Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/51D4585A89B211EE9ADA615EC4F9AE02.roa
File:                     51D4585A89B211EE9ADA615EC4F9AE02.roa (raw, json)
Hash identifier:          jzFXArRMwn4nTWMlZ/sRFauoJ4H0465twxMcQQPfjHo=
Subject key identifier:   72:6E:6B:48:E1:AE:2F:D6:A4:81:4B:16:8B:7C:54:B5:23:D0:D1:D8
Certificate issuer:       /CN=A919821D/serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993
Certificate serial:       04
Authority key identifier: 88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/51D4585A89B211EE9ADA615EC4F9AE02.roa
Signing time:             Thu 23 Nov 2023 03:43:11 +0000
ROA not before:           Thu 23 Nov 2023 03:43:11 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     137923
IP address blocks:        103.117.81.0/24 maxlen: 24
                          103.119.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl
                          rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 07:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919821D/serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993
        Validity
            Not Before: Nov 23 03:43:11 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=655eca4f-26e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c9:bc:f0:05:c1:c8:94:9f:a1:08:f7:f0:ec:
                    e6:9a:33:55:6c:00:ea:f5:e2:cd:33:b7:49:1c:27:
                    0b:57:97:d5:27:2a:13:a5:3c:a9:e8:1b:6d:e5:57:
                    ef:ee:8e:0c:c1:0a:a5:45:17:77:60:1c:76:da:4a:
                    17:5c:fb:98:78:13:94:6c:64:3b:88:f0:41:b9:d2:
                    69:4a:a1:cf:9a:53:27:2b:18:b9:bc:57:7d:ad:ce:
                    7c:cd:42:e2:7b:76:33:fa:30:61:c8:77:ad:53:ba:
                    10:95:3a:ce:bb:26:52:58:10:07:5a:11:65:71:25:
                    bb:73:c7:ae:50:cc:5a:11:7f:eb:a7:b6:dd:a7:f3:
                    e6:b9:64:45:00:a1:3d:2a:e0:46:ce:79:ad:17:c7:
                    20:4d:fa:33:94:34:9a:e8:17:b7:f8:00:34:9d:7d:
                    94:9b:ae:fa:37:e7:d7:a7:d9:c0:e7:aa:0e:04:bc:
                    8a:d1:9a:f6:9c:a4:f5:75:4d:c0:69:f6:b8:8a:ea:
                    70:a0:65:b7:35:36:8b:55:af:2a:9e:de:ea:af:c2:
                    ea:8b:85:57:21:7c:98:9a:d0:0e:7d:66:78:21:36:
                    52:99:a4:3e:1d:c4:19:33:05:66:d6:df:39:ad:c0:
                    b5:f4:ac:63:87:dd:c9:a2:2c:6f:a7:11:66:f1:bb:
                    01:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6E:6B:48:E1:AE:2F:D6:A4:81:4B:16:8B:7C:54:B5:23:D0:D1:D8
            X509v3 Authority Key Identifier:
                keyid:88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/51D4585A89B211EE9ADA615EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.81.0/24
                  103.119.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:98:1f:25:70:aa:8a:be:e9:76:f6:91:78:2d:90:1e:52:9c:
         70:6d:03:da:c7:03:d7:d1:fe:ae:51:aa:de:a0:9d:eb:53:33:
         c4:77:e9:17:4e:e8:d2:0d:67:bc:d9:89:21:60:13:97:86:4d:
         79:13:cf:07:f8:2e:cd:03:6b:94:c4:75:fe:58:52:f6:04:13:
         ca:24:81:d1:ef:41:18:f5:38:ae:d7:c0:f8:c5:51:d2:8e:70:
         1f:b8:e8:0f:36:83:19:89:aa:15:bd:ad:1f:d7:91:c5:dd:99:
         4e:87:0c:c6:19:68:70:fd:cd:24:ee:24:32:34:64:38:e7:af:
         43:67:63:fd:25:07:63:ab:10:86:fc:e8:bd:c9:14:28:54:a3:
         a1:74:41:ac:c2:6d:1e:fd:77:a1:ff:84:c2:fd:0b:93:da:42:
         29:ce:7b:b1:17:af:0d:63:a3:a3:f3:aa:a9:b1:99:03:ca:d1:
         04:fb:00:22:a3:12:ac:4c:05:01:3d:94:4f:65:06:06:6a:67:
         71:f7:27:12:5c:87:6c:12:db:c6:55:66:33:2b:61:01:db:ec:
         57:c5:a4:04:a5:a7:fd:02:3d:21:da:9d:a0:e4:9c:33:5d:d2:
         2c:9e:35:84:30:51:45:c7:d3:9e:4e:0f:0b:2f:c3:91:78:8a:
         70:3d:d4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 10:42:50 2024 by rpki-client on console-fra.rpki-client.org