Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/F5D6B6B8810811ED9EA03683C4F9AE02.roa
File:                     F5D6B6B8810811ED9EA03683C4F9AE02.roa (raw, json)
Hash identifier:          4fKNHp/QkRQY4MFhFm0KIsrk9aahf17O6vMc/ck3zIk=
Subject key identifier:   3E:7A:9F:56:B3:0C:24:E9:9D:12:FA:57:39:E8:25:E3:94:93:2B:E4
Certificate issuer:       /CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE
Certificate serial:       7F
Authority key identifier: 52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/F5D6B6B8810811ED9EA03683C4F9AE02.roa
Signing time:             Sat 19 Aug 2023 04:24:02 +0000
ROA not before:           Sat 19 Aug 2023 04:24:02 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        103.190.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl
                          rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 05:30:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE
        Validity
            Not Before: Aug 19 04:24:02 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64e043e1-3e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0a:68:30:09:d9:d6:be:71:71:e8:c8:31:40:
                    e6:4d:e5:5b:b4:df:a8:49:73:df:05:8e:fe:8b:f0:
                    d4:c2:c8:c2:ed:8e:16:85:98:f7:ab:ab:99:86:91:
                    dc:f5:65:e3:6f:e9:5d:76:33:de:5d:22:01:60:7f:
                    fb:d6:50:b8:59:b2:6d:64:78:58:9c:56:4e:d3:ad:
                    4c:11:46:f3:c2:4f:41:b4:c3:14:d7:74:56:74:9d:
                    3c:09:e3:cb:79:f8:d6:06:b3:c4:fb:dd:11:6c:f2:
                    04:9b:81:44:0d:9a:a6:85:b8:b1:7c:f2:71:54:66:
                    89:38:c6:c5:c1:5a:91:a1:9b:65:ef:5e:e4:11:47:
                    28:26:69:ba:09:05:8d:ad:68:35:f9:fe:e6:f1:f7:
                    a4:e7:91:99:e3:41:0e:d7:8c:df:6d:52:de:48:75:
                    26:04:70:53:53:3b:dd:94:54:e1:f3:2d:12:4b:1a:
                    11:71:e1:60:5c:21:56:04:8b:4d:25:e6:9c:49:83:
                    ff:b5:58:7f:d1:2e:55:05:33:ec:52:bf:c7:24:e6:
                    10:1e:4d:d7:18:6e:7f:4b:99:3c:c5:b1:91:f3:b5:
                    50:2b:80:a5:2c:a9:c1:ae:34:31:29:df:e4:4c:ea:
                    50:5b:39:a1:fe:5d:30:7f:e9:03:c7:42:56:07:49:
                    fb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7A:9F:56:B3:0C:24:E9:9D:12:FA:57:39:E8:25:E3:94:93:2B:E4
            X509v3 Authority Key Identifier:
                keyid:52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/F5D6B6B8810811ED9EA03683C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:eb:fd:d8:ac:ce:45:e0:32:18:fa:d9:bd:1c:fd:28:0c:2a:
         60:21:0b:fa:21:42:ef:ef:59:2e:f2:39:fb:11:14:3e:fc:4a:
         02:a3:8c:f1:af:38:a9:f1:1a:e7:07:96:3e:a9:c5:f9:22:73:
         44:17:53:33:f4:21:6d:52:87:35:82:26:f5:de:4d:2f:69:e5:
         49:70:fc:be:ad:f2:cb:e7:28:a8:aa:d0:74:9c:c6:ac:d3:d5:
         9a:dc:28:d7:d3:61:02:7c:6b:42:ec:86:4d:79:74:2d:ef:8d:
         3d:82:69:9e:36:1a:73:08:30:fc:39:2f:43:eb:3f:c7:9e:5b:
         73:d9:b4:ff:65:2d:24:75:25:73:bd:68:96:0a:cc:86:a4:19:
         1a:e8:41:d0:a4:49:2f:98:f0:9c:10:5c:cd:f0:6d:36:22:fd:
         c3:72:a8:90:51:49:2a:17:6a:cd:dd:f9:9e:a7:7a:26:39:f6:
         1e:f5:54:bb:2a:f1:9b:f7:57:0b:2e:60:06:cf:be:da:fc:66:
         e0:2a:37:9f:a4:2e:aa:0c:50:d6:29:a1:16:d0:ef:a5:f0:51:
         1f:96:b9:03:7f:02:52:4c:d5:ea:20:27:e4:74:81:1a:83:83:
         af:f6:24:b4:66:11:94:56:86:34:29:c6:92:d6:9e:07:5d:24:
         3e:f6:fb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 06:38:25 2024 by rpki-client on console-fra.rpki-client.org