Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/54365208708411EDA8B14246C4F9AE02.roa
File:                     54365208708411EDA8B14246C4F9AE02.roa (raw, json)
Hash identifier:          AAsU3r5wEkF6f9iXxm6/6FcRALPM6e8iuLNdCiCtbqk=
Subject key identifier:   D4:19:6A:DD:DD:2C:CE:A5:46:39:CF:D3:88:25:2B:FD:DC:25:4A:2F
Certificate issuer:       /CN=A91285E3/serialNumber=1DEFB20A7A51EE18DD7AD06ADAAC4911E3E2F794
Certificate serial:       CC
Authority key identifier: 1D:EF:B2:0A:7A:51:EE:18:DD:7A:D0:6A:DA:AC:49:11:E3:E2:F7:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He-yCnpR7hjdetBq2qxJEePi95Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/54365208708411EDA8B14246C4F9AE02.roa
Signing time:             Tue 19 Dec 2023 04:55:12 +0000
ROA not before:           Tue 19 Dec 2023 04:55:12 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     147181
IP address blocks:        103.42.4.0/23 maxlen: 23
                          103.42.4.0/24 maxlen: 24
                          103.42.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.crl
                          rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He-yCnpR7hjdetBq2qxJEePi95Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91285E3/serialNumber=1DEFB20A7A51EE18DD7AD06ADAAC4911E3E2F794
        Validity
            Not Before: Dec 19 04:55:12 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65812230-1c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a6:63:a7:e8:b0:e1:65:7c:52:ae:d4:99:d4:
                    33:50:5e:ad:7e:fa:5f:8d:66:61:4f:1f:eb:a5:bb:
                    79:3b:bf:ee:e4:dd:2c:f6:f7:42:b6:c2:b1:5d:5c:
                    41:98:fa:d4:60:ee:51:93:68:d5:83:b8:ad:17:2f:
                    d5:78:21:d1:ce:0c:2a:1f:19:cb:c3:27:2b:35:46:
                    cd:71:6c:c5:b3:a9:f2:33:ab:43:74:5d:34:4c:5f:
                    b6:dd:e7:4f:e9:a9:d4:97:7e:0f:4c:56:65:b8:c9:
                    1f:98:6a:ae:6b:8c:2d:9c:6d:cd:2b:0b:b7:cd:af:
                    f0:71:dc:5f:c1:15:79:3b:3a:4b:4d:50:34:76:6f:
                    87:ba:7f:bc:b2:3c:63:66:aa:01:31:3d:ab:30:ae:
                    8f:fb:78:a3:ef:7c:12:de:34:74:38:79:94:cb:f5:
                    fe:da:5b:02:43:64:e4:02:eb:d4:25:3b:c7:93:a9:
                    b6:bf:af:e6:b3:3e:7e:a8:f8:08:00:80:0c:8f:3b:
                    74:60:62:ce:a0:eb:00:69:ca:a4:f3:a3:08:70:67:
                    ad:ac:e8:c3:63:88:73:5f:08:a6:4b:4a:b0:a9:ed:
                    9e:5b:4a:08:3f:bc:87:ec:f0:32:35:8a:3d:34:3e:
                    b8:69:5d:7c:da:ac:03:59:84:e2:2c:5b:c0:63:f4:
                    ba:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:19:6A:DD:DD:2C:CE:A5:46:39:CF:D3:88:25:2B:FD:DC:25:4A:2F
            X509v3 Authority Key Identifier:
                keyid:1D:EF:B2:0A:7A:51:EE:18:DD:7A:D0:6A:DA:AC:49:11:E3:E2:F7:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He-yCnpR7hjdetBq2qxJEePi95Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/54365208708411EDA8B14246C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:d0:69:b5:66:b2:26:11:88:13:af:12:a0:6c:ad:98:5e:02:
         cb:95:e4:af:18:d0:44:94:ae:bd:25:44:e2:ed:39:58:42:02:
         ff:b9:11:f1:1d:00:9e:b0:dd:6e:39:8c:95:df:3a:8d:7b:f0:
         42:68:92:d5:f0:82:20:18:3c:89:32:31:89:75:96:c7:78:18:
         8b:da:33:2a:4f:d1:39:c0:60:b9:89:37:08:9b:67:fd:09:a3:
         e5:64:18:77:4d:65:47:0b:17:8e:ec:33:c9:bb:03:78:53:1d:
         5c:96:dd:82:70:2a:fe:7a:21:d3:38:47:75:6d:7e:89:43:e4:
         65:f9:13:81:9b:30:91:2b:38:de:62:ad:5f:c8:49:2a:70:df:
         b3:3f:46:b8:76:4b:4e:72:49:de:88:60:19:58:ac:fe:7e:f7:
         9b:b9:d4:03:d6:5e:e9:cb:75:6d:c0:5a:37:a2:56:af:43:3d:
         fa:03:a5:97:c7:f6:4e:8b:9f:0d:a5:2f:ad:00:a5:48:e7:52:
         24:ef:05:7a:57:c4:18:f1:ba:d2:c3:8c:a7:9b:6e:6b:a4:a1:
         fb:f0:af:aa:11:4a:20:86:0f:c0:b9:78:d1:ee:ca:43:63:ca:
         ff:a1:51:ac:f5:41:7f:34:03:cb:c5:ae:3a:53:15:bd:81:dd:
         5e:08:aa:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:48:50 2024 by rpki-client on console-fra.rpki-client.org