Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/5D31D17ACE9811EE9392467BC4F9AE02.roa
File:                     5D31D17ACE9811EE9392467BC4F9AE02.roa (raw, json)
Hash identifier:          nmqIHRLv/Q4Hr6mVd9JiGcJerZCryDBpQg56b/HUztQ=
Subject key identifier:   B9:A4:F4:5D:B3:73:98:17:EC:70:46:8E:3D:2D:5B:AA:91:66:DE:F8
Certificate issuer:       /CN=A91348C9/serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
Certificate serial:       08
Authority key identifier: 0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/5D31D17ACE9811EE9392467BC4F9AE02.roa
Signing time:             Wed 28 Feb 2024 09:46:50 +0000
ROA not before:           Wed 28 Feb 2024 09:46:50 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     58212
IP address blocks:        103.197.54.0/24 maxlen: 24
                          2407:9d00:20::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl
                          rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91348C9/serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
        Validity
            Not Before: Feb 28 09:46:50 2024 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=65df010a-b4ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1e:bf:2a:4c:25:cb:7b:e8:d4:33:e5:e7:23:
                    6c:aa:42:03:58:54:07:61:f9:12:2c:00:94:24:b0:
                    f0:f4:58:a4:cd:c1:5c:c6:b7:99:62:31:40:ce:f0:
                    b1:2c:87:ac:77:8c:a3:f2:f0:19:4c:58:58:13:94:
                    53:26:13:9a:92:46:62:fb:36:d6:62:b3:aa:c8:6a:
                    c9:54:b3:4e:fb:1b:97:74:db:5a:7c:72:63:8e:cc:
                    66:76:cc:22:9a:0d:a7:f9:29:ef:5f:68:ca:29:bc:
                    cc:bb:be:e9:92:01:da:18:9c:1e:7a:c6:c2:d3:41:
                    05:f3:7c:97:65:ea:29:da:13:ef:e2:b1:99:6b:30:
                    76:d7:50:bb:71:aa:0a:67:b3:c9:38:61:00:d0:a3:
                    13:68:28:bc:41:93:be:f5:35:6b:73:76:b4:1c:33:
                    23:16:2a:d9:29:ae:9c:e1:70:0c:db:a0:e7:88:e9:
                    9e:78:7e:b7:3e:a3:01:65:54:a5:52:67:33:4f:04:
                    a9:96:7b:b9:77:b6:07:fe:e9:7c:3f:1d:7b:8a:ff:
                    1b:2f:5e:fc:91:76:ab:f1:e8:dc:54:ed:93:76:01:
                    67:85:b3:76:79:6c:4d:6e:9b:86:3d:d5:01:3c:04:
                    49:7c:30:05:b8:f7:40:a8:5c:2a:da:59:48:92:4c:
                    85:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A4:F4:5D:B3:73:98:17:EC:70:46:8E:3D:2D:5B:AA:91:66:DE:F8
            X509v3 Authority Key Identifier:
                keyid:0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/5D31D17ACE9811EE9392467BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.54.0/24
                IPv6:
                  2407:9d00:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:6f:d1:3c:b4:70:42:46:10:73:23:d4:ed:1a:18:c3:15:a1:
         fe:42:cc:02:8b:9f:6f:a3:e5:c9:56:b4:b2:dc:67:bc:50:df:
         a9:71:f7:fb:0a:3d:d2:eb:36:ef:8e:a6:ef:fb:d3:02:37:de:
         c4:9f:cf:43:b9:bb:22:f7:9d:c4:67:3a:44:de:41:1d:37:a9:
         c2:27:8b:ae:53:4b:1f:1b:32:4a:45:19:23:57:e3:16:8d:1c:
         a3:2d:2c:ef:68:49:ef:42:e9:8e:06:35:70:bb:c2:6e:a5:54:
         b1:99:84:67:dd:9e:bb:7a:70:87:0b:fa:c0:fb:ac:81:78:17:
         ba:36:fc:78:e1:2d:37:f9:c1:c2:b3:85:af:8c:8f:19:69:d6:
         37:ff:92:be:fd:73:a3:54:98:99:c2:67:31:02:e1:4d:7f:36:
         eb:cf:65:6b:3f:27:e6:fe:c5:60:db:b9:fc:32:51:c3:d3:c4:
         2d:50:0b:65:72:74:08:8b:bb:4c:7d:9c:6d:29:02:17:ad:81:
         45:65:d1:b4:19:74:81:35:1f:4a:61:aa:63:c4:35:a0:c8:c4:
         04:af:da:f0:26:6e:f6:e7:16:ae:c8:d1:14:db:af:16:18:2e:
         13:21:b1:6a:24:6f:3f:57:84:96:d1:ef:d6:04:fe:39:7c:3c:
         c3:56:e2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 09:32:15 2024 by rpki-client on console-ams.rpki-client.org