Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/77A99FC8419911EA9B9A146BC4F9AE02.roa
File:                     77A99FC8419911EA9B9A146BC4F9AE02.roa (raw, json)
Hash identifier:          D3fpRnO+H4w2WyJAekG120AEE5NS6PdOTqoTbZ8Xvyg=
Subject key identifier:   EB:E8:4A:CC:BA:7E:7F:3D:DF:45:FD:A7:78:C6:72:30:AB:54:EC:BF
Certificate issuer:       /CN=A91148C8/serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7
Certificate serial:       0AB1
Authority key identifier: 54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/77A99FC8419911EA9B9A146BC4F9AE02.roa
Signing time:             Wed 06 Nov 2024 19:38:14 +0000
ROA not before:           Wed 06 Nov 2024 19:38:14 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     17408
IP address blocks:        103.5.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl
                          rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 17:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2737 (0xab1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91148C8/serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7
        Validity
            Not Before: Nov  6 19:38:14 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=672bc5a6-33f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:61:77:80:2f:3b:a0:1a:d9:3c:f5:68:a8:e9:
                    0a:cf:4f:ce:1c:47:43:4f:6a:e4:88:26:18:cf:33:
                    de:a3:54:64:0d:1a:ad:fa:f7:da:f0:25:c2:1d:99:
                    d9:6b:f2:cc:d1:cf:1e:6d:3a:de:bf:f0:40:95:0f:
                    a5:f4:d1:27:b1:5b:e3:a3:eb:11:cd:fe:4a:90:37:
                    83:7a:96:3a:0a:55:58:d4:6d:50:e0:d9:9b:54:34:
                    42:0b:47:4e:d9:51:ac:74:5a:5c:da:c8:51:76:36:
                    d7:59:50:02:f4:72:ce:50:24:c8:08:17:23:c4:c1:
                    8a:ad:ed:1e:c5:ff:f1:79:c5:75:cc:d6:3e:8b:5c:
                    47:7d:45:85:94:b0:bd:58:25:19:24:f2:67:92:66:
                    a7:11:8c:23:d3:59:1c:c7:57:53:7c:a1:08:8c:e5:
                    8d:60:a8:c9:4d:21:46:c2:68:08:5a:c8:3a:4f:69:
                    c6:a9:8e:d9:d6:87:0a:3b:03:87:15:52:e1:fb:64:
                    9c:1b:fd:41:3c:a2:3e:c1:42:40:1f:93:c7:23:fc:
                    f2:b1:83:0f:b0:ee:6c:fa:f9:62:df:01:16:19:71:
                    e4:e6:31:20:b6:8e:a6:6d:78:bd:c9:6e:8c:cc:5e:
                    aa:9d:cf:81:88:31:e6:3b:f9:17:56:16:57:8c:74:
                    31:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E8:4A:CC:BA:7E:7F:3D:DF:45:FD:A7:78:C6:72:30:AB:54:EC:BF
            X509v3 Authority Key Identifier:
                keyid:54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/77A99FC8419911EA9B9A146BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:d8:c4:3f:b6:d9:d7:4b:7d:c1:2c:be:23:e4:1a:6c:71:73:
         95:4f:1c:de:cb:9b:00:4d:25:7b:4a:dd:46:58:44:fd:be:15:
         5e:4e:d7:6a:4a:e8:1c:60:1d:bc:bc:6d:d8:f1:53:c5:4d:1a:
         13:a2:7c:1c:c0:00:a4:69:4e:2a:38:58:c7:d8:f0:c4:e4:ca:
         1c:92:eb:16:c1:d6:57:13:83:a2:cd:07:92:21:60:b3:c6:ff:
         16:8c:ce:82:96:f1:fa:95:e2:74:be:7b:37:1e:e4:06:52:46:
         e3:43:d0:6b:1e:7e:9e:87:81:77:72:4b:6f:27:7a:41:fb:9d:
         84:f2:79:50:b9:ad:d9:e9:2e:11:7f:37:da:bb:04:3a:32:d0:
         c3:7f:d6:4f:7a:02:50:68:53:77:73:e6:2c:6e:2d:49:30:f7:
         1b:e3:57:8a:6e:7b:fb:f2:14:c1:28:04:28:cd:7e:1e:b7:c7:
         5e:75:c0:b6:4f:80:82:e7:0a:6f:d3:f5:f2:5d:53:38:0c:a1:
         a3:30:8f:cc:f3:15:97:a3:72:3f:81:de:98:28:c2:e4:84:a8:
         c5:34:4f:37:d2:39:d4:b8:cf:f0:08:f7:f9:d1:80:d1:72:b5:
         a0:84:19:da:15:e3:fd:e6:97:f6:2a:2c:be:eb:37:91:4a:2e:
         b1:33:67:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:09:42 2024 by rpki-client on console-ams.rpki-client.org