Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/FDC105522D2E11EB88924818C4F9AE02.roa
File:                     FDC105522D2E11EB88924818C4F9AE02.roa (raw, json)
Hash identifier:          NIUGS4mvKNWRmdIeXIiI1BIa89OgAlVEL12ojwbrF1s=
Subject key identifier:   10:DE:F3:C4:6C:FF:E5:C3:49:05:B2:50:C0:F7:9B:D1:D4:AC:1F:24
Certificate issuer:       /CN=A918D771/serialNumber=A32153712537600D71342EC069A57F3EED60D70C
Certificate serial:       0675
Authority key identifier: A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/FDC105522D2E11EB88924818C4F9AE02.roa
Signing time:             Thu 14 Mar 2024 23:13:01 +0000
ROA not before:           Thu 14 Mar 2024 23:13:01 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     45654
IP address blocks:        103.49.4.0/22 maxlen: 24
                          103.246.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl
                          rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 23:28:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1653 (0x675)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D771/serialNumber=A32153712537600D71342EC069A57F3EED60D70C
        Validity
            Not Before: Mar 14 23:13:01 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65f3847d-d09f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:37:cd:fe:c7:c0:ff:98:c9:75:a3:95:00:e5:
                    77:c1:1e:18:8d:e1:f5:e8:60:b9:5e:79:9d:05:82:
                    88:6c:bb:5d:52:23:d3:a0:6d:2b:20:29:ca:5f:2f:
                    f9:e5:28:19:fc:73:61:f8:30:08:dd:0f:7c:71:7b:
                    95:70:38:6d:b8:f3:aa:41:5c:97:26:0f:dd:f6:9d:
                    cf:62:77:75:54:57:2a:11:57:0c:b6:e6:74:8c:db:
                    43:33:8f:c3:28:2a:42:1c:d0:ee:be:ad:69:60:f7:
                    9c:90:8a:63:8f:de:af:08:d3:2f:03:a3:7a:38:ba:
                    80:7c:35:97:b0:4a:1f:00:05:3c:7f:28:78:72:4d:
                    bf:f1:53:fc:8c:b8:93:74:a4:16:5f:ab:cc:ba:5f:
                    91:58:31:ab:a7:fa:c0:dd:2f:bf:91:00:3c:67:8d:
                    a0:58:75:be:bf:5c:2b:a1:dd:72:b5:9c:88:49:03:
                    d3:93:69:06:2b:6f:1f:7b:5e:83:80:6b:78:9d:3d:
                    55:b2:ba:a8:42:2e:db:28:1d:59:27:f2:c7:62:4f:
                    50:7a:03:5b:84:af:24:cc:26:ad:ac:9d:ac:2c:c6:
                    83:b2:ba:74:06:33:b8:02:c7:27:bf:c8:89:1e:d4:
                    29:f5:f4:d5:6c:c7:b9:ce:8e:39:cb:74:50:eb:1b:
                    9c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DE:F3:C4:6C:FF:E5:C3:49:05:B2:50:C0:F7:9B:D1:D4:AC:1F:24
            X509v3 Authority Key Identifier:
                keyid:A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/FDC105522D2E11EB88924818C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.4.0/22
                  103.246.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:78:cc:a0:a3:50:04:2c:e9:d4:a7:10:87:b3:49:59:b7:e8:
         40:e7:26:05:c9:1b:a4:55:b3:42:f1:45:20:5e:b2:63:50:f2:
         a7:5d:b8:27:09:af:43:f5:81:a8:4b:33:0c:33:37:db:1f:7c:
         c1:91:48:01:5e:e3:5d:64:9c:1e:6f:ee:d4:f3:b4:2a:af:3f:
         e0:e0:3d:ed:a0:48:7f:32:3e:5e:b8:52:9c:12:5b:16:5d:4d:
         98:86:29:ff:07:6b:55:a7:12:00:6a:c0:b4:30:f0:b5:99:28:
         d8:a3:3d:3e:7a:eb:1d:13:70:11:0e:18:53:53:36:7f:54:36:
         38:7a:68:04:49:28:cb:e0:a1:9c:df:fe:73:8c:c5:56:26:b0:
         15:92:b9:48:37:e5:9a:f3:21:79:92:cb:a0:d3:a7:2b:8c:fc:
         77:ec:96:42:11:fc:4b:44:a8:e6:cf:cc:7f:00:31:0d:c4:f8:
         cf:7d:c0:fa:9d:e9:06:cd:67:82:01:5d:a9:87:62:c5:0f:39:
         5f:a7:2e:5c:b4:fc:90:1c:70:c5:82:e1:85:aa:df:01:06:b3:
         48:99:9c:39:9d:41:60:4c:87:6f:de:ea:4c:87:6d:4f:2c:d1:
         99:a3:07:ba:7f:89:00:b8:d6:5a:05:89:e3:62:44:96:df:1c:
         34:9f:f1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:58:24 2024 by rpki-client on console-fra.rpki-client.org