Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/D02785608C0911EAAFF6CD27C4F9AE02.roa
File:                     D02785608C0911EAAFF6CD27C4F9AE02.roa (raw, json)
Hash identifier:          +ZoYuDO9wAVloWs+RKSdtnSjreDZ79KVPWBVCdqCAGk=
Subject key identifier:   5F:73:F4:DC:E9:09:97:74:AE:82:3A:F2:FE:67:61:D5:C7:A6:77:FA
Certificate issuer:       /CN=A91A8666/serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592
Certificate serial:       0895
Authority key identifier: 32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/D02785608C0911EAAFF6CD27C4F9AE02.roa
Signing time:             Fri 20 Oct 2023 20:49:25 +0000
ROA not before:           Fri 20 Oct 2023 20:49:25 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     17802
IP address blocks:        203.210.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl
                          rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 21:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2197 (0x895)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8666/serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592
        Validity
            Not Before: Oct 20 20:49:25 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6532e7d5-d903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:87:73:26:8b:f5:d2:ae:c1:da:e3:86:05:a5:
                    a3:a8:c9:9c:f6:f6:4b:ec:42:f0:c4:0b:51:50:2f:
                    c6:d4:14:ce:a8:bc:cb:e0:f1:90:b4:6a:2b:cd:34:
                    6b:6a:87:c5:b0:d8:eb:f0:f3:fb:3d:4d:5d:63:70:
                    03:0c:dc:9d:6d:51:19:fe:3a:f4:2a:b9:94:8f:ab:
                    f1:e9:09:c5:53:c4:93:96:55:1c:7a:ac:1a:13:d7:
                    9e:d2:a4:a7:c6:fe:4e:9a:71:07:b2:d8:f4:70:f5:
                    6e:c4:f0:d1:83:31:a0:1e:6d:cb:7e:96:ed:8e:3e:
                    b2:3c:4f:25:a0:38:f2:20:e6:b9:81:df:74:43:d8:
                    70:eb:53:6b:a5:bb:f8:6a:f0:2c:6b:b2:a0:09:70:
                    b3:4e:59:ad:61:eb:34:a5:85:fc:f7:24:19:93:ed:
                    7c:30:39:ce:54:0c:e4:4e:2e:ba:c0:cb:2d:f0:7c:
                    60:81:d8:04:06:92:62:d4:bc:a0:e0:2c:a8:99:87:
                    0a:e8:6a:db:17:ab:01:03:fe:ca:f0:28:47:89:cc:
                    40:cd:f4:70:81:c4:9e:5d:33:49:2d:86:38:e1:2d:
                    4e:97:41:2b:11:2e:7c:c5:04:b2:86:78:a0:14:11:
                    ac:3c:c6:95:ad:fa:49:9f:c3:2e:35:af:ad:e4:33:
                    be:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:73:F4:DC:E9:09:97:74:AE:82:3A:F2:FE:67:61:D5:C7:A6:77:FA
            X509v3 Authority Key Identifier:
                keyid:32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/D02785608C0911EAAFF6CD27C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.210.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:28:a7:e8:6a:17:3e:df:6a:96:43:b0:15:d5:83:9a:ef:ac:
         ca:16:76:3f:79:07:90:5d:2f:ea:e3:31:36:67:0e:83:75:30:
         da:36:ec:b2:b6:ce:02:05:f4:a2:db:4c:9e:a9:83:f0:8d:11:
         a9:91:14:fe:c3:7e:55:f1:1d:59:05:6a:cb:58:98:3d:83:b8:
         9d:7b:5f:51:dc:ff:98:57:c9:39:e7:9b:27:cd:8c:31:56:39:
         89:4e:c7:ac:d3:52:73:b7:27:47:65:1b:8f:45:b5:09:1d:17:
         f1:19:ce:00:36:4c:18:d2:a3:9b:21:dc:8d:0f:c8:3f:aa:56:
         4a:67:90:09:13:74:74:a9:d3:09:df:3b:c1:90:96:ec:26:b1:
         08:17:42:05:3a:9a:10:3b:33:3e:db:6f:06:c6:cf:a1:2f:c0:
         05:6e:3e:c0:78:9a:3c:ea:eb:1f:1f:cb:7d:fd:4c:1e:20:1f:
         10:3b:ff:3e:a4:66:6a:b7:91:d9:da:0e:37:45:d9:bc:14:96:
         59:e0:77:4e:6f:a5:5f:8c:fc:0c:32:55:fa:a7:a8:1e:d8:aa:
         15:4d:d6:90:76:3a:97:68:6e:29:d3:46:21:cf:ad:8d:f2:ee:
         4a:ab:5d:88:39:e1:41:4e:92:71:a0:79:7b:72:38:13:ad:91:
         e7:06:5a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:05:47 2024 by rpki-client on console-fra.rpki-client.org