Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/000E0ABC0F6D11EE9C6BFE46C4F9AE02.roa
File:                     000E0ABC0F6D11EE9C6BFE46C4F9AE02.roa (raw, json)
Hash identifier:          T1SvHlvMUlXiHHTNX2e5nN0Php19sfmAVz7RYyt2PDE=
Subject key identifier:   8B:BA:0F:96:69:09:76:DB:BB:F1:C7:1B:82:43:E3:56:18:E3:7D:FB
Certificate issuer:       /CN=A91215B3/serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE
Certificate serial:       6A
Authority key identifier: 91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/000E0ABC0F6D11EE9C6BFE46C4F9AE02.roa
Signing time:             Wed 27 Dec 2023 05:56:54 +0000
ROA not before:           Wed 27 Dec 2023 05:56:54 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     17539
IP address blocks:        103.48.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl
                          rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 May 2024 05:33:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91215B3/serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE
        Validity
            Not Before: Dec 27 05:56:54 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=658bbca6-d2e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:53:49:a3:ea:78:a8:78:cd:76:5d:97:2f:16:
                    c5:c1:51:5e:00:c9:cb:dc:50:74:c0:94:9e:36:ce:
                    70:bc:79:80:51:63:38:09:00:87:1c:37:27:6b:da:
                    4a:fc:dc:7b:fc:4c:d1:ce:b9:4b:52:02:f1:08:14:
                    e6:11:d5:1c:b6:45:c3:9f:d7:92:c6:b9:36:16:b7:
                    d0:89:cc:34:39:63:df:98:24:be:66:a3:39:fb:87:
                    24:78:5a:38:77:78:48:fe:b1:fb:89:44:ed:c1:e8:
                    e4:a0:e2:7b:2b:69:2c:8f:c5:58:ac:f5:ed:c9:33:
                    29:c3:e2:a3:69:a4:b4:1e:5e:5d:9c:46:e7:fd:e5:
                    9e:7b:c0:12:4a:08:e7:37:7e:c5:5c:8b:98:c3:6c:
                    c8:49:d3:1e:21:ff:6f:2b:85:44:03:f1:a7:fa:9b:
                    61:11:85:82:15:a2:f4:e0:61:83:56:e3:dd:09:d4:
                    09:08:69:57:63:cb:5d:48:f6:5b:28:c7:bd:4a:a5:
                    30:38:40:63:98:a9:ab:9d:a3:ad:80:ae:1c:0c:9c:
                    4e:48:66:af:cc:0c:b6:5a:49:c2:2b:96:4d:13:f8:
                    bb:8c:9a:bc:1d:d2:c2:4d:e8:18:be:51:a4:9c:0c:
                    63:75:7d:ad:ed:20:9d:6a:9b:58:0a:d4:32:18:f3:
                    1f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BA:0F:96:69:09:76:DB:BB:F1:C7:1B:82:43:E3:56:18:E3:7D:FB
            X509v3 Authority Key Identifier:
                keyid:91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/000E0ABC0F6D11EE9C6BFE46C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.48.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:72:97:ed:2d:f6:83:a8:94:18:5e:af:75:5b:41:10:44:fe:
         d2:f0:41:6a:5e:b7:62:c3:d4:37:96:8e:9c:9d:90:70:8e:fe:
         d7:4e:b0:4e:87:73:ef:47:17:23:74:6c:f7:dc:6f:d1:fa:3a:
         98:0c:e9:73:9d:80:ce:d6:a3:c0:52:60:6e:57:9c:83:fb:fe:
         87:42:e9:4e:ac:d2:43:d4:6f:4b:76:71:a4:f8:d2:6a:10:bd:
         4c:51:df:f9:06:cc:bd:8c:ed:a2:9b:9a:3c:6e:7a:21:c4:5b:
         76:48:db:24:26:10:6a:1b:5f:75:60:86:2b:fa:46:b1:e8:b6:
         76:17:c4:74:9f:d3:a6:ce:34:92:d4:ed:71:44:98:59:33:12:
         a4:81:f8:71:39:70:e4:88:63:90:a9:3f:bf:31:38:ba:64:d5:
         d3:80:cd:8c:2a:9a:4f:4f:4b:76:e9:33:79:31:65:75:4f:e0:
         84:20:8a:f9:b7:a9:6e:a3:92:c3:ec:31:be:ca:f6:67:81:d7:
         c3:37:de:ac:71:0a:a3:9b:d5:c0:33:e6:55:10:d9:85:81:8a:
         0c:8e:44:f8:3b:c1:1d:f8:9c:5c:8b:16:0d:ab:09:7b:b0:e6:
         c5:e8:54:40:52:0a:ea:33:d6:5c:13:a8:cd:a3:e8:88:6a:7c:
         e8:c3:ed:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 08:38:33 2024 by rpki-client on console-fra.rpki-client.org