Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/006626AEDB1F11EB91006D71C4F9AE02.roa
File:                     006626AEDB1F11EB91006D71C4F9AE02.roa (raw, json)
Hash identifier:          pKqE2XDjAkD/kZn4MxxG6nbaYE58eeWoWyGmXjOKv/M=
Subject key identifier:   6B:4D:A0:D9:74:7A:58:4D:E4:0F:A8:95:7A:88:51:35:4B:7A:D3:49
Certificate issuer:       /CN=A91736B7/serialNumber=49EC39F91BC07EAF122AFAAA0BDB7B53D8810C07
Certificate serial:       024A
Authority key identifier: 49:EC:39:F9:1B:C0:7E:AF:12:2A:FA:AA:0B:DB:7B:53:D8:81:0C:07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sew5-RvAfq8SKvqqC9t7U9iBDAc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/006626AEDB1F11EB91006D71C4F9AE02.roa
Signing time:             Wed 15 Dec 2021 13:39:50 +0000
ROA not before:           Wed 15 Dec 2021 13:39:50 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     141004
IP address blocks:        103.145.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.crl
                          rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sew5-RvAfq8SKvqqC9t7U9iBDAc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91736B7/serialNumber=49EC39F91BC07EAF122AFAAA0BDB7B53D8810C07
        Validity
            Not Before: Dec 15 13:39:50 2021 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=61b9f025-62b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:25:d8:79:2e:ae:b4:1d:1f:a5:f1:51:b2:ef:
                    97:60:43:04:f4:9d:5d:22:e8:c3:32:93:77:bb:d7:
                    b8:b2:5b:f5:fd:27:23:64:40:e4:25:74:2b:b8:b0:
                    be:49:6a:1e:ba:dc:f9:8c:10:e6:1a:3b:da:58:ff:
                    66:9f:4d:4e:22:68:98:9d:19:89:da:97:d4:c7:11:
                    1a:f1:e5:21:ba:a1:6b:f1:bc:41:33:b4:66:9d:10:
                    a9:1b:6c:a9:34:01:62:84:91:dc:82:66:22:21:00:
                    48:29:ab:2b:fb:66:67:f7:21:06:56:4d:49:c3:99:
                    cf:82:8f:e0:5c:d3:27:f1:8c:47:04:a9:aa:5b:4d:
                    98:0b:31:04:50:ce:3b:a8:fd:08:7c:1c:75:5e:1e:
                    b1:22:41:90:2e:74:f5:43:8a:2d:ad:8b:05:42:1c:
                    cf:bd:cc:4e:e0:52:51:fe:23:9c:f7:21:d3:10:4b:
                    41:ab:f3:c7:02:b2:98:ab:5e:3e:3c:c7:19:4d:8e:
                    02:97:59:66:7c:44:4b:22:dd:0c:05:9c:10:41:26:
                    5b:46:d2:e2:3f:a7:a0:4a:c3:a6:3c:b6:f8:c9:72:
                    d4:df:52:cf:3d:e7:ed:c9:4e:eb:fe:1a:92:91:27:
                    3b:3c:12:7d:85:5d:2a:4d:5c:09:b3:e2:bd:8e:b0:
                    84:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4D:A0:D9:74:7A:58:4D:E4:0F:A8:95:7A:88:51:35:4B:7A:D3:49
            X509v3 Authority Key Identifier:
                keyid:49:EC:39:F9:1B:C0:7E:AF:12:2A:FA:AA:0B:DB:7B:53:D8:81:0C:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sew5-RvAfq8SKvqqC9t7U9iBDAc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/006626AEDB1F11EB91006D71C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:10:ae:14:d0:61:d3:63:ef:14:f4:2c:cc:42:6f:af:3b:33:
         8a:1b:16:b7:1c:fd:45:0a:3e:d9:ef:85:8f:80:71:c3:3d:a2:
         25:73:d5:1c:18:2a:5e:4f:7e:29:1e:28:e6:b7:0d:d4:77:d7:
         d4:20:70:92:a0:62:cd:34:51:75:7a:68:a1:5d:c0:16:34:a2:
         0d:4e:97:48:fb:56:6b:ed:28:06:cf:5f:fa:82:4c:b2:ac:a7:
         10:27:70:a6:fb:53:45:ac:82:e8:05:e6:38:c3:50:55:bf:89:
         22:e4:7a:1e:1e:66:fe:4f:41:e9:39:76:64:8e:15:d3:8f:bb:
         fe:53:50:5c:cf:4a:74:69:23:6d:29:d1:48:7d:cd:f7:f7:6b:
         96:d0:6b:ff:04:01:9a:bf:5d:af:16:bc:8b:6c:2e:4c:2c:d6:
         f8:ea:7a:fe:0f:f9:55:1a:fb:66:2d:4d:91:4c:ed:63:d8:98:
         ea:c6:b4:5f:fe:ba:13:18:a4:ee:84:01:09:44:90:d3:9f:d7:
         91:0a:e0:fa:d5:bc:92:b7:51:43:84:e3:0a:3e:c0:77:d5:6d:
         14:3a:b7:e2:35:50:2d:d9:a3:6d:1b:4b:ac:06:e9:7f:aa:39:
         50:93:97:1a:75:19:2a:be:02:e0:ad:43:2b:07:59:b5:c8:2d:
         fb:39:e2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:28 2024 by rpki-client on console-fra.rpki-client.org