Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/980A0D7254B511EBAC30E864C4F9AE02.roa
File:                     980A0D7254B511EBAC30E864C4F9AE02.roa (raw, json)
Hash identifier:          T4vuLCrTzCjBiEjhthajjtBBQ8Q106LX1BqHkvFmGc0=
Subject key identifier:   10:CD:96:C3:0A:15:FC:3F:1E:66:F6:E0:EC:64:5A:8E:98:1F:93:32
Certificate issuer:       /CN=A91167F7/serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD
Certificate serial:       05A5
Authority key identifier: 44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/980A0D7254B511EBAC30E864C4F9AE02.roa
Signing time:             Fri 06 Oct 2023 23:20:48 +0000
ROA not before:           Fri 06 Oct 2023 23:20:48 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     137819
IP address blocks:        103.100.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl
                          rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 00:39:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1445 (0x5a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91167F7/serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD
        Validity
            Not Before: Oct  6 23:20:48 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=6520964f-e398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d4:11:e7:a0:81:a0:ab:2e:80:44:5a:77:58:
                    2c:28:66:dd:79:51:78:70:35:f3:a3:05:b8:77:a1:
                    df:d6:97:52:c2:ed:48:ea:0f:d8:59:77:6f:21:5c:
                    e5:b9:5d:a1:53:e1:83:7c:ce:29:f6:5c:81:e6:31:
                    84:88:7f:35:5f:35:c5:bc:2d:72:49:1a:4c:4c:36:
                    86:b8:f5:94:28:86:e2:0b:66:c7:e9:20:5f:3b:20:
                    46:59:8c:af:9f:01:b7:86:6c:ca:a3:ca:b0:ef:d2:
                    81:d9:fa:6f:af:c0:97:58:21:8e:10:45:28:7e:f7:
                    7e:3d:64:3a:95:82:eb:6c:86:cb:7b:67:f7:69:22:
                    b7:a7:d1:d9:6c:3b:c2:af:aa:db:68:ee:d3:b2:3c:
                    52:b5:ce:98:f8:cc:5e:e5:1a:29:37:c9:e6:2a:1d:
                    a4:59:aa:72:8d:6c:72:4e:96:5a:6a:99:d1:6c:4a:
                    90:b9:1a:da:d2:89:e3:ff:02:92:c0:85:59:a9:8b:
                    4b:8e:8c:74:eb:86:45:7d:cb:23:d4:0f:09:c6:8c:
                    d9:a1:ae:dc:16:d1:67:99:cb:be:5d:63:96:52:1b:
                    01:1e:b0:ff:ea:f5:bb:03:8d:84:7c:64:ff:a1:ba:
                    55:52:68:c3:c3:d2:92:ba:70:64:fd:26:15:d4:61:
                    51:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CD:96:C3:0A:15:FC:3F:1E:66:F6:E0:EC:64:5A:8E:98:1F:93:32
            X509v3 Authority Key Identifier:
                keyid:44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/980A0D7254B511EBAC30E864C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:fd:45:c3:61:64:f6:f2:ef:49:05:06:55:eb:96:fb:c8:52:
         b7:f5:4a:90:40:45:4c:b0:76:9a:96:af:27:e5:71:dd:25:b8:
         f4:e4:cc:29:7e:95:d8:04:d7:80:bd:94:a2:58:0c:2a:8b:9f:
         76:68:50:57:f4:0f:dd:f0:b0:72:c8:09:32:37:5f:c4:88:63:
         7a:ac:62:3c:5d:69:ed:80:8d:7c:15:32:23:84:25:ae:fd:6a:
         c1:34:eb:f9:52:f6:b5:ba:ae:44:bc:f0:d6:16:7a:9c:b2:cd:
         b8:57:21:55:70:0c:0a:78:a5:37:24:a3:34:b6:7a:da:7f:39:
         db:c9:a8:50:ee:b3:b8:e3:c7:4c:c9:90:71:80:b9:b9:23:e7:
         69:13:28:b9:66:5f:ca:b7:fc:4c:29:ca:d1:3e:55:c0:da:d4:
         0e:1d:b5:c9:bc:27:f1:8b:0e:17:58:2f:19:b7:c1:82:c9:83:
         70:06:9d:a2:1c:06:78:de:f5:ab:c5:ab:8d:f6:8e:5d:db:0f:
         03:17:ec:58:09:6b:d7:7a:03:eb:27:e5:87:d8:cb:1a:9e:0a:
         23:12:e3:02:6f:a0:49:01:8f:a3:65:ff:bd:76:5e:b0:31:82:
         4a:8d:fe:d0:e0:ce:e8:5e:eb:14:bf:da:da:b0:8a:3e:d9:8d:
         b1:92:bd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:01:10 2024 by rpki-client on console-ams.rpki-client.org