Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/92967BBA78F811ECAF1C286CC4F9AE02.roa
File:                     92967BBA78F811ECAF1C286CC4F9AE02.roa (raw, json)
Hash identifier:          0zFQ1BRYNI+2cFpJMpx2xapZnaYr/Wv7xM9sKrY4jS4=
Subject key identifier:   06:4F:CC:30:12:F7:E0:43:46:9F:30:AF:E8:7D:AA:28:46:BF:A5:96
Certificate issuer:       /CN=A91AC777/serialNumber=8214F51A981441F15FB912225FD7D02FB943AE35
Certificate serial:       0547
Authority key identifier: 82:14:F5:1A:98:14:41:F1:5F:B9:12:22:5F:D7:D0:2F:B9:43:AE:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghT1GpgUQfFfuRIiX9fQL7lDrjU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/92967BBA78F811ECAF1C286CC4F9AE02.roa
Signing time:             Fri 03 May 2024 01:14:07 +0000
ROA not before:           Fri 03 May 2024 01:14:07 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     133449
IP address blocks:        103.229.128.0/24 maxlen: 24
                          103.237.143.0/24 maxlen: 24
                          103.237.168.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.crl
                          rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghT1GpgUQfFfuRIiX9fQL7lDrjU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1351 (0x547)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC777/serialNumber=8214F51A981441F15FB912225FD7D02FB943AE35
        Validity
            Not Before: May  3 01:14:07 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66343a5f-b503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e1:db:1f:89:97:e8:8e:37:d0:ed:ba:49:79:
                    b9:0a:e2:ab:99:a6:5b:14:c1:b9:7b:ef:86:7a:f3:
                    0c:af:7a:ab:c7:aa:cd:75:eb:a8:4f:8c:e7:3e:50:
                    ca:9d:05:0a:b1:f0:76:a1:4c:83:94:d8:82:d9:d3:
                    5f:d8:7b:f4:a9:96:23:ae:26:99:5a:05:c3:91:7b:
                    45:1f:53:77:58:64:d6:8e:39:f4:f5:3d:50:d5:6b:
                    c2:26:b9:cc:52:9b:bb:01:c7:f4:aa:ea:94:53:0a:
                    f5:4a:0a:ad:30:0f:ff:3e:5b:5b:1f:55:ee:8c:da:
                    cd:ed:d7:29:3f:e2:53:f2:d8:2d:50:eb:c1:28:2e:
                    9f:09:b1:40:ab:89:60:aa:95:8b:05:b6:fb:9a:01:
                    8f:f6:f6:e7:7a:be:fe:32:ae:76:fe:49:af:0d:bb:
                    2d:5c:df:f3:58:79:83:59:fa:01:57:8b:db:1a:00:
                    23:bf:6c:31:4e:94:76:b3:0f:c2:7a:64:29:c1:12:
                    1c:30:18:dc:d6:cc:23:17:16:2b:5d:8a:c6:4d:62:
                    bf:19:bc:4e:0e:72:fa:bb:44:d9:a7:53:b3:d2:6e:
                    59:94:a3:93:f5:76:7b:a6:58:8c:4f:ca:23:c2:c0:
                    6b:aa:85:b4:35:d7:4e:94:66:72:db:25:45:f1:91:
                    7d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4F:CC:30:12:F7:E0:43:46:9F:30:AF:E8:7D:AA:28:46:BF:A5:96
            X509v3 Authority Key Identifier:
                keyid:82:14:F5:1A:98:14:41:F1:5F:B9:12:22:5F:D7:D0:2F:B9:43:AE:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghT1GpgUQfFfuRIiX9fQL7lDrjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/92967BBA78F811ECAF1C286CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.128.0/24
                  103.237.143.0/24
                  103.237.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:40:d3:07:cf:03:62:b8:d0:c5:07:9c:1f:b2:ea:f8:35:54:
         e9:52:ac:79:1a:08:49:ab:b7:bc:5c:4d:61:08:32:f0:e4:dd:
         ce:5f:6b:cf:94:a0:06:d6:9a:a1:e7:de:f7:e4:6c:1d:da:fe:
         eb:eb:44:37:90:ba:a5:97:d5:95:f4:0b:8b:f9:66:29:45:1e:
         32:f7:c6:36:58:2f:9d:4a:0d:a7:fe:fe:aa:23:4e:44:a2:b4:
         46:50:c1:e0:45:58:07:f5:9a:88:ae:26:38:3c:4f:6f:52:fa:
         97:b8:47:dd:8e:3f:56:78:1f:cf:50:83:c7:d1:fc:7d:87:04:
         d0:68:71:f1:45:e6:49:01:2b:b5:32:cd:e5:8c:d4:da:20:9a:
         e9:ff:ec:31:f6:89:8b:9f:5a:bd:bd:d9:1f:72:6d:35:72:8e:
         70:6e:80:7c:ad:4e:33:a9:ed:cf:73:24:0f:94:58:16:45:96:
         b3:93:cc:67:86:aa:ec:f9:c4:8f:65:75:8c:6b:b9:01:5c:13:
         2c:c5:c8:db:78:0c:43:28:e1:e8:61:a9:31:9c:31:97:e0:c3:
         5c:4f:e0:ee:06:ce:60:6c:ea:7f:4a:e9:ae:db:0a:a2:8d:aa:
         bb:2a:64:d1:51:f3:ff:e6:43:12:a1:06:3c:ba:99:fa:e1:6b:
         03:2a:dc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:47 2024 by rpki-client on console-ams.rpki-client.org