Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8304B142B34711EC90A6DA67C4F9AE02.roa
File:                     8304B142B34711EC90A6DA67C4F9AE02.roa (raw, json)
Hash identifier:          uCv95XSbl6UUUCthtxA8ImAYONQ7dGmFmJ6q40v/ErE=
Subject key identifier:   7A:FB:44:8D:EB:59:DC:17:7E:9F:29:C1:DF:58:D0:CF:F2:C8:E1:DD
Certificate issuer:       /CN=A91B49C0/serialNumber=F1501920A55F3A7C271039149FFA28A7C1CC38F1
Certificate serial:       023E
Authority key identifier: F1:50:19:20:A5:5F:3A:7C:27:10:39:14:9F:FA:28:A7:C1:CC:38:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8304B142B34711EC90A6DA67C4F9AE02.roa
Signing time:             Sat 11 Nov 2023 02:54:12 +0000
ROA not before:           Sat 11 Nov 2023 02:54:12 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     139726
IP address blocks:        103.144.52.0/23 maxlen: 23
                          103.144.52.0/24 maxlen: 24
                          103.144.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.crl
                          rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 04:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 574 (0x23e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B49C0/serialNumber=F1501920A55F3A7C271039149FFA28A7C1CC38F1
        Validity
            Not Before: Nov 11 02:54:12 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=654eecd4-2953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ea:9d:c1:71:68:56:29:37:76:c6:59:ad:17:
                    52:75:fa:13:c7:8c:79:0b:e3:98:a3:87:4c:b9:f6:
                    39:cb:19:3c:2d:66:b8:81:3f:5a:73:8d:c0:be:0d:
                    ac:f3:c5:a6:23:da:d0:db:90:e7:10:f1:5b:16:33:
                    cb:a6:0f:61:fd:53:53:2a:57:de:27:c7:96:10:64:
                    80:ab:3b:17:a2:87:79:12:bd:5e:3e:ab:4f:00:5f:
                    d1:ff:55:13:67:d1:78:69:ca:74:24:ef:4c:99:18:
                    c2:7a:e7:52:00:cc:5f:7c:7a:2c:31:ef:9f:d9:5a:
                    32:b2:4f:65:64:c5:2c:a7:22:67:cb:8b:0c:10:2a:
                    a4:98:e9:c7:17:8a:6a:16:f5:a1:69:82:a7:e3:a9:
                    fe:01:15:69:b9:89:00:45:b0:3c:37:6d:30:9a:1d:
                    f8:28:d0:68:24:6b:45:b8:40:30:1c:60:af:1f:41:
                    d1:b6:6b:ad:51:5e:fb:5d:c5:c2:be:d4:b0:94:21:
                    f1:03:9b:dd:9a:3e:0e:b6:04:74:d4:90:a3:2b:74:
                    d7:00:66:06:0a:83:8e:99:77:2f:de:78:53:4d:e6:
                    4f:8c:57:38:31:58:4c:67:6f:e9:66:ec:df:6b:40:
                    40:ff:18:dc:7c:f5:e5:be:d7:07:7c:ba:71:b4:0e:
                    d9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FB:44:8D:EB:59:DC:17:7E:9F:29:C1:DF:58:D0:CF:F2:C8:E1:DD
            X509v3 Authority Key Identifier:
                keyid:F1:50:19:20:A5:5F:3A:7C:27:10:39:14:9F:FA:28:A7:C1:CC:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8304B142B34711EC90A6DA67C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:5a:79:41:dc:5b:07:5d:81:5c:9c:31:61:c1:31:bb:51:50:
         b5:0d:bf:02:c6:bf:af:99:0d:0b:6b:d5:67:9b:d7:08:7a:e1:
         07:03:31:a1:54:c2:bb:8c:6a:00:86:99:83:5d:37:21:92:7a:
         6a:5e:15:40:fe:12:31:d0:ac:7f:45:bc:f5:35:25:e6:cb:0c:
         03:30:98:36:99:fa:c6:5c:09:1d:01:bc:89:ac:e9:d3:fe:95:
         48:c5:25:41:39:db:6c:47:07:3c:78:ad:78:4e:32:42:66:7f:
         9a:c3:78:2f:58:09:d0:10:ec:98:54:7d:de:f0:1b:13:80:7a:
         26:4f:d5:16:24:ad:26:e8:be:5e:24:8c:54:49:0f:0d:ee:05:
         ed:a9:6d:24:25:fa:37:4e:79:ea:d5:64:0d:c0:ca:dd:a3:7a:
         cf:17:95:f9:b5:6f:fa:20:2f:c9:a6:41:55:ae:16:68:fb:b7:
         da:69:e7:9e:3f:ab:27:cc:aa:80:cc:a7:84:e6:df:67:92:39:
         19:4f:b1:8c:bf:0e:bb:f5:d3:d6:69:37:59:97:f8:a1:4d:cf:
         ac:e1:fc:d3:01:25:72:c9:fc:ef:50:48:67:75:1f:21:21:e5:
         5f:ed:22:c2:e1:b4:50:a2:24:6c:58:73:6d:1d:7a:31:bb:7d:
         d1:28:49:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:08:25 2024 by rpki-client on console-ams.rpki-client.org