Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/05E078B2A5D211EDBC42DA12C4F9AE02.roa
File:                     05E078B2A5D211EDBC42DA12C4F9AE02.roa (raw, json)
Hash identifier:          v2lHPFqayLKQFo1kqoxAWDcBFThzgUiR57wjGOkQhv0=
Subject key identifier:   88:4D:E2:85:FE:93:05:5E:20:B3:01:0C:8F:E4:1F:1F:0B:1B:1F:41
Certificate issuer:       /CN=A91828F3/serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF
Certificate serial:       A5
Authority key identifier: 76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/05E078B2A5D211EDBC42DA12C4F9AE02.roa
Signing time:             Thu 21 Dec 2023 05:17:32 +0000
ROA not before:           Thu 21 Dec 2023 05:17:32 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     150427
IP address blocks:        103.96.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl
                          rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 05:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91828F3/serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF
        Validity
            Not Before: Dec 21 05:17:32 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6583ca6c-8cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:aa:81:fd:ed:b5:36:9f:66:8b:77:9a:b8:ef:
                    67:ef:88:4a:34:d9:18:11:90:35:bc:20:0a:8f:45:
                    0a:97:1f:cb:01:74:e6:e4:f8:1d:69:af:da:57:a4:
                    86:4a:c5:63:2e:b4:0b:cb:eb:2e:8d:b0:fe:8d:81:
                    54:c1:0e:93:e9:3d:72:74:a2:ee:24:c8:a1:cb:70:
                    f2:65:e8:a3:e2:6e:5e:90:fb:9b:72:32:01:db:c6:
                    49:79:39:ca:c5:c1:80:01:7e:53:cb:47:4a:d5:1a:
                    59:81:9e:09:c2:a4:cf:40:58:4b:f9:5d:33:4b:53:
                    2c:ee:37:03:a3:d9:c9:75:cf:cd:95:34:db:ac:c1:
                    d4:d4:16:49:ca:32:6e:8f:e7:f8:d8:88:3b:e4:9f:
                    1f:47:e5:f4:bc:96:96:e9:dc:97:df:62:6c:1b:d1:
                    70:a6:c8:75:98:b1:79:d0:03:bf:ef:14:54:77:ba:
                    59:5b:05:cc:f1:fe:e6:ea:be:6a:4f:f4:7f:e8:58:
                    41:e8:c4:b7:e6:43:e1:b3:8b:14:72:28:05:9d:1b:
                    5e:58:08:e1:ab:f6:81:80:0a:cd:40:5e:ae:f1:55:
                    3d:fd:d0:76:7d:b4:a8:97:53:07:66:58:89:d6:92:
                    22:00:fc:43:49:ae:64:88:28:6e:b0:cd:51:9d:59:
                    48:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4D:E2:85:FE:93:05:5E:20:B3:01:0C:8F:E4:1F:1F:0B:1B:1F:41
            X509v3 Authority Key Identifier:
                keyid:76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/05E078B2A5D211EDBC42DA12C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:17:a7:aa:66:5c:64:07:d4:86:ef:eb:31:56:8c:cb:51:27:
         89:9e:1a:6b:f0:d3:8a:b7:21:1e:a7:af:25:f7:c9:f4:82:c3:
         46:74:98:25:73:f8:8a:9c:49:2e:ba:16:16:81:80:97:cf:62:
         a2:c3:84:66:bc:e6:2a:2f:fb:33:d9:eb:4a:67:fe:05:8e:dd:
         99:5d:92:2c:d3:d4:b0:36:a3:80:65:b0:20:a2:7b:98:51:fa:
         85:24:18:93:d3:ab:c9:d3:ef:b2:09:39:45:97:f2:d5:b6:53:
         7f:0f:33:d4:e8:21:12:69:a9:75:18:6b:67:02:61:92:63:ad:
         a4:c4:3e:09:41:a3:7c:99:5d:de:34:f4:5b:fc:60:ec:ee:4d:
         9a:53:69:28:56:a6:b1:25:d2:d6:d0:f1:88:b8:47:64:e9:b8:
         64:76:c7:72:a1:90:be:4a:23:4c:82:ef:b9:30:d6:0c:50:05:
         e7:f7:d3:a6:31:b5:bc:0a:49:75:71:a1:e4:86:77:f7:73:65:
         e0:ca:c7:58:dd:69:21:f4:60:e5:dd:0d:8d:6e:6e:bc:80:eb:
         f2:29:20:58:f1:50:7c:54:29:69:c1:9a:b9:8a:a3:91:3d:be:
         40:f1:fc:b8:81:a6:84:62:bf:fb:5e:a6:3c:92:b0:fa:cf:b2:
         29:a3:b8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 08:01:44 2024 by rpki-client on console-ams.rpki-client.org