Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/441E60E88DB811E98ACC9F7EC4F9AE02.roa
File:                     441E60E88DB811E98ACC9F7EC4F9AE02.roa (raw, json)
Hash identifier:          uq5spO8r//Mx5XkVnf0Z6fnNcxxWQ62LgeziZF4eNPE=
Subject key identifier:   DF:4B:66:F6:99:E4:C6:0A:93:D8:35:52:4A:02:0D:BA:98:04:8C:09
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       34E2
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/441E60E88DB811E98ACC9F7EC4F9AE02.roa
Signing time:             Mon 22 Jul 2024 14:40:30 +0000
ROA not before:           Mon 22 Jul 2024 14:40:30 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     24083
IP address blocks:        203.155.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13538 (0x34e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA
        Validity
            Not Before: Jul 22 14:40:30 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=669e6f5d-397a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fe:5c:20:ff:af:24:6b:6a:37:9a:e0:9f:27:
                    2a:34:b7:3f:b7:d6:41:19:a3:41:52:f0:bb:21:c3:
                    5e:16:8f:6a:da:3d:7e:00:bb:ba:3f:34:3b:0e:99:
                    cb:81:f8:85:b1:c0:3e:d1:c0:4e:cb:0d:e8:b7:2a:
                    ca:14:6b:cc:71:d2:b3:62:df:8c:7e:77:0e:dc:e3:
                    6f:06:28:e8:5a:06:aa:2d:cd:73:15:f9:59:83:4d:
                    da:ab:5e:ea:e9:9a:8c:40:e3:95:9d:e8:c6:10:82:
                    b5:84:c4:e2:1b:06:21:00:9e:69:ca:55:b5:96:ad:
                    f8:1d:68:ce:73:38:42:b6:4f:09:01:e9:a8:5d:85:
                    f8:18:65:97:62:d4:21:ce:05:b4:9c:f2:14:cb:d6:
                    bc:87:6a:e2:ea:6f:fd:9b:09:a8:ca:93:bf:3e:66:
                    63:55:bc:3e:bd:c8:26:89:0d:76:54:b3:64:5b:96:
                    27:21:ef:10:fc:04:e7:83:40:3c:ce:77:f1:6c:58:
                    45:11:55:24:04:bc:e4:7f:69:36:a3:c2:82:d1:80:
                    a7:df:f7:90:1f:75:6f:cd:b1:a7:47:b7:d8:d1:56:
                    5a:11:f8:51:1d:a3:0c:ff:3e:db:bc:1d:74:d4:fa:
                    56:a7:40:97:af:93:bd:11:a1:51:cc:ce:cf:03:ad:
                    70:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4B:66:F6:99:E4:C6:0A:93:D8:35:52:4A:02:0D:BA:98:04:8C:09
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/441E60E88DB811E98ACC9F7EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.155.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:67:63:3d:b9:e1:f1:52:86:c6:c6:c1:85:bd:70:89:98:38:
         5d:7d:de:d2:e6:b8:93:c5:1c:92:66:69:df:1c:24:8d:95:c7:
         cb:8c:78:28:c9:82:86:db:14:83:ee:64:e8:08:c9:59:30:d4:
         15:25:71:b7:b3:ab:2b:6c:41:f1:f8:bf:72:33:b9:5b:57:2a:
         bb:0c:b1:4b:cc:61:d3:4a:6b:d7:e9:77:26:0e:10:cd:e1:9e:
         38:43:9a:93:de:53:eb:43:46:9c:98:f9:ed:74:fc:ab:cb:6f:
         ea:cf:2f:77:7c:e8:fe:69:95:78:b0:c4:7a:3e:58:20:c0:41:
         92:4d:90:5d:47:9d:35:20:48:a6:7f:00:48:ea:38:48:de:a7:
         cb:5e:33:5a:09:08:ce:bd:d1:9c:61:3f:41:76:7b:91:c1:29:
         95:16:9f:27:64:be:01:36:00:a5:27:68:49:60:a5:25:4f:80:
         9a:ad:7a:3d:6d:91:3d:b5:3b:77:e1:76:d7:93:c8:96:60:f0:
         cd:78:20:31:a2:af:14:60:7a:a0:e0:65:a9:8e:d9:fe:04:46:
         29:30:3d:ba:91:b7:e9:59:bf:33:c5:fe:c5:84:bc:4a:58:92:
         cf:db:96:0d:fd:40:bd:50:9b:af:ed:7b:43:a6:11:ef:b7:47:
         67:db:30:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:30 2025 by rpki-client