Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/78423A52DE2911EB9B09A334C4F9AE02.roa
File:                     78423A52DE2911EB9B09A334C4F9AE02.roa (raw, json)
Hash identifier:          bYyvFr8OOyMgsXjmGqishMAmmbBiFzjuP/Np6S14WO4=
Subject key identifier:   4B:C3:48:81:AE:2B:E4:B9:A1:DB:F1:C1:DB:4C:21:06:56:DF:87:1E
Certificate issuer:       /CN=A91F742D/serialNumber=5822270340F32AF8D70922610B7080FC34177ACF
Certificate serial:       0422
Authority key identifier: 58:22:27:03:40:F3:2A:F8:D7:09:22:61:0B:70:80:FC:34:17:7A:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/78423A52DE2911EB9B09A334C4F9AE02.roa
Signing time:             Thu 03 Aug 2023 00:41:38 +0000
ROA not before:           Thu 03 Aug 2023 00:41:38 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     136742
IP address blocks:        103.169.150.0/23 maxlen: 23
                          2407:a3c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.crl
                          rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 02:11:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1058 (0x422)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F742D/serialNumber=5822270340F32AF8D70922610B7080FC34177ACF
        Validity
            Not Before: Aug  3 00:41:38 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64caf7c2-8fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2b:88:35:8c:c3:4f:27:75:1f:fb:65:92:e1:
                    81:fe:f3:f7:f0:6e:4d:27:39:59:7f:bc:bf:d2:1d:
                    07:08:3e:7e:c9:d3:a3:bf:b2:9e:d9:8e:0a:cc:cd:
                    63:f8:0e:f8:e5:68:cb:8a:ae:79:02:47:69:c3:59:
                    e4:60:80:3a:06:0b:5a:9f:1d:3f:09:6d:bb:6d:4d:
                    b4:bb:9a:3c:c0:6f:49:1b:5f:21:5d:b2:eb:4c:47:
                    79:2c:c1:8f:01:89:9a:07:a3:76:71:30:4b:29:22:
                    c8:47:39:5d:bd:31:f0:10:5b:1b:55:a7:7b:80:dc:
                    bf:07:95:32:1d:db:6f:05:06:11:1a:2a:08:48:26:
                    77:cd:80:60:90:bb:38:d5:14:a6:9b:9b:32:62:b9:
                    d2:36:ba:64:4a:a2:1f:d7:18:59:a2:17:22:38:3c:
                    d0:8d:c1:c6:b2:08:8c:79:91:d8:51:5d:5d:c8:a6:
                    51:10:0b:ad:95:a1:bb:b5:3a:52:d3:f6:1c:0f:cc:
                    5e:67:64:22:32:4a:9f:7d:22:b5:6f:65:88:88:cf:
                    96:43:1a:9d:da:5a:11:50:25:cc:29:25:28:0d:2a:
                    66:1e:80:12:1a:31:86:44:5b:f6:3c:0d:c1:c9:d5:
                    c3:9e:f1:d8:ce:76:72:6a:05:90:bf:51:55:b8:3d:
                    d7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C3:48:81:AE:2B:E4:B9:A1:DB:F1:C1:DB:4C:21:06:56:DF:87:1E
            X509v3 Authority Key Identifier:
                keyid:58:22:27:03:40:F3:2A:F8:D7:09:22:61:0B:70:80:FC:34:17:7A:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/78423A52DE2911EB9B09A334C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.150.0/23
                IPv6:
                  2407:a3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:ea:c2:7f:cf:b9:fa:8b:17:a3:dc:dc:cf:fd:d0:9e:b5:7b:
         de:f0:f1:8a:54:2c:92:f5:ff:07:ec:aa:d9:e3:22:e9:85:99:
         b6:aa:d2:a9:c2:f0:38:6f:35:81:dd:52:33:6b:24:b0:9c:a4:
         b4:3e:ca:51:2d:a1:f4:c7:49:19:03:9a:d0:5c:11:c5:77:4b:
         95:1c:25:ce:c4:c4:1a:21:71:37:5b:1b:86:ad:60:3f:a9:0b:
         d8:0f:59:5c:9a:9c:9e:ea:80:d4:c0:3b:91:92:1c:13:07:d1:
         ed:4f:b6:a6:31:0d:8e:12:da:59:44:6c:05:63:ec:5a:a3:f5:
         70:ac:5b:6b:21:de:08:37:bd:ad:62:13:69:60:ff:62:f7:01:
         51:ab:c2:a2:60:e3:0d:ab:56:ae:e2:3e:7c:72:62:12:a1:ad:
         59:8c:8c:4c:79:6c:4e:77:38:3f:d6:ac:89:67:2c:75:7d:54:
         3d:e4:86:54:20:8c:02:ba:53:53:6b:a3:d0:c3:10:ff:9c:13:
         9f:21:7a:75:75:4e:81:4d:32:d3:c4:d0:50:a0:88:30:0e:f2:
         eb:c1:fb:40:9f:8e:06:29:ed:ac:9b:e3:36:90:49:60:42:46:
         8f:4f:0d:a3:47:30:4c:76:a6:ae:58:f6:83:95:9e:4a:94:95:
         60:78:fb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:55:19 2024 by rpki-client on console-fra.rpki-client.org