Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/020CA7B24E4C11EC8045E71EC4F9AE02.roa
File:                     020CA7B24E4C11EC8045E71EC4F9AE02.roa (raw, json)
Hash identifier:          tyZWDAn9bcgruEQUmKMpj2KMCjpkdyP72IeeYTIEOW8=
Subject key identifier:   41:BC:99:C4:0B:C7:6F:E1:59:79:43:EB:86:D8:10:80:7A:83:85:57
Certificate issuer:       /CN=A91AC73E/serialNumber=243F2D44727F1D1B8079F4014F69F4A074D1F1EA
Certificate serial:       0457
Authority key identifier: 24:3F:2D:44:72:7F:1D:1B:80:79:F4:01:4F:69:F4:A0:74:D1:F1:EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/020CA7B24E4C11EC8045E71EC4F9AE02.roa
Signing time:             Wed 06 Nov 2024 23:42:56 +0000
ROA not before:           Wed 06 Nov 2024 23:42:56 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     147190
IP address blocks:        103.174.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl
                          rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1111 (0x457)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC73E/serialNumber=243F2D44727F1D1B8079F4014F69F4A074D1F1EA
        Validity
            Not Before: Nov  6 23:42:56 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=672bff00-4463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:61:b3:03:71:d3:e3:35:96:80:be:82:51:05:
                    c5:fb:2b:d4:b0:47:a9:b9:aa:f8:ca:a6:66:df:21:
                    e0:2e:85:f6:c0:e3:3b:0d:42:84:5c:11:b0:0a:f3:
                    61:4f:1c:0e:15:44:d8:14:67:cd:c2:f8:b9:11:0c:
                    f3:8d:18:22:31:5e:80:ec:bd:72:84:0f:c4:5b:e0:
                    0a:71:03:e4:01:1e:56:2b:77:96:a4:fa:99:23:98:
                    1e:1d:59:da:d9:f3:22:2a:73:94:1e:2c:49:f2:dc:
                    02:1d:7f:b1:8a:4d:d6:e4:78:fa:b2:e9:3b:17:ae:
                    6f:a3:78:68:99:ae:5e:37:f3:89:fd:87:f3:c5:e1:
                    ad:d9:f4:8c:66:09:7b:0b:4c:bd:e8:7d:e9:1c:15:
                    58:07:63:1c:8f:d8:a5:49:27:75:bf:67:2a:d6:f1:
                    c6:93:93:28:22:ab:37:f9:45:fd:c8:d3:93:74:31:
                    70:f4:4d:4d:0f:cd:b8:33:09:22:ff:ac:f5:1d:a5:
                    81:c3:cc:95:e3:64:a3:9e:1e:24:1b:27:3e:f6:92:
                    62:12:40:75:97:56:51:46:76:e7:07:90:6e:7c:67:
                    d8:83:09:dc:4a:be:ab:2e:1a:78:51:c5:dc:0c:54:
                    ad:d1:f2:1c:12:ab:f4:71:7d:62:8c:ff:e2:86:c1:
                    a3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:BC:99:C4:0B:C7:6F:E1:59:79:43:EB:86:D8:10:80:7A:83:85:57
            X509v3 Authority Key Identifier:
                keyid:24:3F:2D:44:72:7F:1D:1B:80:79:F4:01:4F:69:F4:A0:74:D1:F1:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/020CA7B24E4C11EC8045E71EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:00:c3:f1:88:3e:e6:21:c1:96:dd:75:09:d5:ec:fb:03:cd:
         93:d4:e9:0b:ee:8e:ec:fa:de:51:6e:2e:cb:21:fa:f6:d4:de:
         10:ed:18:62:61:e8:18:1b:ec:96:fe:ff:ec:ed:e4:35:0f:08:
         e5:89:3c:1b:be:53:ce:4c:28:a7:14:5b:b2:a9:eb:d1:4c:37:
         0c:2b:9f:b1:88:21:4d:2a:59:f7:5b:52:1a:6f:cc:1a:8b:f9:
         5e:66:39:e3:f3:eb:77:4b:68:09:ac:47:09:32:76:18:d8:b4:
         e3:94:62:3b:18:a0:56:a3:e0:b0:9c:30:62:3c:0d:e5:11:fc:
         fe:0d:55:6b:0a:85:79:38:fa:a9:7d:b4:95:b9:68:39:76:ba:
         b2:60:4b:f2:96:75:99:00:bc:7d:19:0c:0f:d6:5e:b6:60:33:
         45:d1:2c:27:22:82:aa:4a:93:eb:67:54:04:a4:18:d3:41:d3:
         7b:c3:24:85:c1:18:26:91:0d:fd:97:ed:48:9e:8a:91:97:6d:
         c4:43:77:36:a0:b2:6e:9a:0c:2b:5d:cb:e4:18:6b:8b:9a:1e:
         43:79:77:46:9d:c7:6a:91:de:30:f1:33:db:c8:11:34:cf:ff:
         8b:5f:75:80:c1:ea:7b:34:74:f2:37:b4:4b:4b:a5:71:c9:71:
         e0:42:3e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:37 2024 by rpki-client on console-fra.rpki-client.org