Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/444EB35A459D11EEA8758641C4F9AE02.roa
File:                     444EB35A459D11EEA8758641C4F9AE02.roa (raw, json)
Hash identifier:          HFjFUtVHPNW7Qd56uS2rL+sndelmlhgFQUxhT/KgfFM=
Subject key identifier:   C0:35:E5:9A:4A:E6:CE:B0:A3:B0:EB:6B:3C:9C:04:40:8D:00:74:0D
Certificate issuer:       /CN=A91367E0/serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818
Certificate serial:       88
Authority key identifier: E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/444EB35A459D11EEA8758641C4F9AE02.roa
Signing time:             Fri 03 May 2024 07:19:59 +0000
ROA not before:           Fri 03 May 2024 07:19:59 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     7594
IP address blocks:        103.247.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl
                          rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91367E0/serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818
        Validity
            Not Before: May  3 07:19:59 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6634901f-fbeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:46:f5:2c:17:a1:45:89:6e:49:c6:a5:47:db:
                    6c:6b:ea:8c:a2:f6:0e:d4:1c:1a:9f:a7:db:8a:5b:
                    21:7d:21:b1:ee:f6:cc:9b:68:2f:48:d3:e0:3c:f1:
                    67:b6:5b:7a:c9:97:c8:50:d2:84:c7:46:cc:99:d9:
                    6c:36:95:22:76:e9:df:ea:4c:bc:1c:d3:34:56:7a:
                    73:ab:b1:7e:b1:b2:64:2b:43:df:f7:f4:be:d8:86:
                    25:c6:51:db:ce:00:02:06:32:fc:d3:18:12:a6:96:
                    06:6b:84:01:5a:31:6c:9f:19:7e:a4:05:bf:d6:a1:
                    3c:a2:27:bc:0e:81:b2:55:59:64:36:33:33:88:b2:
                    5c:ad:93:b1:42:9e:57:30:86:de:0d:32:65:44:ca:
                    0c:9c:01:c8:86:9e:45:c7:ff:b7:d0:30:9a:5d:f2:
                    26:70:f9:47:de:a9:31:71:57:7a:1c:6b:6d:53:cf:
                    d2:b3:fc:97:7c:06:4b:f3:a0:e3:1b:15:61:0c:bf:
                    da:d2:c6:4b:50:33:d6:52:96:b0:73:cf:17:1d:9a:
                    13:3f:bd:5b:f7:fd:55:7c:9a:f9:8b:0b:fb:53:8d:
                    f6:d5:84:2e:95:c8:17:13:15:86:35:1d:44:d6:a5:
                    78:d0:cc:48:da:ac:ec:4b:45:75:22:19:92:29:73:
                    77:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:35:E5:9A:4A:E6:CE:B0:A3:B0:EB:6B:3C:9C:04:40:8D:00:74:0D
            X509v3 Authority Key Identifier:
                keyid:E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/444EB35A459D11EEA8758641C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:85:40:5d:5f:49:30:43:2f:a0:a5:6f:35:ef:72:52:ff:18:
         ac:76:b5:40:d4:59:7b:b4:c9:62:59:ac:60:1a:59:54:a0:21:
         7e:a8:04:af:7b:bb:0e:3b:3c:ad:7f:47:e9:46:a6:cf:ba:b3:
         a3:b7:b8:7e:b0:07:f1:ae:0a:26:66:81:3b:59:a4:d0:5a:49:
         21:0f:63:f0:d0:96:8f:2d:06:12:23:1d:50:ed:17:6c:86:d7:
         84:41:bb:3e:ec:a9:3c:f4:9d:02:ab:17:ba:e7:4a:48:d6:76:
         bf:ae:2e:22:f2:3c:6a:5b:62:14:b7:ee:40:e5:db:f6:63:ee:
         c5:18:d9:ca:d9:ee:9d:61:9e:e9:9f:2e:d1:53:94:a3:fd:5c:
         21:ec:e4:02:b2:fb:d0:95:70:3b:39:de:6e:17:a9:3e:d2:54:
         72:3a:d5:b0:2e:b2:fc:33:f9:81:4a:51:06:e9:0e:2c:0a:6e:
         18:ad:f8:04:f1:19:7a:80:b1:0d:8d:4d:82:3b:ce:5c:80:08:
         25:95:9c:ab:7f:72:f2:a1:50:47:f3:8e:b4:a4:b1:70:3e:4f:
         bb:ef:8c:e0:2c:22:98:ac:80:eb:14:e2:3d:6c:df:87:7c:f8:
         76:0c:1d:de:75:83:8c:6f:e7:7f:36:6a:d6:bb:f1:f4:d3:e8:
         a2:de:27:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:46 2024 by rpki-client on console-fra.rpki-client.org