Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/D791DEB48DEE11EEB451D416C4F9AE02.roa
File:                     D791DEB48DEE11EEB451D416C4F9AE02.roa (raw, json)
Hash identifier:          n1Fs4NfkZ3ajEc7JRokhUfHu4UwORYUKlE8iBAfrVbM=
Subject key identifier:   59:4D:FC:72:C7:72:7C:32:A2:11:47:C8:65:9B:D2:59:D3:7C:79:9D
Certificate issuer:       /CN=A912D14B/serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
Certificate serial:       0274
Authority key identifier: 4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/D791DEB48DEE11EEB451D416C4F9AE02.roa
Signing time:             Tue 28 Nov 2023 13:05:45 +0000
ROA not before:           Tue 28 Nov 2023 13:05:45 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     55410
IP address blocks:        103.121.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl
                          rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 628 (0x274)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D14B/serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
        Validity
            Not Before: Nov 28 13:05:45 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=6565e5a9-2d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:57:72:fe:73:da:54:86:63:a1:90:34:22:52:
                    e3:ab:6e:7f:a0:fc:87:fe:46:54:7c:8f:83:23:9b:
                    08:2f:65:0c:b2:22:b5:0e:f7:e7:5c:30:f3:7c:a4:
                    55:c6:b1:24:e5:01:b4:f2:66:aa:e6:a8:8b:82:e9:
                    3f:7e:6c:0c:2f:31:d3:69:df:79:25:da:e4:52:fd:
                    ed:f8:45:f7:4f:dd:99:cc:69:f5:95:73:32:86:4f:
                    41:1d:be:8d:a0:3d:51:d8:ed:c6:4a:29:28:b9:dd:
                    d3:15:c3:82:02:06:8c:d5:c7:88:92:e6:61:75:ad:
                    0c:1d:90:d6:e9:db:5d:26:3f:d8:14:aa:e2:9a:47:
                    29:25:3c:e2:e9:50:3a:4e:d5:8f:d7:fe:4f:67:a9:
                    cc:25:ce:fd:b8:ca:af:1e:9c:67:24:96:36:14:d5:
                    43:05:3c:ff:26:35:54:a9:76:e1:86:d5:e8:e2:fc:
                    c2:12:c5:99:f6:13:f0:16:26:db:b7:52:09:9a:38:
                    88:b9:a7:0e:8e:1d:48:94:97:85:b5:97:f2:20:d8:
                    c6:ce:33:d7:85:29:8f:20:ac:32:3e:12:8c:f2:93:
                    16:54:7a:8e:b2:e3:bb:2a:d6:20:3e:37:ac:6a:74:
                    65:2c:2e:da:19:7a:1d:a0:85:4b:cd:58:9b:0c:6d:
                    c9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4D:FC:72:C7:72:7C:32:A2:11:47:C8:65:9B:D2:59:D3:7C:79:9D
            X509v3 Authority Key Identifier:
                keyid:4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/D791DEB48DEE11EEB451D416C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:1c:38:34:fc:5c:6e:65:56:90:f1:5b:54:c7:5a:3c:49:62:
         34:bf:2f:7c:79:57:89:40:8c:d8:3c:07:eb:de:3d:c6:12:d5:
         ad:de:f5:3c:09:45:ca:55:27:20:42:dd:fb:b2:18:08:42:8d:
         14:fe:dc:c4:a1:f3:12:1e:17:8a:0f:15:bf:f2:e1:9f:42:ac:
         17:9f:56:bf:de:fe:c2:aa:50:30:50:eb:a2:ab:94:bf:58:57:
         f3:09:a0:7c:71:d1:76:9b:55:64:49:d5:b1:3b:f6:77:bf:c4:
         18:95:b1:f3:de:0b:d8:65:32:57:39:73:ae:aa:86:6d:cc:12:
         04:b0:d4:78:ef:9d:4f:3b:2d:7b:e5:d2:5a:af:23:4f:31:5e:
         06:da:25:0a:92:38:a7:c5:7f:62:20:44:64:a6:1c:30:ed:4c:
         5f:9c:6e:f5:f1:f4:0e:cf:61:8c:97:e6:d2:94:df:9a:06:5f:
         d8:8e:a6:16:33:3d:6f:8e:c3:c6:0b:8d:46:e2:5f:0f:7f:9d:
         10:4c:36:9c:5d:ad:2e:37:83:f0:37:56:83:70:59:6b:40:1e:
         23:7f:ea:e4:75:ad:2f:d8:26:f1:fc:0f:e3:74:d1:54:7c:fe:
         21:95:1e:cc:b4:5d:60:be:8a:70:63:2b:3d:ce:c0:2e:de:16:
         64:b5:e8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 04:20:42 2024 by rpki-client on console-ams.rpki-client.org