Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/45835FFCA91511ED9E2AC948C4F9AE02.roa
File:                     45835FFCA91511ED9E2AC948C4F9AE02.roa (raw, json)
Hash identifier:          92+Y0IM4hxpTP+szefbGYT83n6WxBb8LUuP1zLrvAsM=
Subject key identifier:   34:87:BB:88:BF:BC:71:DD:AC:4A:BE:B1:90:56:AD:95:9D:CD:8C:B5
Certificate issuer:       /CN=A913C40D/serialNumber=8C3814723FC755E9A9BA1BC335664A519BBC1CEE
Certificate serial:       0389
Authority key identifier: 8C:38:14:72:3F:C7:55:E9:A9:BA:1B:C3:35:66:4A:51:9B:BC:1C:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/45835FFCA91511ED9E2AC948C4F9AE02.roa
Signing time:             Sat 09 Dec 2023 01:53:25 +0000
ROA not before:           Sat 09 Dec 2023 01:53:25 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     140224
IP address blocks:        43.251.224.0/22 maxlen: 24
                          103.43.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.crl
                          rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 00:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 905 (0x389)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C40D/serialNumber=8C3814723FC755E9A9BA1BC335664A519BBC1CEE
        Validity
            Not Before: Dec  9 01:53:25 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6573c895-10ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:01:de:d4:79:81:eb:26:b9:f6:9a:4f:f0:ee:
                    19:d2:34:8d:b1:13:a3:b7:09:c6:a4:3e:dd:43:50:
                    f0:4e:f5:9a:91:36:86:4a:e0:f2:43:35:e4:ce:f9:
                    b4:74:f7:1b:b2:34:74:0b:1c:33:64:de:da:e5:76:
                    98:65:b8:fa:f4:55:c2:69:f5:62:e9:2e:1f:6f:32:
                    8b:ea:0d:04:d7:ae:f5:f0:16:8b:f0:66:d2:2b:2e:
                    74:78:cb:30:a6:57:1e:65:cd:56:32:da:80:09:f3:
                    ff:bb:cb:d2:a7:ab:86:96:81:3a:51:ab:6d:56:25:
                    4e:75:23:ba:2d:b7:d7:1f:37:2f:e7:8f:c0:5c:f5:
                    ee:d8:8b:45:2b:c5:92:41:6c:26:c0:99:0e:b5:eb:
                    ea:40:bb:a9:d9:de:09:a8:94:14:79:4f:7c:4a:bd:
                    9d:83:2e:2e:81:5f:8c:74:76:47:f4:14:a7:f7:71:
                    84:c4:4e:cc:ca:0f:68:8b:14:b0:f0:77:c5:47:86:
                    50:cd:1a:5c:2f:6d:b2:1f:e8:6a:e3:f6:14:cf:ad:
                    93:ca:25:c5:68:3b:b1:e6:92:0d:24:88:1d:61:ba:
                    73:ad:98:53:c6:11:d6:6e:3c:94:01:7a:10:7b:6d:
                    fa:73:a6:ef:97:e0:c8:bf:4e:ce:54:85:29:1c:46:
                    21:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:87:BB:88:BF:BC:71:DD:AC:4A:BE:B1:90:56:AD:95:9D:CD:8C:B5
            X509v3 Authority Key Identifier:
                keyid:8C:38:14:72:3F:C7:55:E9:A9:BA:1B:C3:35:66:4A:51:9B:BC:1C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/45835FFCA91511ED9E2AC948C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.251.224.0/22
                  103.43.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:2a:26:29:a1:7f:dd:7d:7e:8e:f8:c3:b7:0f:bd:bf:08:1d:
         21:94:bd:41:b6:a4:7a:9c:d0:e6:b8:dc:7f:eb:5d:d9:64:48:
         65:08:c5:9c:13:ab:0e:ce:89:59:49:dc:45:40:13:41:e4:8b:
         98:7b:01:4f:81:15:18:cc:29:66:bc:d2:94:25:f3:0a:cc:67:
         84:b2:43:30:05:5b:33:b2:fd:47:21:39:37:74:74:b4:95:83:
         12:99:c1:ab:f0:55:ec:40:f9:fe:1f:9b:0f:ef:1d:5e:7a:0b:
         60:a8:77:33:cd:c6:8e:4d:3b:cc:02:30:42:23:fd:9c:48:8a:
         29:28:fb:c1:d6:be:46:15:92:f4:18:e8:1f:a6:cd:8f:e5:bf:
         c9:09:5e:e3:78:cd:29:0c:d3:45:ee:79:5d:89:9a:62:95:67:
         10:5c:87:cf:f8:cc:f2:63:b5:b7:2d:a4:cc:3e:6d:41:38:06:
         c1:ee:06:d2:24:38:89:5c:90:59:33:53:09:72:8a:c0:c1:0a:
         8b:f6:e5:3c:72:8a:0f:7b:d9:52:bc:c2:3f:6d:13:3d:2d:7d:
         db:a4:de:be:2e:8b:10:98:ae:bf:33:da:ed:1e:2b:89:62:8d:
         13:26:ad:44:24:33:30:b4:39:11:dd:62:c1:25:ec:b3:83:57:
         51:b3:2b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:47 2024 by rpki-client on console-ams.rpki-client.org