Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/64C2A71ABDA111EDBD64FF45C4F9AE02.roa
File:                     64C2A71ABDA111EDBD64FF45C4F9AE02.roa (raw, json)
Hash identifier:          dRugnvPCQiBNb+WQNh6W0b1ZsT8QPFl0UqLiJ+05S8Q=
Subject key identifier:   BF:81:3F:2A:7E:DD:63:FD:72:41:0A:95:3F:44:5F:C8:49:9E:7E:C0
Certificate issuer:       /CN=A91A6104/serialNumber=9B25BD2CE3559032B5EB4457E05C810AE8B8AAAC
Certificate serial:       0A74
Authority key identifier: 9B:25:BD:2C:E3:55:90:32:B5:EB:44:57:E0:5C:81:0A:E8:B8:AA:AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myW9LONVkDK160RX4FyBCui4qqw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/64C2A71ABDA111EDBD64FF45C4F9AE02.roa
Signing time:             Mon 30 Oct 2023 19:47:54 +0000
ROA not before:           Mon 30 Oct 2023 19:47:54 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     150774
IP address blocks:        103.142.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/myW9LONVkDK160RX4FyBCui4qqw.crl
                          rsync://rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/myW9LONVkDK160RX4FyBCui4qqw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myW9LONVkDK160RX4FyBCui4qqw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Jun 2024 20:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2676 (0xa74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6104/serialNumber=9B25BD2CE3559032B5EB4457E05C810AE8B8AAAC
        Validity
            Not Before: Oct 30 19:47:54 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65400869-5132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a1:21:4e:8e:95:19:3a:bb:16:9f:5e:6d:4c:
                    ac:f4:43:cd:ec:f6:88:91:8a:c4:45:91:ba:75:a1:
                    6c:0a:2a:95:fa:7e:c2:4f:86:48:4c:71:cd:25:5f:
                    ae:f3:b5:de:3d:26:1c:af:93:46:21:d7:41:99:00:
                    5d:4e:14:8b:dd:b6:d0:28:0d:e1:b1:2e:23:ea:0f:
                    c0:8b:ea:b2:a0:46:a7:69:71:d0:55:7e:e0:fa:54:
                    dc:f7:92:86:db:f6:e0:9f:65:14:9d:f1:32:9e:81:
                    91:3a:c8:f6:c1:ae:b6:3a:cf:ce:c1:97:9e:63:be:
                    6b:5a:fa:41:3c:ff:40:84:3a:dd:cb:e3:d2:f5:62:
                    02:21:bd:ca:4a:51:5b:29:eb:19:4d:9f:86:c4:7f:
                    b3:5f:1b:09:b3:92:c2:d7:b7:13:79:28:71:d1:d4:
                    e5:02:8a:f5:65:55:9c:81:a7:4b:1f:e6:78:9b:6b:
                    d7:e1:d7:53:f4:df:2e:47:dd:9b:0d:0a:04:69:74:
                    37:4d:0a:10:b8:d5:14:84:89:81:8a:12:99:f3:3c:
                    81:0e:ad:85:36:d7:6e:db:fc:e5:85:02:6f:6a:bd:
                    e4:1c:e4:e5:f8:42:02:d0:f4:88:a9:47:ea:71:5a:
                    65:53:26:d9:d4:10:2a:f7:0a:5f:ba:28:e1:8c:5a:
                    f7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:81:3F:2A:7E:DD:63:FD:72:41:0A:95:3F:44:5F:C8:49:9E:7E:C0
            X509v3 Authority Key Identifier:
                keyid:9B:25:BD:2C:E3:55:90:32:B5:EB:44:57:E0:5C:81:0A:E8:B8:AA:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/myW9LONVkDK160RX4FyBCui4qqw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myW9LONVkDK160RX4FyBCui4qqw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/64C2A71ABDA111EDBD64FF45C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:d1:6e:f8:4f:52:f0:97:69:bc:7c:fc:28:0e:f2:af:6b:24:
         d0:da:22:86:f4:19:f2:fc:9a:ad:91:a1:54:bc:99:7e:78:9a:
         70:91:89:3d:ee:03:43:fa:b8:4a:91:56:80:2a:51:10:e7:ce:
         c9:35:aa:7c:e1:81:54:81:5b:2b:99:06:55:0f:43:b6:07:e4:
         40:56:21:fd:45:3e:5c:d0:0d:da:0f:37:29:7e:7e:e3:b4:46:
         b4:1b:94:60:ec:67:97:f2:46:e7:3b:33:e3:e5:9c:a3:45:05:
         7a:8a:8c:01:3f:64:51:13:f4:05:44:13:3d:d7:5a:cf:94:2a:
         cd:74:2b:b2:23:8c:c9:2d:70:9b:5a:e6:f1:55:62:9f:53:11:
         4e:a3:1a:ad:98:6d:a2:d6:87:05:9e:34:d0:18:32:56:6a:2f:
         15:99:56:14:ee:03:3f:2b:aa:30:50:e9:8d:f1:6b:b8:67:b4:
         92:ad:91:b1:6b:35:31:a2:6e:06:ba:f9:e6:e2:81:22:7a:d1:
         c1:d8:2a:04:83:34:cb:63:59:02:ff:67:16:b5:07:aa:6f:f2:
         1d:5a:17:29:55:99:f0:0d:7f:ef:e5:4e:79:6d:51:1c:75:24:
         31:49:1e:f7:bb:0b:7f:e3:07:d9:ff:13:b6:6a:5b:01:73:9b:
         49:ed:72:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 21:14:27 2024 by rpki-client on console-ams.rpki-client.org