Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/631D6D82F2B711EDAA29717AC4F9AE02.roa
File:                     631D6D82F2B711EDAA29717AC4F9AE02.roa (raw, json)
Hash identifier:          qWWNyKzcmb7NGh+jIMofc7R/HFDVXogw0r/eVAACwfs=
Subject key identifier:   FE:77:6A:0B:DF:2C:27:AC:56:9B:72:87:68:A9:7F:7E:63:1E:3F:E3
Certificate issuer:       /CN=A91579E2/serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3
Certificate serial:       D3
Authority key identifier: 3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/631D6D82F2B711EDAA29717AC4F9AE02.roa
Signing time:             Fri 21 Jun 2024 05:07:18 +0000
ROA not before:           Fri 21 Jun 2024 05:07:18 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     64095
IP address blocks:        103.133.88.0/23 maxlen: 24
                          2400:faa0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl
                          rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 02:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91579E2/serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3
        Validity
            Not Before: Jun 21 05:07:18 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66750a86-eb74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2d:b1:58:cd:4a:e7:37:68:89:67:e6:44:15:
                    bf:92:a2:1f:d4:1e:d4:79:60:e9:2e:84:82:f6:b2:
                    29:aa:2c:33:34:2e:e7:06:b5:9b:69:57:ea:22:3c:
                    db:e8:a0:c1:a6:8e:29:72:df:8a:ae:a1:55:1f:e1:
                    25:48:d7:f9:f1:a9:cb:b2:ec:f9:a8:c0:e3:5f:45:
                    31:89:e4:e0:62:72:dd:bc:cb:48:17:4d:30:13:51:
                    bb:c2:36:b8:75:ac:aa:43:77:81:a1:64:c4:45:e1:
                    de:23:b6:34:59:14:fa:cd:2f:6a:b5:ea:75:c3:1f:
                    5e:7c:f8:0b:54:a9:af:4f:e6:1a:5f:b6:8f:44:07:
                    18:dc:2f:e6:91:a6:35:e1:ac:2a:c8:e0:6e:6c:3e:
                    e2:1e:ad:f3:37:08:96:ab:30:50:32:72:2c:51:0b:
                    60:1e:19:c8:27:3c:3e:3d:93:28:60:a4:57:76:a6:
                    08:3f:c1:6c:e1:a6:06:84:6f:f5:17:f9:01:d0:8b:
                    ae:f5:0e:71:81:ca:b6:93:ac:41:e4:de:4c:e3:bb:
                    69:30:76:60:4e:c6:9a:6e:1a:44:df:e7:0f:a1:13:
                    46:5d:11:f8:82:bb:f0:f5:4b:82:96:6a:96:36:97:
                    6f:e9:f3:e1:0c:ad:43:f9:62:bd:41:52:9f:e2:79:
                    40:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:77:6A:0B:DF:2C:27:AC:56:9B:72:87:68:A9:7F:7E:63:1E:3F:E3
            X509v3 Authority Key Identifier:
                keyid:3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/631D6D82F2B711EDAA29717AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.88.0/23
                IPv6:
                  2400:faa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:b0:74:1d:6d:43:45:cf:12:e9:c5:83:38:0b:e0:d4:93:48:
         e3:36:60:b5:2a:c9:f2:1a:00:43:f2:25:f8:d9:b1:e8:10:2e:
         d2:65:55:9e:52:e9:60:94:45:3d:3a:2b:d5:97:52:c2:bf:b1:
         19:07:e8:89:87:59:4f:bc:d4:77:44:88:08:c2:23:2b:b7:82:
         c0:60:d4:54:8f:02:b6:c3:b4:bb:66:b6:f5:7c:d0:71:91:ee:
         49:f6:9c:63:70:68:69:25:89:bc:f6:94:6e:8f:86:90:a7:ee:
         1d:66:b3:71:24:ba:1f:cb:f2:67:58:5b:3d:92:39:65:af:8d:
         87:1d:78:0a:a7:51:8d:ef:5f:01:1f:2f:3d:fe:e2:d3:a0:2b:
         3b:88:32:67:c0:9a:61:12:c6:30:1c:d8:d9:0c:ba:86:f3:45:
         11:18:4d:e1:18:a8:1b:9a:0d:d7:87:a1:f5:b1:c7:f4:e3:ca:
         44:0e:2f:0f:a3:21:b7:b4:71:2b:21:7c:30:69:2a:35:9c:5f:
         30:65:ac:7b:5d:79:16:47:3f:5f:87:e1:ed:be:09:1b:a9:8a:
         0f:cc:51:4f:89:94:e6:49:e1:2a:53:24:91:b2:47:5b:4b:b8:
         f6:a3:f8:85:d0:34:b5:ec:70:b0:67:c0:7c:ce:ba:4a:ae:0b:
         3e:0a:fc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:54:31 2024 by rpki-client on console-fra.rpki-client.org