Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/D4413B92007C11EE99460918C4F9AE02.roa
File:                     D4413B92007C11EE99460918C4F9AE02.roa (raw, json)
Hash identifier:          4sz/a4x9x/YNnYX/FkoyxBOtX/penwPLHxDGTUOHwNo=
Subject key identifier:   47:CD:EA:68:68:44:FF:5D:5F:08:AC:E2:54:49:BB:EA:7C:4F:B2:24
Certificate issuer:       /CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
Certificate serial:       0487
Authority key identifier: 0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/D4413B92007C11EE99460918C4F9AE02.roa
Signing time:             Fri 01 Sep 2023 10:55:16 +0000
ROA not before:           Fri 01 Sep 2023 10:55:16 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     150750
IP address blocks:        103.151.42.0/24 maxlen: 24
                          103.151.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl
                          rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 00:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1159 (0x487)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
        Validity
            Not Before: Sep  1 10:55:16 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64f1c314-e91b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0b:88:14:86:13:71:ed:4e:79:23:94:48:0d:
                    1a:de:e8:59:99:41:1d:b3:87:b1:01:07:95:eb:3b:
                    b3:8f:c0:25:7a:76:ce:a3:37:c5:cc:99:e1:ca:82:
                    9a:16:2b:bb:21:35:ee:e0:e1:90:11:2d:70:fa:74:
                    9c:c3:8a:04:73:ad:00:20:99:8c:c4:8d:19:cc:4a:
                    99:47:5f:e9:b3:e2:5c:f7:f2:3e:06:dc:6e:11:e6:
                    ee:6b:f5:59:0c:df:9f:bf:7c:60:d2:06:55:83:98:
                    d0:86:9b:b1:30:0b:75:e7:b2:94:2d:44:a4:d0:bf:
                    ce:02:e4:5d:d7:70:b3:ca:95:06:33:14:39:f1:f4:
                    fc:e0:26:8c:c4:60:a0:45:8a:a9:c1:7a:67:c0:93:
                    3c:39:e6:8d:c8:51:36:cc:42:9b:ab:e1:62:af:3e:
                    e3:2c:3b:56:30:36:dc:e8:e5:42:eb:c1:f1:95:07:
                    8e:a7:83:90:b4:0d:ec:b4:bb:3e:8f:95:63:59:db:
                    98:33:75:ea:ca:49:24:9c:10:b9:fb:cd:57:04:8e:
                    ab:0e:73:3c:2b:ed:42:82:51:a8:f6:e4:81:3f:74:
                    6e:32:c1:56:00:0c:a7:2d:8f:98:94:eb:16:5a:f5:
                    c4:a4:c3:29:3c:4f:52:5e:9d:20:91:48:3e:0b:d9:
                    38:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:CD:EA:68:68:44:FF:5D:5F:08:AC:E2:54:49:BB:EA:7C:4F:B2:24
            X509v3 Authority Key Identifier:
                keyid:0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/D4413B92007C11EE99460918C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:d9:38:34:1a:19:07:72:82:03:9e:87:8b:9b:b7:42:62:64:
         f2:73:d2:bc:94:90:b1:81:4a:59:78:86:86:ad:f0:2a:73:85:
         8e:49:b9:e0:f5:84:9f:ca:65:54:57:83:24:11:48:50:4f:fb:
         0f:47:58:f9:56:5c:b0:61:73:e6:aa:ec:ff:46:13:22:f2:f2:
         d7:eb:10:21:80:65:a0:d1:7e:f4:80:0f:d4:1e:45:c5:f3:98:
         7f:8f:ee:4b:20:b3:20:58:2b:db:46:d2:40:9d:4d:44:b5:ea:
         8d:c8:b2:2e:d4:27:db:0e:c4:71:03:3b:53:0d:1b:ee:bd:ef:
         7b:c8:dd:23:1a:dd:df:18:5d:8b:3f:c4:ca:91:97:a4:3a:cb:
         c3:f1:ce:4a:f5:c0:20:e9:2e:36:6a:37:2c:f5:51:b3:83:aa:
         9c:28:c2:84:1c:ba:ef:22:86:76:ee:dc:d2:4d:61:bc:ab:26:
         4c:2c:b6:57:f9:74:cd:0a:8f:71:26:1e:d7:6a:07:f1:38:08:
         98:fb:47:54:ff:49:22:0a:e6:f6:4b:47:04:17:f0:33:59:d3:
         a3:4d:1d:ad:35:73:8d:bc:f5:e0:ca:fb:59:b0:ca:53:4e:5c:
         8a:a2:97:32:ac:3f:73:d7:13:30:a9:ba:e1:56:6c:ad:0b:9d:
         1c:8d:45:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:38:39 2024 by rpki-client on console-fra.rpki-client.org