Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C032/F00CD4C6011D11ED85B34173C4F9AE02/C57C4D100E9511ED83D4064EC4F9AE02.roa
File:                     C57C4D100E9511ED83D4064EC4F9AE02.roa (raw, json)
Hash identifier:          TX8mdK8UHuCCpNfpm58k+G82T1lkTHV6U3w0TxQZybY=
Subject key identifier:   E7:62:BA:33:0D:B8:60:39:14:C3:A0:9E:27:8E:DF:14:8F:38:D2:52
Certificate issuer:       /CN=A916C032/serialNumber=D75D44682406B0B3E78BC5284A54279B1E3FFF94
Certificate serial:       011F
Authority key identifier: D7:5D:44:68:24:06:B0:B3:E7:8B:C5:28:4A:54:27:9B:1E:3F:FF:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/111EaCQGsLPni8UoSlQnmx4__5Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C032/F00CD4C6011D11ED85B34173C4F9AE02/C57C4D100E9511ED83D4064EC4F9AE02.roa
Signing time:             Mon 01 May 2023 06:06:05 +0000
ROA not before:           Mon 01 May 2023 06:06:05 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     56290
IP address blocks:        103.5.70.0/24 maxlen: 24
                          103.247.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C032/F00CD4C6011D11ED85B34173C4F9AE02/111EaCQGsLPni8UoSlQnmx4__5Q.crl
                          rsync://rpki.apnic.net/member_repository/A916C032/F00CD4C6011D11ED85B34173C4F9AE02/111EaCQGsLPni8UoSlQnmx4__5Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/111EaCQGsLPni8UoSlQnmx4__5Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C032/serialNumber=D75D44682406B0B3E78BC5284A54279B1E3FFF94
        Validity
            Not Before: May  1 06:06:05 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=644f56cc-a191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bd:3a:ce:fb:40:7b:98:9e:3e:8a:30:52:f7:
                    9e:7d:b2:65:9d:89:1c:6a:4c:5a:01:be:9b:4e:a1:
                    1d:3d:d5:90:a3:be:14:66:e4:3f:48:33:94:6e:c3:
                    30:87:9f:f6:19:20:fc:5e:04:3f:36:b7:07:db:db:
                    bb:25:e3:51:b5:9a:bd:e9:51:b8:d3:34:2c:f6:0c:
                    2b:5b:9b:e6:44:e1:95:6a:f2:97:03:51:0a:5b:cd:
                    f4:6c:f1:c1:50:46:23:e7:58:ce:11:1a:71:f2:d0:
                    f3:6b:45:ce:5f:3b:1b:5b:cf:86:22:bb:b1:42:28:
                    2d:4e:25:6f:6b:fc:07:2c:da:c9:31:14:c8:ff:0f:
                    1d:58:1e:b7:cf:76:da:3c:27:bc:64:04:ce:1b:26:
                    e8:70:4e:f5:e4:3b:94:4c:fb:da:df:01:00:86:2e:
                    e7:f7:64:59:8e:6e:73:54:ff:cb:db:ef:4a:00:5e:
                    56:a1:a7:28:49:68:51:37:e3:ad:96:cb:41:78:11:
                    d7:14:9f:d4:85:b7:07:6a:6e:ee:43:d8:ad:c3:78:
                    45:da:9d:33:f8:52:11:1e:85:16:6a:d3:99:4c:1e:
                    6d:87:b0:af:84:ce:83:9e:96:69:39:93:8f:fc:a8:
                    e0:8f:44:30:79:32:87:2b:48:36:a9:7a:20:f8:9b:
                    73:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:62:BA:33:0D:B8:60:39:14:C3:A0:9E:27:8E:DF:14:8F:38:D2:52
            X509v3 Authority Key Identifier:
                keyid:D7:5D:44:68:24:06:B0:B3:E7:8B:C5:28:4A:54:27:9B:1E:3F:FF:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C032/F00CD4C6011D11ED85B34173C4F9AE02/111EaCQGsLPni8UoSlQnmx4__5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/111EaCQGsLPni8UoSlQnmx4__5Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C032/F00CD4C6011D11ED85B34173C4F9AE02/C57C4D100E9511ED83D4064EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.70.0/24
                  103.247.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:41:ed:78:56:6e:7f:b7:fa:89:f9:ea:15:ce:45:93:78:a9:
         00:ca:93:e5:69:72:f8:b4:f3:8c:9e:f5:3e:69:34:20:37:09:
         57:34:35:3d:b6:69:6c:0f:8b:2f:71:74:ab:7a:34:46:be:3b:
         64:2a:3e:2f:16:20:50:13:1d:89:70:e6:48:16:ae:17:ec:fa:
         c1:b7:3e:07:8d:35:32:94:29:1c:99:3b:1f:93:54:c1:ab:55:
         ae:2b:31:1d:09:7d:09:1b:35:d5:89:de:d8:e6:84:65:1c:42:
         44:7c:a1:48:5e:f1:d3:eb:fd:8f:4e:48:25:fe:f1:3b:89:3a:
         e0:be:5b:69:f0:bb:70:58:53:0b:1b:de:c2:be:0c:c8:f3:f7:
         68:c5:78:5d:f3:ac:22:eb:db:90:cb:fb:e9:ff:78:a1:5c:eb:
         98:3e:ff:0d:e0:d3:d2:bc:70:7d:0d:7a:56:e4:0e:2e:9a:6a:
         a3:95:d4:27:c6:16:ae:22:85:fb:99:36:6a:dd:b0:4b:03:fc:
         2b:81:bf:b7:f2:fb:29:55:6e:b4:a8:59:37:57:b0:33:41:b5:
         16:aa:3f:a7:fa:0f:76:2d:32:b5:3a:aa:03:29:3c:f9:19:b1:
         d4:45:00:8f:61:15:c0:ba:c2:f3:25:ed:81:f4:19:8a:74:a0:
         bd:29:00:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 06:05:10 2024 by rpki-client on console-ams.rpki-client.org