Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/C569659C02DF11EBB54FAE29C4F9AE02.roa
File:                     C569659C02DF11EBB54FAE29C4F9AE02.roa (raw, json)
Hash identifier:          Ao591BjVvXqArkkSjEsNL8KNSeLfLVkmIs/3A6gc/B4=
Subject key identifier:   49:F6:98:BF:92:6F:DC:F1:A7:41:FC:E0:5B:30:D4:88:AA:EE:4D:C8
Certificate issuer:       /CN=A917A717/serialNumber=495EFD3CD43E3FEEEBD22AD1DDEA79F35ED478F5
Certificate serial:       121C
Authority key identifier: 49:5E:FD:3C:D4:3E:3F:EE:EB:D2:2A:D1:DD:EA:79:F3:5E:D4:78:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SV79PNQ-P-7r0irR3ep5817UePU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/C569659C02DF11EBB54FAE29C4F9AE02.roa
Signing time:             Fri 28 Jul 2023 17:34:39 +0000
ROA not before:           Fri 28 Jul 2023 17:34:39 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     136894
IP address blocks:        103.97.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.crl
                          rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SV79PNQ-P-7r0irR3ep5817UePU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 May 2024 17:38:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4636 (0x121c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A717/serialNumber=495EFD3CD43E3FEEEBD22AD1DDEA79F35ED478F5
        Validity
            Not Before: Jul 28 17:34:39 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c3fc2f-8d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:86:8a:bb:a7:53:d4:40:56:12:70:a6:df:52:
                    4c:b2:6b:33:1b:31:04:89:b8:53:34:9f:95:6c:69:
                    40:c8:72:99:5f:f7:bd:2e:16:a4:76:90:dd:19:85:
                    44:81:82:8e:10:82:a2:f7:37:ac:ef:44:e4:40:ab:
                    3e:4f:bd:5c:83:27:c1:8d:b3:75:35:6a:0b:51:f6:
                    ce:60:8b:ed:ef:e7:d3:22:82:22:c0:8e:40:89:44:
                    13:c3:7b:d7:f6:17:34:f5:82:3b:d4:0b:24:05:89:
                    36:93:7a:f7:8d:2e:2c:37:b9:94:cf:eb:4f:06:d8:
                    82:98:d9:70:83:83:76:67:56:20:d9:d5:07:71:fb:
                    4c:3e:d2:a0:48:11:9f:86:a9:de:d7:b1:ae:f2:ce:
                    85:16:2a:f0:4f:da:4f:6a:92:da:98:ad:25:54:54:
                    ee:13:51:84:40:91:5d:89:d6:9b:d7:fd:72:26:bf:
                    82:78:2d:54:2b:c3:59:28:37:de:67:3f:fa:c9:2d:
                    ae:3d:7e:2a:fc:c1:b8:95:10:1f:50:f2:8e:be:7f:
                    d8:2a:9d:f1:c3:32:97:a6:34:04:92:27:ed:c5:3c:
                    b8:fd:5f:7d:f1:a2:57:0a:b5:b1:9d:80:7f:d2:27:
                    0c:6e:0b:41:f4:69:42:87:3e:a6:6a:95:0e:b8:9c:
                    05:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F6:98:BF:92:6F:DC:F1:A7:41:FC:E0:5B:30:D4:88:AA:EE:4D:C8
            X509v3 Authority Key Identifier:
                keyid:49:5E:FD:3C:D4:3E:3F:EE:EB:D2:2A:D1:DD:EA:79:F3:5E:D4:78:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SV79PNQ-P-7r0irR3ep5817UePU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/C569659C02DF11EBB54FAE29C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:fa:9a:d4:8a:27:8c:f7:67:6c:8f:7c:c4:d0:5c:71:c0:8c:
         ab:37:d3:5f:10:a7:44:c9:2b:bb:62:94:d8:bd:9a:72:01:43:
         30:99:5f:aa:c8:44:0a:c0:29:3d:94:af:1f:1f:32:e8:e5:a4:
         f1:c4:12:f7:bd:16:fa:87:ee:14:2a:33:51:c2:7d:b3:82:cc:
         53:98:c0:2a:0a:7a:23:2a:28:66:ee:03:d6:45:bb:6e:3a:6c:
         e3:9d:ac:66:61:5d:ca:ed:40:bc:21:0f:93:3e:fc:e4:be:b1:
         95:f7:c9:df:c4:7d:68:1e:f7:ed:b2:c2:4b:95:50:82:26:a2:
         e3:24:2d:36:b4:4b:c2:4a:2d:25:85:57:8f:14:11:d7:07:96:
         e5:8b:54:95:f0:76:4e:1e:9c:76:b6:d2:2b:e7:66:f9:76:ad:
         d6:69:3b:18:29:52:aa:78:14:95:54:1a:8f:fb:b6:9f:62:ac:
         e2:ae:ae:b7:42:a5:18:df:f6:91:d6:8b:85:e6:f9:d3:d8:c7:
         a0:2f:29:d5:e1:58:c5:47:e6:a6:7d:47:68:41:9f:c8:a3:ce:
         1e:d4:df:32:c7:9c:12:23:f4:3f:2a:84:29:6c:9c:46:4d:b7:
         d5:8c:d8:26:e1:09:20:97:0f:ff:4e:2d:25:46:e2:be:1d:9c:
         00:25:9a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 19:20:07 2024 by rpki-client on console-fra.rpki-client.org