Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/65F89850A96711E79BECEA42C4F9AE02.roa
File:                     65F89850A96711E79BECEA42C4F9AE02.roa (raw, json)
Hash identifier:          PZ7XnBrJz/a7vzH5LB2fdLCKyMtJ6Vj9A+2dGf6LXe0=
Subject key identifier:   0D:06:0B:BE:FA:88:8C:DB:8B:97:9E:FF:56:79:74:EA:A5:09:D1:BE
Certificate issuer:       /CN=A914EBE5/serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60
Certificate serial:       1740
Authority key identifier: B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/65F89850A96711E79BECEA42C4F9AE02.roa
Signing time:             Sun 10 Dec 2023 17:04:13 +0000
ROA not before:           Sun 10 Dec 2023 17:04:13 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     17828
IP address blocks:        103.77.24.0/23 maxlen: 23
                          103.77.25.0/24 maxlen: 24
                          2401:d540::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl
                          rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5952 (0x1740)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EBE5/serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60
        Validity
            Not Before: Dec 10 17:04:13 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=6575ef8d-5573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:75:d4:f2:3c:4b:84:45:07:7e:f4:02:df:11:
                    42:5c:c5:cd:a4:55:36:3a:aa:d2:05:bb:2b:ad:89:
                    91:55:b1:45:46:a8:28:e4:3e:c0:6f:53:9a:c1:73:
                    59:36:37:1a:ab:5b:69:86:5f:c4:5d:78:5f:bd:f2:
                    05:94:82:27:14:e5:5f:08:31:09:11:3c:d8:27:95:
                    cd:09:5c:e9:c0:16:78:19:64:1f:da:d5:b8:68:c0:
                    58:82:9e:19:47:32:64:6a:c1:aa:b0:35:f7:99:e3:
                    28:b2:e4:97:a4:15:cf:72:89:e1:f0:de:11:6b:31:
                    72:7c:28:58:b0:cf:d7:68:d6:15:27:a8:31:47:3b:
                    d2:92:ce:b7:d4:59:4f:6b:22:de:bb:63:bd:56:4a:
                    34:b3:33:73:32:b1:b3:37:fb:98:39:67:e0:5d:e4:
                    8d:3f:d6:5a:87:83:25:b3:5f:3b:a2:39:10:01:54:
                    57:85:79:bd:c6:ca:fd:8c:c0:19:9f:93:49:47:1b:
                    1a:b7:f3:5f:53:be:55:8a:5e:a8:63:24:13:9d:72:
                    13:6e:d9:45:39:88:75:3c:c3:2e:1b:41:9c:90:0a:
                    4f:cc:a1:75:1f:07:da:6f:dd:52:94:63:b2:46:86:
                    ee:ad:af:b8:7a:0d:7b:a0:a8:73:cf:73:9d:76:cc:
                    d7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:06:0B:BE:FA:88:8C:DB:8B:97:9E:FF:56:79:74:EA:A5:09:D1:BE
            X509v3 Authority Key Identifier:
                keyid:B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/65F89850A96711E79BECEA42C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.24.0/23
                IPv6:
                  2401:d540::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:0b:90:d9:8e:61:b7:0e:61:81:62:73:66:05:f7:7e:77:f4:
         11:f3:7e:ab:d0:b9:32:4a:d5:8c:96:e2:fc:09:96:eb:6a:2a:
         00:cf:ab:24:07:1c:9c:98:9c:46:0b:c3:c5:43:3b:c3:54:e5:
         a8:20:9e:cf:d3:27:0b:00:88:a5:2d:fb:8d:48:0c:52:8e:78:
         24:7f:15:fe:e7:3e:6f:7b:0d:80:2d:6e:ec:ad:a8:c2:1f:c7:
         7f:b8:f7:e7:4c:17:a4:c9:8a:50:e3:8f:ba:ea:fd:97:65:bf:
         bc:1a:67:5b:5c:75:46:7d:56:b0:41:36:55:7a:ef:5d:74:15:
         71:65:ee:62:39:98:50:46:08:61:83:d0:56:50:04:62:e0:0a:
         45:9f:1b:1f:65:55:11:af:dc:ec:92:71:6e:2b:06:de:4c:e6:
         be:47:04:92:93:36:7f:77:67:f5:ec:66:de:06:92:a7:7e:68:
         bf:b0:9d:8c:f5:83:e3:ea:bc:de:f6:6f:1e:fd:af:94:d9:74:
         67:a3:df:7a:23:2a:5b:bb:96:22:1e:7b:55:03:69:aa:c8:69:
         20:17:ee:f0:18:64:ba:07:51:e0:db:9b:7b:8d:5c:47:66:ab:
         76:9d:fc:94:dc:21:13:f2:8e:32:38:20:c8:7c:11:30:b3:80:
         d1:a5:2a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:45 2024 by rpki-client on console-fra.rpki-client.org