Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/FA57A19A72CE11ED9E7FF20FC4F9AE02.roa
File:                     FA57A19A72CE11ED9E7FF20FC4F9AE02.roa (raw, json)
Hash identifier:          yJ4lShlDGyRUFuRYtdd4tf+gPrXiWJKg0kEkwM3sQJc=
Subject key identifier:   EC:3E:FE:76:2F:9F:F4:E7:B2:2F:E7:FF:02:BD:1B:80:DD:A0:07:2F
Certificate issuer:       /CN=A91D5749/serialNumber=795301C68F87F04A1F9F499BDF2D29F38457FBD3
Certificate serial:       014C
Authority key identifier: 79:53:01:C6:8F:87:F0:4A:1F:9F:49:9B:DF:2D:29:F3:84:57:FB:D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVMBxo-H8Eofn0mb3y0p84RX-9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/FA57A19A72CE11ED9E7FF20FC4F9AE02.roa
Signing time:             Sat 07 Sep 2024 04:46:22 +0000
ROA not before:           Sat 07 Sep 2024 04:46:22 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     134213
IP address blocks:        103.191.106.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.crl
                          rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVMBxo-H8Eofn0mb3y0p84RX-9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:11:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5749/serialNumber=795301C68F87F04A1F9F499BDF2D29F38457FBD3
        Validity
            Not Before: Sep  7 04:46:22 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66dbda9e-f6ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:54:21:05:83:3e:66:9c:b0:fb:45:eb:b2:2a:
                    d6:fc:30:e4:f4:16:fe:3d:40:30:a6:f7:5d:a7:17:
                    4d:9b:ae:12:5c:14:8e:0a:83:60:d4:d7:e1:09:ff:
                    b7:87:54:03:1b:12:51:cb:80:ff:53:6f:3b:2c:d7:
                    2e:46:d9:0f:8b:92:a4:41:e2:2a:31:f1:72:4c:fe:
                    17:73:07:0f:8c:23:d9:26:a3:f6:f9:70:fa:69:92:
                    01:d9:5f:f1:cf:aa:31:d2:30:ea:a8:7f:99:21:d6:
                    a9:54:3f:eb:07:78:a8:4b:26:5c:ad:aa:a9:9e:af:
                    3a:72:0d:c9:54:de:4a:a9:f9:e4:99:59:89:21:ed:
                    0e:69:02:81:93:81:1c:92:24:41:58:46:b4:af:bd:
                    92:3a:51:58:38:28:36:a5:cf:fe:cc:87:60:09:f5:
                    25:d4:ea:c9:97:92:49:b9:a3:40:4a:2d:e0:e6:60:
                    2b:ee:bc:f8:25:bd:71:4d:7d:ea:f8:f7:c3:ef:22:
                    ff:ca:27:24:63:44:af:45:5b:5b:2d:fb:d4:fa:89:
                    cf:92:41:c9:7b:ca:99:e4:da:71:a7:35:6a:84:c8:
                    1f:35:72:f3:36:b0:7e:fe:b6:50:e0:f3:39:46:ab:
                    c1:7c:95:c0:d1:1c:fa:34:8f:e4:bc:7e:22:37:5b:
                    e6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3E:FE:76:2F:9F:F4:E7:B2:2F:E7:FF:02:BD:1B:80:DD:A0:07:2F
            X509v3 Authority Key Identifier:
                keyid:79:53:01:C6:8F:87:F0:4A:1F:9F:49:9B:DF:2D:29:F3:84:57:FB:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVMBxo-H8Eofn0mb3y0p84RX-9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/FA57A19A72CE11ED9E7FF20FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:2d:c4:13:3b:d3:f6:8b:69:0d:98:aa:3f:16:ba:7b:02:01:
         66:a7:ae:dd:e9:be:2a:f3:bc:1d:4e:aa:a5:b9:c7:66:3d:31:
         ea:49:29:62:c5:01:57:92:a5:e6:6e:ae:18:50:22:69:7a:78:
         9e:c4:5d:e9:53:2e:11:72:01:21:b7:5e:8f:87:4e:ee:8e:2b:
         7e:b1:93:f8:ee:3c:94:16:ea:5d:6d:c0:b6:ea:88:21:33:4b:
         af:9f:a1:32:7b:20:d8:c4:31:85:2b:1e:04:ac:e7:7c:dc:da:
         52:04:91:3d:e8:cd:39:88:49:c3:a3:a7:59:d9:4e:96:65:2a:
         86:84:5c:da:e5:e9:0f:1b:e8:35:72:f8:12:84:e0:1e:f3:e2:
         b7:c8:34:41:01:0c:3c:d2:d2:c4:43:81:bf:04:fc:93:a1:0e:
         c8:fc:e1:d9:07:31:1a:ae:b0:8b:b9:98:c6:1d:20:e6:b1:86:
         18:b1:23:81:4c:ce:6a:d2:55:68:46:11:ab:ac:3f:31:d6:4b:
         bf:11:3e:52:d5:b8:92:a2:07:ca:4d:06:98:c0:c6:6d:2f:2d:
         1d:d3:c2:1c:7d:92:19:cb:da:ac:a8:54:ba:96:0d:77:cd:68:
         64:1a:79:48:9e:15:86:9c:41:6f:79:28:bd:6e:a7:26:3b:d0:
         c3:e2:f5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:52 2024 by rpki-client on console-ams.rpki-client.org