:5f:74:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 20:33:56 2024 by rpki-client on console-ams.rpki-client.org