Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/44D508E43C8311ECA86D031EC4F9AE02.roa
File:                     44D508E43C8311ECA86D031EC4F9AE02.roa (raw, json)
Hash identifier:          3QOta11vc35y6JXZcjdZKP7LNJvcCzJqMrFu6rOzsU0=
Subject key identifier:   0C:39:96:06:CF:37:82:EE:A8:20:D1:A5:F9:9D:40:BB:73:5E:58:89
Certificate issuer:       /CN=A91CA559/serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E
Certificate serial:       03D0
Authority key identifier: 21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/44D508E43C8311ECA86D031EC4F9AE02.roa
Signing time:             Sat 09 Mar 2024 01:54:00 +0000
ROA not before:           Sat 09 Mar 2024 01:54:00 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     45753
IP address blocks:        103.147.224.0/23 maxlen: 24
                          103.231.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl
                          rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 03:19:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 976 (0x3d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA559/serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E
        Validity
            Not Before: Mar  9 01:54:00 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65ebc138-41a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:54:1f:69:24:6e:19:88:67:30:87:8a:ae:91:
                    ae:e0:7a:1e:e6:e3:98:51:4f:ea:16:be:3a:bf:93:
                    fb:4e:5b:a0:74:6f:41:6b:41:30:51:04:1b:ea:59:
                    ac:ef:84:77:87:e5:e4:e6:55:ad:1e:a3:23:15:2a:
                    8d:b3:4a:8b:4b:e8:a6:96:a2:61:e9:3e:32:ba:2e:
                    1a:fe:27:b5:58:82:ec:da:43:15:99:36:ee:27:8b:
                    aa:c5:f9:3d:26:b4:68:93:d5:9b:9b:de:06:b7:6c:
                    91:85:80:cc:44:bb:d8:e2:a5:6d:e5:e5:32:1d:52:
                    d0:f5:b4:c1:4e:6f:66:10:5a:91:ff:73:a3:5e:77:
                    04:86:3d:43:3d:44:b5:fc:f0:96:7e:41:e2:a0:be:
                    52:7c:33:09:e4:94:a3:e6:92:89:4f:33:ee:e8:d9:
                    14:e9:ff:26:df:b5:e3:ff:da:2c:86:95:8d:2d:57:
                    f4:75:6f:b1:09:d4:ad:61:3b:3b:92:4b:cc:23:b8:
                    f8:c1:e4:fb:c2:cd:c7:bf:b0:c8:35:49:8b:11:9f:
                    52:fc:cc:c6:99:3e:b3:16:23:e9:ba:cb:3e:3c:2a:
                    21:78:d3:dc:a2:73:c6:bf:e6:54:fd:e5:f2:02:18:
                    99:31:9c:d7:fd:18:26:c7:a7:d8:3a:4a:f5:93:29:
                    90:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:39:96:06:CF:37:82:EE:A8:20:D1:A5:F9:9D:40:BB:73:5E:58:89
            X509v3 Authority Key Identifier:
                keyid:21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/44D508E43C8311ECA86D031EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.224.0/23
                  103.231.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:2a:44:38:f6:ce:ce:d3:94:0e:18:20:65:86:6f:41:96:c1:
         3f:0f:57:70:36:49:2f:66:e1:b0:ae:9a:39:c2:50:28:87:24:
         09:ed:1d:54:48:22:43:a5:9d:c7:05:85:9b:ff:3c:2b:bb:f8:
         9c:af:e3:6e:d2:db:d3:2f:8a:a9:3b:fb:c3:f8:fc:4e:11:1d:
         c6:99:c5:b9:02:33:e3:b3:e3:2e:a7:5a:46:9c:e4:73:b9:58:
         33:2e:a9:e4:c4:50:d1:bf:fc:9b:77:46:a1:ad:a7:ee:7d:26:
         00:07:bf:bf:97:00:3c:92:ba:b3:2f:f2:12:65:2f:aa:f5:22:
         c1:fc:71:e7:59:e2:39:bf:bb:a6:25:fc:de:58:ce:78:75:31:
         07:99:f7:b0:16:69:4e:99:27:65:d3:1e:1d:f5:87:d8:14:9d:
         80:e4:d4:80:66:db:66:d6:97:2f:ec:9e:9d:53:19:50:84:f2:
         70:7c:a1:33:4d:57:d1:e9:5e:39:a3:4c:d2:5d:ab:25:0d:36:
         fa:09:38:8c:68:c7:5f:4f:2c:f3:5d:55:27:09:c5:1d:3e:04:
         da:d0:6e:d9:e7:f3:2a:59:a6:85:c2:26:23:b1:04:1e:6a:f3:
         38:14:d0:e8:7b:ac:43:e9:02:d0:11:72:79:b1:9d:19:25:b0:
         60:24:31:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:07:31 2024 by rpki-client on console-ams.rpki-client.org