Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/E52CB968094711EDA5B20C0AC4F9AE02.roa
File:                     E52CB968094711EDA5B20C0AC4F9AE02.roa (raw, json)
Hash identifier:          96IxM18FepvkTX/noztQDGsKZtLDOBE6wy3TrGmA6IY=
Subject key identifier:   8A:8A:94:76:BF:DB:44:E0:4B:99:FE:18:AE:E1:B6:45:A1:F2:D9:E3
Certificate issuer:       /CN=A91534B8/serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6
Certificate serial:       0160
Authority key identifier: 96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/E52CB968094711EDA5B20C0AC4F9AE02.roa
Signing time:             Thu 05 Oct 2023 03:23:46 +0000
ROA not before:           Thu 05 Oct 2023 03:23:46 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     9893
IP address blocks:        203.31.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl
                          rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91534B8/serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6
        Validity
            Not Before: Oct  5 03:23:46 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=651e2c41-bf54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cd:c6:a7:8a:81:00:7d:ea:fe:aa:50:26:60:
                    f4:25:03:9f:dc:f0:fb:34:f1:d7:86:57:e2:cc:70:
                    af:2e:47:37:d7:15:80:70:85:94:97:ef:f8:8d:74:
                    43:da:89:32:31:ac:8a:5e:09:89:af:1f:fd:a6:6a:
                    3d:78:a3:49:3d:27:69:93:3d:08:5c:33:e2:72:e4:
                    8c:64:68:9b:07:0b:bf:54:31:cd:3d:52:e0:e1:0b:
                    b7:54:fe:7c:d6:c2:fa:0b:3f:16:57:2a:0e:56:7a:
                    8b:69:02:91:c1:d8:ca:6b:79:9e:48:36:93:60:45:
                    f8:48:b4:71:98:8b:9c:74:e6:1a:58:0a:6a:b8:02:
                    d3:d8:cf:08:83:03:94:b5:a3:95:a5:81:ed:bf:81:
                    49:9e:50:45:0b:d8:cc:6b:8b:06:ac:90:c1:83:33:
                    52:fd:50:db:4f:fc:6e:8e:8f:ec:d6:33:78:2d:5c:
                    29:9f:36:d6:db:7a:0b:b3:2e:d4:3f:7f:19:44:c6:
                    59:69:ec:29:11:1d:ea:ab:ae:bc:75:1e:07:ec:fc:
                    94:bd:6e:81:27:6d:8a:0c:13:ce:46:ff:74:de:16:
                    9c:3d:5f:09:6e:f8:8a:b9:1d:d6:0b:d4:27:e2:ef:
                    83:86:b7:5d:d1:14:fd:9b:6f:55:e3:9f:f0:78:14:
                    4a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8A:94:76:BF:DB:44:E0:4B:99:FE:18:AE:E1:B6:45:A1:F2:D9:E3
            X509v3 Authority Key Identifier:
                keyid:96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/E52CB968094711EDA5B20C0AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.31.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:51:28:b8:8f:3e:94:d6:6a:87:2e:dd:b2:cf:72:7d:31:6f:
         e4:25:84:71:28:a3:15:7b:d9:79:1b:da:41:87:65:ab:c8:3c:
         b8:32:b7:de:d5:fe:b7:3f:8d:ce:26:ed:af:f2:ef:09:ff:ec:
         18:87:21:2d:22:40:62:15:cc:d7:ae:50:01:c0:34:63:fe:2d:
         cf:7a:6b:79:35:fd:b4:3b:ea:80:b2:01:66:7d:be:a7:a1:39:
         b6:25:b5:b5:23:9e:96:0d:fa:fb:8d:f8:d8:45:44:4e:17:6b:
         93:35:3b:4a:a0:95:3f:f1:37:76:ec:be:ad:be:b9:27:45:a5:
         99:fe:62:c3:fe:9f:5c:8a:71:f6:a8:de:81:62:20:e2:9b:61:
         9d:7a:b8:51:d3:2a:70:e8:67:10:b5:60:a7:f5:71:9a:58:3b:
         16:6a:77:54:20:82:a1:8f:23:6b:c8:c5:fc:ca:13:f6:94:92:
         7d:56:e4:ae:e5:4a:1e:d6:f5:25:32:9f:16:db:d5:69:00:1a:
         da:0b:63:b4:0d:61:d3:92:93:9d:e7:8a:7c:09:8b:7e:e0:f7:
         db:b2:ea:26:fb:fb:ec:1c:09:e9:81:96:73:e9:a1:97:a9:46:
         e9:94:9d:f5:a3:e0:98:88:96:e8:45:c8:75:37:5a:ed:91:46:
         bd:30:a2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:08:04 2024 by rpki-client on console-ams.rpki-client.org