Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/5892BB44853E11EB9D9E2D39C4F9AE02.roa
File:                     5892BB44853E11EB9D9E2D39C4F9AE02.roa (raw, json)
Hash identifier:          XeblEh4yDmM2IVkfU/Q4s+MNuRsvKOZCB0nRj0eU5IQ=
Subject key identifier:   8D:93:76:57:04:A6:9B:49:B2:5E:13:5F:27:7A:B8:A4:6C:82:96:62
Certificate issuer:       /CN=A91854B7/serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0
Certificate serial:       0546
Authority key identifier: F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/5892BB44853E11EB9D9E2D39C4F9AE02.roa
Signing time:             Wed 15 Nov 2023 00:11:31 +0000
ROA not before:           Wed 15 Nov 2023 00:11:31 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     38809
IP address blocks:        103.198.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl
                          rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 00:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1350 (0x546)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91854B7/serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0
        Validity
            Not Before: Nov 15 00:11:31 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=65540cb3-1162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:08:46:ed:3d:89:50:45:7d:13:a7:49:d0:40:
                    fc:40:c3:09:b0:f4:27:51:9d:02:ab:48:fd:a1:b7:
                    91:0a:dc:76:ea:57:e7:78:44:46:86:dc:7c:e9:20:
                    f2:5f:e7:3e:50:6e:ba:74:20:fc:55:9d:7e:f0:c4:
                    5a:0e:f0:10:d6:bd:7b:c9:5d:ce:f2:40:5f:fa:90:
                    ce:07:78:71:e4:c0:6d:a4:8f:a6:7b:2f:e5:16:af:
                    2f:19:7a:78:18:dc:04:c8:12:fc:86:44:57:57:4c:
                    ea:db:3f:89:d5:58:15:df:31:7c:cc:c0:f2:54:ff:
                    7c:5a:20:f9:bf:3d:a4:8c:ad:07:5d:14:b4:c5:83:
                    26:24:d8:29:3d:e5:fc:18:0e:94:80:89:ea:10:77:
                    01:e6:ae:7d:db:21:6b:dd:4a:e6:f9:aa:1d:a7:8c:
                    e7:2a:00:99:30:03:59:e8:0c:1a:81:9a:56:57:40:
                    f6:de:d4:87:c9:1b:9b:ee:9a:35:1e:59:b9:f1:74:
                    a5:56:e1:c5:bf:d3:9a:8c:96:d7:d7:f2:73:f4:29:
                    5a:ca:c5:c7:d3:dc:68:95:55:ff:a6:ff:1d:12:de:
                    09:e8:71:83:4a:15:0a:e5:b1:50:4a:d1:17:50:73:
                    5a:14:e7:1c:2e:37:73:19:b8:9f:1b:26:46:b6:23:
                    0f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:93:76:57:04:A6:9B:49:B2:5E:13:5F:27:7A:B8:A4:6C:82:96:62
            X509v3 Authority Key Identifier:
                keyid:F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/5892BB44853E11EB9D9E2D39C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:f9:65:01:89:61:52:91:92:6b:8a:30:72:68:75:06:50:35:
         8e:5e:2e:62:0d:8d:10:3f:8b:94:f3:7a:68:42:07:c5:f2:ee:
         ab:8a:30:42:ba:0f:08:f7:01:28:fd:d1:57:33:62:db:c8:29:
         7b:bc:7a:a6:45:ef:ea:a4:fc:bb:a0:c2:60:97:11:32:dd:fd:
         fc:e0:c0:16:59:8c:bf:eb:b8:ff:4f:44:26:57:bf:91:73:50:
         02:11:b3:02:0b:c2:13:24:32:1e:96:8b:43:7d:60:dd:aa:8d:
         05:e0:42:ab:7a:94:cb:aa:d9:58:da:a7:83:c6:8a:29:46:53:
         38:61:db:bb:52:af:ab:67:e9:e6:48:90:19:c9:94:4f:0d:d2:
         ad:81:b8:47:f7:c4:70:e3:b5:c3:10:f3:07:88:e2:6e:a5:8f:
         3d:3d:e1:a7:04:ed:8e:65:45:0d:ff:bf:7a:85:77:ab:3d:29:
         cf:04:e1:16:b6:68:0f:18:75:37:9c:1c:8b:8e:31:06:c6:ef:
         b8:7d:d8:e5:f2:cc:83:b4:dd:09:90:ed:2d:0f:81:e8:28:e7:
         9b:e9:d6:25:a4:ff:2a:23:84:01:a9:03:04:eb:11:08:01:c3:
         df:d9:bc:65:3e:91:24:48:12:93:72:f9:28:34:b3:30:cd:34:
         5e:ee:29:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:06:59 2024 by rpki-client on console-fra.rpki-client.org