Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/80F75824FAAD11EDB0C98683C4F9AE02.roa
File:                     80F75824FAAD11EDB0C98683C4F9AE02.roa (raw, json)
Hash identifier:          Ir6jieXDo5WhcOUHhq3j9urxgu6n6xKvObh/fql9Ym0=
Subject key identifier:   9B:15:7F:DC:F8:36:8E:EE:4A:51:3E:37:B4:86:11:89:CB:3D:CE:1F
Certificate issuer:       /CN=A91923A9/serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4
Certificate serial:       B2
Authority key identifier: 5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/80F75824FAAD11EDB0C98683C4F9AE02.roa
Signing time:             Thu 25 Apr 2024 06:39:43 +0000
ROA not before:           Thu 25 Apr 2024 06:39:43 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     133929
IP address blocks:        103.91.156.0/22 maxlen: 24
                          123.253.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl
                          rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 06:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91923A9/serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4
        Validity
            Not Before: Apr 25 06:39:43 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6629faaf-e1d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:10:4b:ce:6c:fa:fd:fb:b5:78:b1:75:94:62:
                    0d:14:4c:31:26:51:7e:c2:45:b5:87:39:f7:98:48:
                    b2:c5:53:93:3b:2c:b2:0b:33:da:d3:c4:7c:3c:c3:
                    85:18:2c:be:c9:44:10:15:3e:8e:be:1a:dd:8a:59:
                    69:49:de:94:1d:47:77:c3:cd:c3:c1:39:d1:d6:87:
                    85:3a:c4:6d:93:d0:89:14:d4:fd:fc:a8:fa:39:e9:
                    31:49:90:6c:d5:22:48:16:2c:28:78:5a:20:8a:9f:
                    7e:74:15:35:e7:16:de:fd:0b:b9:4f:fb:9e:89:27:
                    41:d0:2e:1f:3d:89:00:c7:86:02:43:7b:20:43:28:
                    a6:12:10:ca:a4:0c:72:a7:b6:d6:75:a2:90:20:fc:
                    67:f1:4b:cf:0c:4e:10:bd:b4:76:a7:65:b5:75:4a:
                    f9:7a:1d:72:88:c1:8a:06:47:68:de:08:ea:b9:b8:
                    1d:3c:6a:43:e0:f2:b4:54:9a:8e:51:7a:54:d7:ed:
                    c2:40:07:2b:19:53:91:27:37:0c:73:d0:0d:21:07:
                    99:44:42:81:82:ad:91:23:70:eb:b1:24:f3:fb:e7:
                    75:39:5b:5c:e8:9b:d6:19:8a:67:3e:bc:d5:9c:4b:
                    6d:f7:ca:f0:f1:a0:8a:1e:65:a2:fe:77:67:5e:a8:
                    b7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:15:7F:DC:F8:36:8E:EE:4A:51:3E:37:B4:86:11:89:CB:3D:CE:1F
            X509v3 Authority Key Identifier:
                keyid:5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/80F75824FAAD11EDB0C98683C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.156.0/22
                  123.253.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:9c:54:87:20:e5:65:84:8a:ed:d0:d6:9b:79:ab:ba:ea:8e:
         c1:d0:db:22:a2:0e:0f:db:26:9d:49:7d:57:45:37:d5:f6:b9:
         e6:fa:e4:87:86:e3:85:f2:1e:20:71:7c:76:da:89:b0:95:ff:
         6e:fe:e3:82:0c:54:df:39:8e:49:64:b9:2f:af:e5:8a:e7:a4:
         e7:32:59:48:17:02:15:75:92:eb:6b:6e:e8:13:c9:b3:32:23:
         ef:1a:36:62:48:fa:a1:6f:d2:86:02:48:6e:66:b9:41:43:3e:
         08:6d:ef:ec:d9:5a:26:48:46:8a:da:2d:ee:61:fb:9e:00:27:
         9d:ba:2a:10:50:11:c0:e0:9a:16:70:ad:0c:59:42:6f:11:b4:
         47:54:ef:2d:d8:6f:e3:b4:c2:0a:6c:18:e0:3a:34:9d:4c:6f:
         bc:65:e3:68:a0:b8:69:4a:73:27:e1:de:71:57:ab:4d:4d:29:
         2c:8e:50:a7:53:96:c2:09:e9:41:0c:5d:55:59:f2:82:de:33:
         75:90:4e:d1:45:18:14:4b:e4:3d:66:42:04:20:f8:4c:a5:10:
         95:29:c1:db:08:d1:39:16:48:68:3c:ff:df:fa:c8:85:40:79:
         6e:d1:dd:0d:84:f6:1b:c0:b3:d2:e5:1b:1d:67:3c:54:1b:6f:
         35:9d:00:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 09:04:41 2024 by rpki-client on console-ams.rpki-client.org