Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/59179A7E0F3211EDA9D57685C4F9AE02.roa
File:                     59179A7E0F3211EDA9D57685C4F9AE02.roa (raw, json)
Hash identifier:          3MexE2Ef/70Vdkn5/BRpA8PSShaP/zOIN02NAcupUFo=
Subject key identifier:   CD:1E:B6:6E:F4:B0:C8:81:B7:35:14:FB:CB:09:4F:BE:33:4F:23:26
Certificate issuer:       /CN=A91AEE40/serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
Certificate serial:       0126
Authority key identifier: 03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/59179A7E0F3211EDA9D57685C4F9AE02.roa
Signing time:             Tue 15 Aug 2023 03:43:46 +0000
ROA not before:           Tue 15 Aug 2023 03:43:46 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     140988
IP address blocks:        103.66.168.0/23 maxlen: 23
                          103.66.168.0/24 maxlen: 24
                          103.66.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl
                          rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEE40/serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
        Validity
            Not Before: Aug 15 03:43:46 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64daf472-ab76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:79:35:b5:91:9e:bc:83:cb:53:b6:40:84:ed:
                    c3:9f:38:74:39:64:f1:c2:e7:c4:40:71:0a:a9:93:
                    40:8a:f1:06:f6:88:e2:c6:78:fd:3a:27:6a:c5:b7:
                    ea:61:24:4b:61:11:16:cb:27:d6:36:e1:af:fa:d3:
                    4a:fa:1a:44:fa:6f:39:cc:b4:dc:1a:ce:d1:8f:61:
                    bc:5b:00:74:f7:06:ba:dc:21:b4:e9:c6:e7:ca:28:
                    9b:b8:40:4c:29:6f:11:2c:d6:db:f8:f0:b9:85:1d:
                    8a:d1:0f:2b:5f:8b:70:e8:4f:9a:05:57:e6:7d:35:
                    e5:de:81:bb:ca:36:1e:d1:d1:58:68:ae:5c:bc:0f:
                    5e:f2:44:70:df:ee:fe:88:60:3c:03:91:ae:8c:56:
                    26:85:d1:79:5c:2b:8b:79:c9:9a:5e:db:1e:ec:bb:
                    59:7d:07:82:91:a7:ad:c5:2c:68:23:f0:fa:4c:e5:
                    fa:26:7a:84:1c:8a:67:65:da:d5:f9:fc:d6:e9:73:
                    be:01:2d:a6:bb:09:b5:bd:5a:99:37:eb:d9:c8:af:
                    bf:b2:b6:7e:4f:b0:e3:d2:c9:29:a6:ec:2a:be:49:
                    e3:f7:9e:0e:11:51:8b:0b:f8:20:4b:af:3d:4c:0f:
                    30:c9:e8:21:1f:54:e3:3c:6e:50:fc:f9:54:9f:4d:
                    45:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:1E:B6:6E:F4:B0:C8:81:B7:35:14:FB:CB:09:4F:BE:33:4F:23:26
            X509v3 Authority Key Identifier:
                keyid:03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/59179A7E0F3211EDA9D57685C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:c5:7d:8e:c4:b0:6c:58:eb:a5:ba:77:40:00:c5:61:50:00:
         6d:e9:26:41:d5:3b:e7:19:bd:89:28:43:28:50:d6:97:67:17:
         22:bc:db:2e:c9:7d:f9:90:ea:7d:03:13:86:d5:cb:58:e0:86:
         7a:62:da:fb:f4:0d:ad:b8:39:d4:75:51:f5:4e:18:f4:20:00:
         9b:1f:c4:1c:11:0a:d1:d4:72:78:12:52:04:cd:8e:91:24:14:
         a7:df:1e:f8:0c:74:cc:3c:85:67:d5:d4:05:f1:00:18:7b:16:
         70:8f:c4:1e:9d:5f:75:08:a6:12:c8:c7:6e:e3:83:e8:23:62:
         ce:fd:18:cf:f3:ea:2f:98:9e:23:a8:71:3e:f8:c7:a7:5e:72:
         6a:6f:95:1b:73:cd:b2:6b:3c:36:4b:fe:9d:8e:a9:ed:cc:35:
         59:c6:52:05:9c:8d:14:2e:62:8d:18:68:bc:f3:04:23:f4:d8:
         91:e1:67:3c:4b:78:8f:c4:23:5f:9f:5f:04:af:28:86:b7:bc:
         7b:32:da:ce:10:ae:75:ca:71:0d:69:6a:2a:b5:c5:57:5d:42:
         4f:e7:4a:79:6e:5c:21:47:75:03:0c:ff:58:b2:85:b4:63:89:
         0f:e1:5e:ef:75:b7:3c:a3:ed:f5:6c:92:dd:e6:18:44:10:f4:
         15:7b:5f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 05:27:33 2024 by rpki-client on console-fra.rpki-client.org