Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/B3F935160E0F11ED89E89675C4F9AE02.roa
File:                     B3F935160E0F11ED89E89675C4F9AE02.roa (raw, json)
Hash identifier:          FlIBDcsCI6hEzE/Hsl8Oo4AgNaxmcJbVTdpEo3OVvJM=
Subject key identifier:   2D:98:78:F9:CF:ED:59:0B:0B:34:EB:D4:FE:DA:54:B7:B4:10:76:7E
Certificate issuer:       /CN=A91A9B1B/serialNumber=4B4414AE685E488F42B1B647EEA01DEBB0C4F3A0
Certificate serial:       01F8
Authority key identifier: 4B:44:14:AE:68:5E:48:8F:42:B1:B6:47:EE:A0:1D:EB:B0:C4:F3:A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/B3F935160E0F11ED89E89675C4F9AE02.roa
Signing time:             Thu 19 Sep 2024 02:16:04 +0000
ROA not before:           Thu 19 Sep 2024 02:16:04 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     14618
IP address blocks:        103.23.68.0/23 maxlen: 23
                          2400:9920::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.crl
                          rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504 (0x1f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9B1B/serialNumber=4B4414AE685E488F42B1B647EEA01DEBB0C4F3A0
        Validity
            Not Before: Sep 19 02:16:04 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66eb8964-4223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:97:4f:9f:9b:0b:0d:cb:5c:90:b5:c4:2d:d7:
                    f0:4f:26:8d:a0:91:b7:12:f5:0d:35:97:4e:18:46:
                    de:71:c5:94:78:55:a3:3e:b2:5e:7c:2a:e1:b4:16:
                    12:19:dc:01:b8:8c:d4:d8:11:46:84:a6:19:f5:a9:
                    71:d5:34:2b:c7:21:c2:fb:85:7d:a1:a4:3a:02:3a:
                    aa:17:2b:30:de:63:c6:26:50:2f:e4:0f:bf:29:d1:
                    dc:4a:43:e4:de:3b:02:bb:9e:21:24:80:31:07:9b:
                    ed:ae:1a:14:4b:40:f4:fb:98:93:cb:84:51:39:88:
                    27:3d:94:ea:41:77:6b:aa:60:2a:c0:a0:ba:af:01:
                    48:7c:22:30:8f:04:ba:ee:db:15:92:e1:d7:f1:63:
                    9e:60:a4:3a:fa:94:5b:68:a2:e8:40:81:9d:bf:2b:
                    a0:81:b8:ec:0c:b3:90:23:59:23:ce:09:62:9a:27:
                    6c:91:63:d6:ac:b2:c9:87:30:ac:29:83:88:e3:f6:
                    ee:0f:06:e9:d8:d1:b2:f7:29:1a:18:d2:2e:1d:00:
                    58:f2:be:8f:30:0d:5f:ec:56:d6:5d:38:ed:c9:7d:
                    7f:37:14:36:33:79:95:d5:84:86:ba:e7:70:a0:02:
                    15:9a:1e:36:ba:74:36:bd:23:ba:54:25:91:79:fd:
                    00:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:98:78:F9:CF:ED:59:0B:0B:34:EB:D4:FE:DA:54:B7:B4:10:76:7E
            X509v3 Authority Key Identifier:
                keyid:4B:44:14:AE:68:5E:48:8F:42:B1:B6:47:EE:A0:1D:EB:B0:C4:F3:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/B3F935160E0F11ED89E89675C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.68.0/23
                IPv6:
                  2400:9920::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:8f:04:dd:8b:01:c5:41:a9:4b:30:db:c6:77:01:a9:86:a1:
         ea:84:d4:aa:eb:bb:4d:37:f5:26:61:aa:54:c6:da:50:a7:cf:
         88:62:5a:0c:5a:88:e9:a5:8f:81:3d:9a:b6:1e:d1:d3:c7:29:
         d3:e3:22:b2:26:53:dc:c1:81:b3:63:f6:dd:03:a5:cf:a4:f4:
         1a:f6:27:96:11:0b:a4:0c:81:c2:30:0d:55:cc:b1:45:2f:1c:
         45:a9:69:72:f1:31:76:86:e9:6c:61:15:7f:90:c5:7b:83:7e:
         59:b8:fb:db:43:1f:03:be:c9:ac:8a:3e:0a:8f:a0:eb:4e:4d:
         1b:7f:ee:25:93:e5:fd:6a:4f:5f:68:9f:95:98:fa:50:7d:cd:
         1d:d4:23:23:29:1d:5e:a0:5b:8c:7f:14:1b:28:f5:10:6a:3a:
         62:97:c0:9d:2f:b9:e1:04:93:ae:67:29:4c:60:81:36:4a:17:
         a8:20:8d:26:a7:00:ed:4b:4d:77:e8:5e:02:4f:c2:8f:bb:52:
         a8:19:f8:e1:3a:4a:c8:ef:f8:43:ca:7f:f4:58:a2:a7:65:cd:
         40:29:50:2f:06:46:20:48:75:22:45:a3:ed:19:62:d2:8c:53:
         7c:8a:c8:76:a4:fd:d3:42:83:ad:49:5c:40:5e:79:ee:06:75:
         c6:9e:b8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:49 2024 by rpki-client on console-ams.rpki-client.org