Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa
File:                     92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa (raw, json)
Hash identifier:          zYMb1XnG0WFocOb8g6o9H1kl0CBRuaJqUP3nm71UW5w=
Subject key identifier:   8A:46:09:2D:D2:2A:30:E8:57:0D:F5:AF:E8:FB:B8:4D:CB:59:AD:4C
Certificate issuer:       /CN=A91B352F/serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71
Certificate serial:       3444
Authority key identifier: 77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa
Signing time:             Thu 16 Jan 2025 15:30:59 +0000
ROA not before:           Thu 16 Jan 2025 15:30:59 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     56258
IP address blocks:        103.28.93.0/24 maxlen: 24
                          103.28.94.0/24 maxlen: 24
                          103.28.95.0/24 maxlen: 24
                          103.28.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl
                          rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 15:19:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13380 (0x3444)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B352F
        Validity
            Not Before: Jan 16 15:30:59 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=67892633-d0c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8e:ec:bb:18:ff:68:36:75:cf:40:dd:a4:10:
                    c1:f9:9b:8e:0e:0a:60:c6:a4:b3:6f:4c:06:f2:e2:
                    c8:c4:ae:c7:29:80:ad:fa:84:0b:60:db:ad:27:7d:
                    8c:37:5a:18:aa:84:58:7a:8a:df:3c:1d:88:3b:f8:
                    ef:cf:10:53:f3:18:d9:5e:8a:e7:29:fa:41:60:4f:
                    e1:3b:3f:c6:33:6d:44:0b:4b:cf:2e:c4:d1:e2:09:
                    f6:19:be:1b:a1:8f:fd:fd:34:8c:4d:74:a7:ea:d9:
                    16:ea:45:ea:c8:76:e1:9e:eb:2e:41:22:7d:2e:1f:
                    b0:44:27:1c:a6:b2:4c:36:17:91:41:d0:f0:ba:12:
                    d0:3b:70:7d:f2:40:a0:8e:43:a9:9d:f7:46:40:52:
                    9b:53:89:1c:8b:9b:6a:59:a9:9c:d7:9b:c2:6e:4c:
                    f0:e3:bd:72:82:fb:19:75:29:2f:2b:6b:f9:61:dd:
                    d0:e8:26:cd:b9:0e:0a:4c:b7:3c:4a:05:a5:53:89:
                    1c:0d:5f:15:05:5f:2c:69:29:fa:b6:f8:77:ad:24:
                    ff:19:2b:a0:62:38:b4:78:49:2b:09:7b:7d:f4:e0:
                    a1:3c:92:5d:d7:50:30:44:fc:84:75:32:0b:9d:12:
                    d0:27:7b:de:7a:28:13:71:1d:b9:e1:8a:8f:6e:42:
                    b9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:46:09:2D:D2:2A:30:E8:57:0D:F5:AF:E8:FB:B8:4D:CB:59:AD:4C
            X509v3 Authority Key Identifier:
                keyid:77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.93.0-103.28.95.255
                  103.28.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:3c:11:ff:0d:94:31:4c:f2:cd:28:dc:72:1a:81:b5:5e:e1:
         ff:d5:f0:12:e0:d0:f6:34:67:50:24:1d:f0:ef:f0:6f:c5:d1:
         e7:f6:e1:8c:5c:4d:f7:64:6a:fd:83:af:6f:e1:81:92:9b:50:
         57:49:46:29:29:33:25:4d:0b:ad:3b:d2:31:63:8c:9e:09:c9:
         b0:64:5c:f5:cf:90:b7:ee:19:1d:26:c8:0c:99:74:15:22:ff:
         d7:20:70:a6:a9:86:f5:36:e0:88:ee:0f:88:52:23:fa:5d:00:
         82:af:a1:5d:b0:84:b0:ae:60:c4:6e:e5:cf:b0:1e:87:80:d1:
         50:61:a4:09:aa:6b:43:39:84:db:e4:bd:52:20:7f:60:33:e3:
         35:11:1a:04:e6:08:92:fb:94:37:0a:0a:36:46:fb:a5:0a:f2:
         49:ef:85:ad:d8:4c:fb:55:35:15:f2:cc:24:80:6d:20:53:b9:
         0a:7a:6f:4f:64:f6:1c:10:53:8a:fa:d7:15:8d:1e:49:33:a5:
         b6:4a:04:47:b4:b9:a1:57:cf:55:cb:a8:82:21:4f:e9:0e:d1:
         e7:67:cf:68:3e:73:2a:39:cf:78:6b:e4:ce:25:34:82:ff:60:
         30:ca:e6:0e:81:57:40:af:69:87:a0:42:d1:51:9d:7c:e2:80:
         66:8d:25:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:13:28 2025 by rpki-client