Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/CFD605CC8E6011EC93F6710FC4F9AE02.roa
File:                     CFD605CC8E6011EC93F6710FC4F9AE02.roa (raw, json)
Hash identifier:          C3Z8uyv87Fr4LSIUMfrdpfjs+vlcYD0NZXPlFdAyO8U=
Subject key identifier:   2A:C4:8D:C7:60:5A:A2:B7:ED:A5:2C:C3:C1:5D:E5:BB:E0:51:0F:4F
Certificate issuer:       /CN=A91262BD/serialNumber=D2E78E52C5DBCBF5E1841DACE527AEAA894A9A76
Certificate serial:       0547
Authority key identifier: D2:E7:8E:52:C5:DB:CB:F5:E1:84:1D:AC:E5:27:AE:AA:89:4A:9A:76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/CFD605CC8E6011EC93F6710FC4F9AE02.roa
Signing time:             Fri 23 Feb 2024 00:43:10 +0000
ROA not before:           Fri 23 Feb 2024 00:43:10 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     58715
IP address blocks:        103.106.118.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.crl
                          rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 May 2024 00:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1351 (0x547)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262BD/serialNumber=D2E78E52C5DBCBF5E1841DACE527AEAA894A9A76
        Validity
            Not Before: Feb 23 00:43:10 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65d7ea1e-874b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:55:8f:0e:49:3a:18:6c:2f:4a:c4:31:cf:29:
                    7b:c7:a7:93:72:c6:c2:cf:51:12:92:d2:36:fd:3c:
                    63:cc:db:d1:27:62:4c:75:13:2f:1f:ef:4b:49:30:
                    9a:9a:1b:4d:0e:dc:8f:03:3d:c8:c3:91:ce:40:2e:
                    4e:6f:dc:cc:f8:6c:c3:15:66:2b:17:23:80:5c:65:
                    8c:94:12:2f:df:eb:90:2e:04:94:27:ce:8c:cd:b6:
                    b8:e6:76:74:bd:81:ee:9a:c5:81:5e:f9:c0:5c:a9:
                    97:02:a1:c7:45:fd:96:52:06:ea:a7:14:6e:4d:93:
                    dc:ea:ba:6d:c9:b9:f4:97:f4:b5:b4:f0:94:e4:fb:
                    0d:99:88:bb:7d:dc:dc:47:38:f5:81:c8:30:c6:e0:
                    02:c3:4d:5b:8d:95:37:8e:e7:a4:66:57:aa:2d:85:
                    c4:96:90:07:70:c4:fc:aa:ae:9f:ba:e6:e4:5e:1d:
                    31:96:be:3c:d8:93:e6:15:21:9d:78:96:09:b3:c4:
                    83:7c:61:fd:2b:83:b6:32:d5:db:21:db:e7:b6:63:
                    01:d6:c4:30:9d:fd:07:02:a7:1f:af:66:a9:f9:ca:
                    02:b3:fc:4e:98:a1:23:bb:96:e4:63:7f:c1:2c:97:
                    39:45:ea:6e:af:d4:33:6d:e6:95:6b:ad:c3:a0:19:
                    b4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C4:8D:C7:60:5A:A2:B7:ED:A5:2C:C3:C1:5D:E5:BB:E0:51:0F:4F
            X509v3 Authority Key Identifier:
                keyid:D2:E7:8E:52:C5:DB:CB:F5:E1:84:1D:AC:E5:27:AE:AA:89:4A:9A:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/CFD605CC8E6011EC93F6710FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:35:83:de:b1:cb:87:7d:19:f6:b6:3c:b0:3b:9d:72:99:4c:
         19:ae:a0:be:f4:eb:d0:61:38:a7:c8:43:46:c0:83:04:da:75:
         fc:42:52:8d:59:7c:78:67:45:bf:f2:ee:6c:ed:d1:5a:08:52:
         bc:7f:cd:6f:d6:22:18:14:00:b3:48:3f:dd:5c:ef:71:18:8b:
         e7:42:f7:ca:5b:9b:8e:3e:1e:db:5b:e8:70:ef:1f:d9:73:5f:
         9c:2d:af:af:93:00:55:90:ee:26:f4:03:5f:df:66:84:9d:4b:
         7d:72:9b:25:86:f4:05:3b:71:73:f2:16:c8:d3:85:0e:e0:50:
         41:59:ea:7e:23:d2:67:a2:c9:6b:96:19:7c:1c:4f:16:2d:3d:
         a3:32:30:65:6e:55:97:cb:12:2a:47:97:f1:2e:75:b3:d7:8f:
         32:1c:2b:a1:19:00:35:4a:c1:62:59:24:c7:c2:b1:28:f5:e0:
         9a:69:84:16:9c:f7:e2:b2:5f:e8:eb:6e:be:01:fb:2b:da:fe:
         12:cc:86:dd:f1:c4:c6:4e:d2:d2:97:c9:97:b3:b6:cb:c0:aa:
         b4:d2:1f:9e:fe:da:f2:b9:a4:63:7b:a3:1a:58:51:66:cb:f8:
         b7:49:b8:33:f5:a5:44:c3:00:98:61:2d:7f:24:8e:3d:df:26:
         43:8c:80:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:36:28 2024 by rpki-client on console-fra.rpki-client.org