Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/C23053B019A911EF97366417C4F9AE02.roa
File:                     C23053B019A911EF97366417C4F9AE02.roa (raw, json)
Hash identifier:          YYki0NriwMd0PqjU0EOE6kz16/qKzKdVDNbbepKT0IA=
Subject key identifier:   02:1A:1B:83:BE:DD:34:F7:F8:C6:4D:F2:FD:BA:04:20:CE:9D:A3:CD
Certificate issuer:       /CN=A91383BF/serialNumber=51A48258D4CD6E01D2458C5B9216EFA45210B623
Certificate serial:       6B
Authority key identifier: 51:A4:82:58:D4:CD:6E:01:D2:45:8C:5B:92:16:EF:A4:52:10:B6:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/C23053B019A911EF97366417C4F9AE02.roa
Signing time:             Tue 03 Dec 2024 05:40:08 +0000
ROA not before:           Tue 03 Dec 2024 05:40:08 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     64006
IP address blocks:        45.116.48.0/22 maxlen: 24
                          103.81.40.0/22 maxlen: 22
                          103.81.40.0/24 maxlen: 24
                          2400:6140::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl
                          rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 05:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91383BF
        Validity
            Not Before: Dec  3 05:40:08 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=674e99b8-c814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ab:04:bb:e7:c8:52:5e:b6:23:01:81:61:99:
                    74:f4:71:6b:d2:5c:ad:ea:56:3f:44:1c:1c:95:ac:
                    78:c4:49:04:b3:fb:22:c1:2e:d5:25:b2:57:95:7d:
                    fc:bd:d4:e4:fd:c1:5e:a6:d2:ad:c5:1d:a3:e7:bb:
                    bb:dc:0b:39:58:16:ea:be:bf:52:01:bf:87:a6:cd:
                    a3:85:02:94:0e:89:ea:63:fd:4a:69:b6:7e:bd:24:
                    fb:38:7b:3c:1f:ed:07:a2:80:bf:07:05:f4:5e:19:
                    23:ae:ea:99:6a:b7:87:27:6e:6d:c2:1c:93:bb:8e:
                    d2:b6:2d:ac:56:cb:79:f2:fd:96:5d:ad:c3:b8:c6:
                    b0:5e:48:a7:cc:bb:25:2d:0e:4c:98:e3:6d:81:96:
                    b3:84:8a:39:3e:be:4c:ba:19:48:3a:8d:be:35:db:
                    5b:88:92:85:9c:2d:11:7e:9b:a5:01:e4:78:fd:ae:
                    19:8b:4a:07:ba:ef:8f:73:0f:86:c7:22:80:79:7f:
                    64:a5:86:37:9e:85:b4:f3:02:26:fc:bf:df:fe:bc:
                    60:53:61:e0:12:23:e7:10:6e:ca:9c:7f:7a:f9:a5:
                    f0:ee:77:fe:85:d7:d8:6a:1b:52:34:df:85:30:ec:
                    88:56:c4:c6:fa:5c:f3:14:36:83:71:8a:db:61:5a:
                    aa:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1A:1B:83:BE:DD:34:F7:F8:C6:4D:F2:FD:BA:04:20:CE:9D:A3:CD
            X509v3 Authority Key Identifier:
                keyid:51:A4:82:58:D4:CD:6E:01:D2:45:8C:5B:92:16:EF:A4:52:10:B6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/C23053B019A911EF97366417C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.116.48.0/22
                  103.81.40.0/22
                IPv6:
                  2400:6140::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:d6:48:c9:29:30:a6:2b:a7:da:54:a1:1c:ea:33:47:59:46:
         fa:c9:1b:16:6f:ac:98:63:1c:bf:4c:aa:c7:17:a4:13:37:cb:
         e6:b7:13:5f:78:53:cf:d0:c6:8b:c9:5d:db:c1:4f:cf:af:98:
         b5:ec:35:7e:24:30:f1:26:d7:a4:94:ea:60:0b:00:dc:6d:64:
         8a:d8:a8:76:26:74:92:01:5b:3e:f6:97:59:ba:4c:25:10:a9:
         b9:09:b1:f2:be:9f:1e:9a:27:71:e1:20:4d:15:a1:3f:37:10:
         a0:00:6e:19:16:ed:b0:10:f2:96:20:a7:89:68:ba:d0:e6:f9:
         51:d6:91:d3:0e:78:b1:02:c9:e4:cc:e7:d4:74:c3:61:90:d2:
         fa:ff:ee:75:bd:ab:3e:18:8e:6d:9b:84:cd:a0:9f:d0:3d:df:
         ac:65:0f:50:b3:5d:45:51:e2:c5:22:53:8c:14:f8:3d:6b:cf:
         54:01:45:b5:a3:07:ea:86:d5:69:f6:db:c0:c2:75:50:6e:e8:
         98:20:a6:5f:07:d9:70:9e:76:ee:aa:9c:83:d0:ad:15:55:f3:
         2b:79:9a:3c:e8:e5:c1:38:67:67:f2:7f:af:4f:58:f8:1a:a7:
         07:e1:ca:76:5f:76:5d:f4:85:89:8b:f1:c5:66:70:d0:30:61:
         48:4f:85:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:18:03 2025 by rpki-client