Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/57D28CCA853E11EB9D9E2D39C4F9AE02.roa
File:                     57D28CCA853E11EB9D9E2D39C4F9AE02.roa (raw, json)
Hash identifier:          QDXEIkRGxhjCHN0kh3LkRzd4RAEFOkAWJ2rw4r6EYZM=
Subject key identifier:   50:E4:8F:6C:C0:F0:5B:95:70:5B:F9:E7:C3:D6:17:0A:66:AF:92:A2
Certificate issuer:       /CN=A91854B7/serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0
Certificate serial:       0544
Authority key identifier: F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/57D28CCA853E11EB9D9E2D39C4F9AE02.roa
Signing time:             Wed 15 Nov 2023 00:11:30 +0000
ROA not before:           Wed 15 Nov 2023 00:11:30 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     1221
IP address blocks:        103.198.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl
                          rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 00:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1348 (0x544)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91854B7/serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0
        Validity
            Not Before: Nov 15 00:11:30 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=65540cb2-a889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:79:fc:cc:d6:eb:e4:7c:fc:e2:50:a7:b7:57:
                    f8:89:f5:05:ff:c8:7b:c5:1e:b5:c7:8e:ae:ad:57:
                    58:b5:d5:51:4f:70:a8:a1:ff:57:08:29:c4:bd:e6:
                    40:f3:ac:19:fb:1b:d3:45:ee:2f:65:62:d5:46:6f:
                    e5:e2:7f:51:55:15:0a:e9:a9:5f:36:0d:8d:ba:10:
                    d0:0f:80:ce:18:74:30:94:9c:c4:b3:72:2e:29:81:
                    9d:b3:eb:c9:12:46:f9:4b:63:99:be:a1:aa:39:40:
                    c8:5d:f2:24:df:d1:ec:b3:a9:02:12:97:3a:7d:4b:
                    4b:7d:6f:d8:ec:fc:0c:81:48:6f:d1:19:6f:5b:67:
                    ea:81:a9:7e:4c:ea:74:51:0f:d4:10:6b:02:9c:92:
                    e1:19:45:fe:2f:ee:eb:9a:97:15:d5:1a:12:88:66:
                    4f:88:e9:57:f8:b3:dd:8c:d3:79:20:af:cf:55:c5:
                    a8:57:9d:31:92:35:da:a4:9a:73:59:4b:27:3a:41:
                    0b:70:cc:67:42:e3:97:5f:e9:9b:55:8d:9d:0a:08:
                    96:44:d7:82:ed:60:46:ab:c7:cb:53:80:84:73:32:
                    4a:18:56:4e:47:e7:e4:4a:3c:c6:f3:b4:c8:d6:82:
                    f8:d5:f5:3d:bc:6e:b3:d8:5c:9b:00:18:60:a7:0a:
                    8f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E4:8F:6C:C0:F0:5B:95:70:5B:F9:E7:C3:D6:17:0A:66:AF:92:A2
            X509v3 Authority Key Identifier:
                keyid:F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/57D28CCA853E11EB9D9E2D39C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:dc:52:57:29:00:9f:55:21:5f:57:c3:29:47:81:3e:c4:c3:
         00:35:28:c2:c5:75:d3:bb:e1:20:54:9e:e2:b9:60:51:b4:90:
         38:6e:a1:48:9f:f7:e6:cb:b6:8e:52:9c:bc:9e:27:ed:49:3e:
         b0:4c:af:69:e9:f5:ed:7e:3e:ba:a3:50:be:89:30:a1:45:79:
         a1:79:ce:ae:14:cd:53:52:3a:f1:db:2a:95:7f:15:24:8b:ec:
         99:e1:b7:1c:23:18:f7:7a:fd:66:5c:28:40:05:b3:1d:b9:c4:
         0d:64:63:d2:68:6a:07:8f:79:33:84:d7:17:a0:e7:98:82:de:
         90:df:ab:c7:62:a7:af:be:ad:78:90:69:e0:58:3a:26:f2:67:
         25:47:86:cd:ec:13:3c:e0:2a:68:13:ac:68:ec:70:21:0f:05:
         08:63:3c:ee:f8:0d:45:f5:3b:41:92:5b:83:0d:eb:e4:70:3a:
         4e:1b:ee:73:2c:b8:a6:f8:a8:a3:d7:a3:4e:84:21:27:3a:46:
         cf:a5:78:66:8d:00:2e:2c:41:4c:e8:99:ac:f0:0f:c3:94:ef:
         1d:ee:db:50:b1:e2:10:33:c4:9c:72:ee:a5:6b:70:6d:58:75:
         ac:e8:fb:74:24:17:5c:71:22:a0:b4:3f:5e:50:f1:2f:f3:de:
         82:29:f7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:06:59 2024 by rpki-client on console-fra.rpki-client.org