Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/7717CED6419911EA9B9A146BC4F9AE02.roa
File:                     7717CED6419911EA9B9A146BC4F9AE02.roa (raw, json)
Hash identifier:          pCRJQ2jLAd0gXJTFddTmCbM7xMg8KxyZyVVM+pskxgU=
Subject key identifier:   10:6A:DF:13:96:80:62:49:81:7F:7A:28:E6:9C:BB:9F:6C:DB:23:1F
Certificate issuer:       /CN=A91148C8/serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7
Certificate serial:       09F0
Authority key identifier: 54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/7717CED6419911EA9B9A146BC4F9AE02.roa
Signing time:             Thu 02 Nov 2023 20:27:54 +0000
ROA not before:           Thu 02 Nov 2023 20:27:54 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     132827
IP address blocks:        103.11.120.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl
                          rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 20:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2544 (0x9f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91148C8/serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7
        Validity
            Not Before: Nov  2 20:27:54 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=65440649-25ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:85:d3:4c:8e:7e:87:7b:b6:0a:1e:5f:87:59:
                    46:d6:32:f9:48:11:4e:44:ad:ad:ac:01:67:02:96:
                    43:52:3c:f8:89:17:93:4e:7a:50:69:c7:14:53:e1:
                    a2:7f:2b:cd:55:6f:5d:9d:e2:bf:1c:29:dc:a8:15:
                    74:ce:db:78:62:0a:92:ff:c2:ae:ac:4c:bb:f7:ef:
                    18:f8:5a:f9:81:61:84:dc:5e:12:72:4a:87:c2:e8:
                    6a:f2:c5:a0:8a:4c:fc:75:c3:c1:21:bf:45:17:0a:
                    ae:09:af:69:67:94:52:6d:a1:d3:46:ae:59:cc:94:
                    8f:31:71:50:ba:96:5c:83:9f:9b:bb:d6:5e:5d:08:
                    cc:6e:e4:74:4d:e5:36:d2:0f:f9:35:52:24:ce:4f:
                    6d:36:1d:12:f2:52:c4:66:7e:ad:40:6b:41:94:19:
                    9c:fa:7b:a1:1e:d5:3c:bf:fc:50:aa:6e:f0:5e:f2:
                    04:fb:81:a7:40:a0:f4:7c:de:6d:c9:41:03:f9:f9:
                    9c:4f:59:57:cc:f6:8f:8a:57:07:c1:56:64:5f:a6:
                    d1:83:ea:fe:fe:b3:c0:52:16:40:47:ae:d5:c8:29:
                    1f:f1:c0:8b:ac:96:0e:73:25:f9:21:ca:84:bc:29:
                    fe:9d:10:d2:8d:b0:66:39:e2:36:f0:19:26:68:28:
                    98:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6A:DF:13:96:80:62:49:81:7F:7A:28:E6:9C:BB:9F:6C:DB:23:1F
            X509v3 Authority Key Identifier:
                keyid:54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/7717CED6419911EA9B9A146BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:f8:c8:a0:94:2f:42:1f:07:37:42:ff:3d:42:c1:fb:95:27:
         6e:fd:b1:63:72:f8:6e:42:ca:99:c7:c2:fd:2f:1e:74:83:d2:
         2b:dd:fc:70:12:01:89:6c:3d:2e:dc:3a:7b:8b:ee:d7:00:44:
         8e:42:05:51:ea:8d:30:a0:19:e9:83:9e:37:2a:53:f6:be:cc:
         9b:c8:f6:a1:14:6c:52:8f:28:1e:a5:77:5a:43:c8:66:e8:8b:
         25:db:b2:0f:e1:1f:86:1c:e5:56:9a:c8:93:31:87:b4:3c:56:
         99:55:fd:78:51:f2:8d:fe:22:d7:b8:96:b5:d1:50:55:8d:3b:
         44:a5:fa:e0:62:99:29:7a:f9:90:31:95:ba:c5:69:02:83:24:
         63:5a:50:d1:db:79:46:d4:0f:a4:b7:23:cb:35:ad:62:a8:5f:
         8c:2f:bf:4e:45:4d:f1:d6:2f:d9:d4:01:62:bb:3c:a1:ab:38:
         e2:35:93:ae:ee:e5:d4:e1:e4:c0:47:05:92:3a:47:b8:f2:33:
         33:ca:17:a8:36:82:df:e1:00:4e:8a:da:cc:c2:6c:58:97:8f:
         99:51:31:7e:d2:11:d5:c5:e5:7f:43:58:ce:45:a8:4a:ef:bb:
         47:7f:a5:7f:2f:02:2e:b1:01:54:8e:b1:f5:46:bf:92:be:7e:
         2b:c8:97:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 22:34:42 2024 by rpki-client on console-ams.rpki-client.org