Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/72CE4D80958411EEB3748B58C4F9AE02.roa
File:                     72CE4D80958411EEB3748B58C4F9AE02.roa (raw, json)
Hash identifier:          iKey44OboTB8NilxUb2DzRzq18OyDEY6fi5JIxPzxK0=
Subject key identifier:   35:23:65:FA:32:2E:EA:09:A4:11:EC:AB:BC:B4:AA:CA:D7:C1:55:C0
Certificate issuer:       /CN=A91957D1/serialNumber=9037C0B29E37092A83852CE4B885B776A7C1E3B6
Certificate serial:       6E
Authority key identifier: 90:37:C0:B2:9E:37:09:2A:83:85:2C:E4:B8:85:B7:76:A7:C1:E3:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/72CE4D80958411EEB3748B58C4F9AE02.roa
Signing time:             Tue 25 Jun 2024 06:59:15 +0000
ROA not before:           Tue 25 Jun 2024 06:59:15 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     58580
IP address blocks:        103.54.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.crl
                          rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91957D1
        Validity
            Not Before: Jun 25 06:59:15 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=667a6ac2-6e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ee:cf:28:5b:97:0e:35:82:ac:f4:19:b4:22:
                    1a:2c:59:0d:d4:a7:98:95:c0:78:86:8c:aa:a2:e9:
                    b6:d0:dc:ce:f7:be:9c:69:d6:22:43:2d:6c:ae:d2:
                    83:61:c6:33:68:d4:98:73:b6:2b:08:9e:4d:a3:4c:
                    be:bb:3d:92:c8:36:fd:2b:90:84:83:73:88:ef:6e:
                    9f:10:0b:d0:f4:b4:f1:32:10:51:e4:32:c0:9a:16:
                    f9:f8:35:c2:f9:a9:f4:b9:5e:a2:5f:ce:38:e8:19:
                    07:90:4c:67:dc:14:d5:ff:58:2c:c6:5b:29:da:49:
                    b0:fc:0c:0d:7f:5a:4a:68:24:1b:5e:82:15:7d:4b:
                    25:02:13:31:82:5b:bb:4e:57:f9:fb:21:33:ff:b9:
                    b9:21:9e:96:dd:33:0b:1d:22:18:55:ea:97:f5:8d:
                    da:62:6e:8d:d5:9f:a5:af:83:29:c7:30:03:7a:dc:
                    91:62:aa:0b:98:43:05:b2:f8:81:ca:d9:64:fe:1e:
                    0d:d9:29:fd:b5:42:38:05:94:bc:35:6a:7a:18:70:
                    22:da:41:b2:fd:c4:8e:da:62:46:0c:01:7a:92:49:
                    9e:e4:b8:09:3e:f7:c6:de:e3:09:eb:56:16:89:49:
                    46:4d:f3:f2:de:2d:da:53:da:47:3d:11:29:6f:ab:
                    8b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:23:65:FA:32:2E:EA:09:A4:11:EC:AB:BC:B4:AA:CA:D7:C1:55:C0
            X509v3 Authority Key Identifier:
                keyid:90:37:C0:B2:9E:37:09:2A:83:85:2C:E4:B8:85:B7:76:A7:C1:E3:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/72CE4D80958411EEB3748B58C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:73:21:f4:c5:7d:8f:12:5f:95:2d:39:b7:cb:3e:5d:a0:81:
         fd:65:a7:b5:42:a7:c1:a7:2a:a1:3e:64:0d:e8:b4:86:ad:d2:
         dd:fd:8d:60:5c:c9:8a:89:09:26:ad:f1:cf:31:14:27:18:19:
         45:77:67:cf:7c:fd:f2:fb:e3:19:0b:21:01:e0:a3:e3:f9:a3:
         e6:ab:7d:79:80:a0:e1:5c:b9:50:37:b0:16:cb:44:52:47:3e:
         6a:38:fd:4c:67:ec:0d:7b:3f:fc:ef:6f:41:5d:3f:47:33:c3:
         ce:60:9f:ba:09:70:09:51:d1:23:1c:ca:fe:d5:f6:2e:19:ce:
         c2:36:63:7a:86:0d:ae:db:43:23:75:d7:ec:a4:03:12:14:2e:
         0e:c8:35:cb:67:5c:66:db:1d:59:3b:74:83:ee:27:30:e8:d5:
         55:27:9b:81:89:52:f7:c0:46:7b:24:b6:59:c5:7c:71:e3:64:
         f2:1a:f0:dd:c4:3a:ca:f2:ad:d4:67:b8:f7:bc:67:be:c6:ac:
         04:d9:66:38:cc:87:4e:84:d4:b7:36:a1:95:62:cc:64:0f:7d:
         d7:56:07:30:45:c5:1a:5f:b8:07:7a:0e:56:7b:25:25:68:a0:
         21:35:51:ff:47:71:45:35:c9:7e:82:dd:b9:87:9b:1b:97:9d:
         6e:33:b3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:59:34 2025 by rpki-client