Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/AA15C0AEE84311EE8683D32CC4F9AE02.roa
File:                     AA15C0AEE84311EE8683D32CC4F9AE02.roa (raw, json)
Hash identifier:          smIi43BI+O+fak/LN2MJB2jQU0E28/YY9jrP2kFKLqo=
Subject key identifier:   36:90:AE:14:3F:6D:2A:B3:D3:FD:BD:56:E6:0C:60:77:50:73:80:BE
Certificate issuer:       /CN=A91530ED/serialNumber=114DE4A6ADFE4FA18615C547715EBB4FF5946EF6
Certificate serial:       70
Authority key identifier: 11:4D:E4:A6:AD:FE:4F:A1:86:15:C5:47:71:5E:BB:4F:F5:94:6E:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU3kpq3-T6GGFcVHcV67T_WUbvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/AA15C0AEE84311EE8683D32CC4F9AE02.roa
Signing time:             Fri 22 Mar 2024 11:59:41 +0000
ROA not before:           Fri 22 Mar 2024 11:59:41 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     151666
IP address blocks:        103.252.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.crl
                          rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU3kpq3-T6GGFcVHcV67T_WUbvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 06:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91530ED/serialNumber=114DE4A6ADFE4FA18615C547715EBB4FF5946EF6
        Validity
            Not Before: Mar 22 11:59:41 2024 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=65fd72ad-1d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b2:8a:4b:aa:74:37:28:d2:33:c0:01:a6:17:
                    a4:6f:8f:63:ce:98:90:4f:4b:7b:b5:65:cf:12:c9:
                    9b:5f:25:08:7a:82:42:96:09:9e:92:3b:0d:6c:44:
                    98:a6:b4:15:c4:62:d8:25:9b:1d:1c:3c:b5:84:1a:
                    09:88:42:2b:3e:b2:86:62:ff:6c:76:73:5f:80:05:
                    6a:0d:3c:96:57:2d:fa:9a:c9:44:10:37:ec:df:a1:
                    9b:44:55:91:7d:ed:e8:c4:f0:66:0a:41:a6:5d:db:
                    d3:00:3c:c9:cd:23:e3:87:4e:d4:44:8a:f2:24:42:
                    3a:12:27:3a:fd:3e:70:88:41:12:58:30:ca:df:e5:
                    cc:8a:b9:eb:32:84:a6:ed:c2:ae:f4:33:60:e5:75:
                    7c:c0:4f:38:f7:7d:bf:65:cc:01:10:9e:18:f1:da:
                    95:cd:80:fe:d0:0e:60:95:d8:b3:f4:b2:ea:bb:50:
                    96:ed:90:4e:c0:4d:a3:3c:f6:22:c5:ae:5b:e5:4e:
                    09:21:79:e5:81:7c:9f:2d:da:35:5c:fe:bd:d4:ac:
                    23:4a:c9:c1:7e:8e:ef:e1:86:83:d9:b5:5e:bb:0f:
                    92:99:be:a6:13:df:ef:59:3d:6e:7b:fd:bc:37:24:
                    f7:d9:2e:7f:67:64:c7:2f:af:21:07:68:90:0f:0b:
                    59:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:90:AE:14:3F:6D:2A:B3:D3:FD:BD:56:E6:0C:60:77:50:73:80:BE
            X509v3 Authority Key Identifier:
                keyid:11:4D:E4:A6:AD:FE:4F:A1:86:15:C5:47:71:5E:BB:4F:F5:94:6E:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU3kpq3-T6GGFcVHcV67T_WUbvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/AA15C0AEE84311EE8683D32CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.252.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:e3:69:25:db:04:27:57:98:81:17:b5:33:40:c4:ee:63:30:
         50:f5:4a:ff:f6:2d:2c:d1:e7:0e:a2:a2:12:7b:a5:9b:18:b5:
         49:55:0f:46:9e:e3:d8:0e:b5:ff:b0:8f:f0:ab:5c:19:3d:6d:
         2e:fa:d9:e8:f6:05:42:14:0f:d2:5b:82:eb:1e:26:4c:6a:d9:
         11:c6:f5:53:b1:ad:54:e1:6e:5a:63:39:d3:31:b8:9f:80:ae:
         1e:1f:cb:c3:72:de:c4:15:1b:e0:a3:27:88:09:8c:f5:6f:5f:
         e5:7d:7a:63:26:f8:fd:9e:d5:da:aa:97:6c:9b:2f:68:1d:78:
         ab:6c:da:14:72:d0:5f:49:c3:0f:05:89:4e:26:5b:57:1f:90:
         2b:8e:18:6b:44:2d:eb:56:9d:c1:d8:7e:cd:3e:f7:30:87:4c:
         f4:8d:48:f1:d8:23:79:59:d5:aa:b8:62:12:be:ab:66:89:19:
         5e:84:98:e9:41:b4:97:e1:93:fa:c8:97:dc:62:9a:0d:22:3b:
         39:f8:c7:e7:78:f6:ca:30:73:b6:ac:34:97:d9:86:f2:56:4c:
         e0:7c:e4:1a:c9:2f:4d:7e:b3:f5:ad:25:c0:35:36:58:5f:ce:
         1e:b3:99:19:06:98:1a:fd:ad:27:6f:2d:b4:19:db:83:3d:bf:
         f9:8f:4a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 08:07:59 2024 by rpki-client on console-ams.rpki-client.org