Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/7594FBFA2C7311EFA27A6526C4F9AE02.roa
File:                     7594FBFA2C7311EFA27A6526C4F9AE02.roa (raw, json)
Hash identifier:          MW4brkS6iGYL+cXbHPuK8G2FUwzp/GEC0uyblPeDq90=
Subject key identifier:   F3:F1:FC:12:F0:7C:A1:42:BC:33:DF:BD:82:D7:17:F0:8A:CB:77:79
Certificate issuer:       /CN=A91D09B8/serialNumber=E3E8FF079E03FDA43346889D93765B959F6E1D59
Certificate serial:       2C
Authority key identifier: E3:E8:FF:07:9E:03:FD:A4:33:46:88:9D:93:76:5B:95:9F:6E:1D:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-j_B54D_aQzRoidk3ZblZ9uHVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/7594FBFA2C7311EFA27A6526C4F9AE02.roa
Signing time:             Tue 03 Sep 2024 08:20:29 +0000
ROA not before:           Tue 03 Sep 2024 08:20:29 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     140062
IP address blocks:        103.69.164.0/22 maxlen: 22
                          203.14.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.crl
                          rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-j_B54D_aQzRoidk3ZblZ9uHVk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D09B8/serialNumber=E3E8FF079E03FDA43346889D93765B959F6E1D59
        Validity
            Not Before: Sep  3 08:20:29 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d6c6cd-a719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6d:e5:a5:bf:52:30:00:e1:12:57:eb:f7:7f:
                    8a:c5:a3:b9:ab:83:9e:65:83:2d:56:2a:85:6a:6c:
                    b7:67:4a:85:8d:ac:03:17:8d:6e:c1:90:b6:43:a9:
                    99:07:b9:e2:d6:5b:bb:a1:58:ae:84:a9:b4:4e:84:
                    3b:5a:e7:32:bc:58:5b:32:ac:e6:e5:14:05:0f:55:
                    e1:ef:0a:71:06:a3:13:49:73:ef:03:aa:5c:f0:8d:
                    c5:d1:34:0c:21:01:31:3a:31:df:6f:b0:4a:44:84:
                    74:f0:b8:cf:14:e4:47:7f:54:8d:38:dc:06:01:64:
                    e1:81:13:e9:30:8c:62:41:33:c2:7c:4e:8c:85:6c:
                    a6:08:0d:ea:5a:9f:e6:3f:22:30:03:97:1c:49:97:
                    09:fa:a6:e5:f4:89:b0:ba:34:f2:38:da:05:73:84:
                    4b:cd:80:88:43:63:31:e6:e6:8e:ba:29:cb:95:0e:
                    53:12:a7:ee:f5:bc:74:10:f5:54:53:cf:9a:28:79:
                    c3:0e:4e:9c:a4:54:ed:93:cf:e6:10:1d:4e:9f:08:
                    70:87:e3:01:96:68:13:1a:86:ae:1b:78:6f:40:1e:
                    bc:1c:76:fa:59:23:39:2c:9e:d4:0c:5d:bb:b4:96:
                    5e:7a:29:38:b8:50:65:a4:0c:1d:2d:19:a1:9e:9f:
                    3a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F1:FC:12:F0:7C:A1:42:BC:33:DF:BD:82:D7:17:F0:8A:CB:77:79
            X509v3 Authority Key Identifier:
                keyid:E3:E8:FF:07:9E:03:FD:A4:33:46:88:9D:93:76:5B:95:9F:6E:1D:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-j_B54D_aQzRoidk3ZblZ9uHVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/7594FBFA2C7311EFA27A6526C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.164.0/22
                  203.14.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:d3:0b:dd:93:e5:32:55:02:f5:c1:af:34:58:1c:1d:0a:f5:
         dc:05:98:9d:26:ca:47:58:60:15:70:59:d5:31:1c:2b:f3:fa:
         5e:b5:d7:07:5b:33:25:0f:fd:60:5b:4f:35:1d:6d:4d:cb:a0:
         3b:5d:b4:18:bd:a2:4a:05:ce:f9:d3:99:eb:8d:bc:ee:7a:66:
         ae:80:2c:77:8b:a1:87:c2:ba:63:9c:c5:e8:0d:eb:4d:b7:8a:
         8d:d8:ba:b7:57:2f:26:17:f5:cc:6d:8c:f7:2d:1c:bf:5f:83:
         56:a1:35:53:c1:45:20:b9:fa:b6:d3:88:ef:e8:ab:0c:01:1c:
         cc:72:b4:a9:a1:f7:74:3e:28:af:49:4b:46:d8:55:11:17:aa:
         24:96:e0:bf:fe:58:55:c0:86:3c:62:ce:31:80:28:de:72:6f:
         11:3c:40:98:c4:04:b9:df:c8:57:77:0c:74:55:7c:6b:18:65:
         48:4b:25:3c:2c:1d:f9:3d:75:96:55:ee:04:c7:88:9b:84:a2:
         7c:8d:03:98:53:f9:77:3b:fb:25:98:21:3a:61:57:04:5e:c0:
         c4:f8:63:3d:13:ca:36:b4:bc:8d:01:c1:ad:6e:d9:18:9e:38:
         74:30:d3:e6:73:3b:49:23:ee:f7:e6:de:7f:99:e8:80:c4:2f:
         0d:16:52:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:23 2024 by rpki-client on console-ams.rpki-client.org