Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/B5F911E8429411EC8882FA1EC4F9AE02.roa
File:                     B5F911E8429411EC8882FA1EC4F9AE02.roa (raw, json)
Hash identifier:          eiFpIrtVuamTu+rojHR+H9DwuIU7s8sph+ALrli0Nnc=
Subject key identifier:   7C:35:C9:EE:A6:99:10:3D:C6:7F:9B:6E:71:72:2E:11:11:1D:DD:F0
Certificate issuer:       /CN=A91AFC4E/serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A
Certificate serial:       035F
Authority key identifier: 1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/B5F911E8429411EC8882FA1EC4F9AE02.roa
Signing time:             Fri 17 Nov 2023 02:03:51 +0000
ROA not before:           Fri 17 Nov 2023 02:03:51 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     131316
IP address blocks:        103.100.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl
                          rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 02:32:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 863 (0x35f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFC4E/serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A
        Validity
            Not Before: Nov 17 02:03:51 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6556ca07-efb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:39:65:ec:a0:ab:9f:36:df:9a:16:89:ad:42:
                    1f:5a:dc:e7:b8:99:f2:04:05:45:96:75:55:6a:fc:
                    ab:5d:3a:8a:c4:61:0a:cc:92:8e:2b:e5:a4:dc:1b:
                    64:ab:e0:a6:3f:b8:85:f3:5b:64:d7:74:9a:6a:41:
                    d1:80:08:a8:18:e8:34:8f:19:09:25:a5:21:9e:71:
                    37:62:61:a5:c7:d7:6f:56:0f:6d:ad:05:4e:82:8b:
                    a5:85:8f:e6:1a:4f:e0:cd:bb:28:5d:f3:ee:7e:22:
                    f0:71:a4:a0:ca:81:43:ee:92:4d:7c:3d:b3:5d:1a:
                    0f:20:df:ef:ac:b6:0f:53:fd:2e:80:66:fc:90:d7:
                    c6:30:0b:1d:b3:e0:be:1e:62:b0:8b:a2:96:34:1e:
                    24:db:ad:5e:2c:96:0e:74:09:8e:c0:73:99:b1:08:
                    b4:db:92:65:d3:9a:03:a5:d4:db:e4:6a:1a:d4:d1:
                    9b:a7:a1:99:d1:aa:e7:5a:50:82:e1:e2:e5:e6:72:
                    92:08:24:27:1b:cf:7c:05:f0:ed:01:8c:e9:13:1b:
                    7e:54:fb:43:08:cd:39:ed:2d:a8:63:c8:a2:1a:03:
                    19:f3:2c:f4:14:cf:32:22:e1:8c:fe:2c:e0:13:55:
                    9b:ac:7b:05:3f:4c:f1:fd:c1:f0:95:33:1f:1d:e2:
                    b6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:35:C9:EE:A6:99:10:3D:C6:7F:9B:6E:71:72:2E:11:11:1D:DD:F0
            X509v3 Authority Key Identifier:
                keyid:1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/B5F911E8429411EC8882FA1EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:2e:ac:17:27:68:45:07:40:b7:95:74:9b:01:dd:fe:39:88:
         82:38:a8:47:87:ba:cd:e9:d7:fc:fc:9a:b6:ca:54:88:f1:bb:
         5d:49:5a:65:be:1c:9e:97:e9:50:90:9f:5e:e5:eb:40:58:46:
         3e:4e:46:49:d3:e2:ae:96:07:0c:54:67:ec:66:2b:f9:07:15:
         27:36:29:36:47:0c:b9:e0:e8:19:74:96:55:a9:b1:07:c2:9f:
         76:12:a4:97:cf:08:b0:ea:19:d8:0e:06:92:ba:2d:75:0b:b0:
         db:e1:af:ce:d2:09:df:75:3b:b2:10:ba:36:b2:57:11:9f:fc:
         ba:2c:5f:53:93:06:3e:9d:86:15:75:b6:bc:ae:06:27:ba:f0:
         0b:39:ca:0e:f9:b4:bf:8e:f4:19:6c:3f:91:be:0d:39:5b:c0:
         13:e8:09:f7:9b:4f:04:40:60:4f:6b:d9:d7:d3:f6:78:07:c9:
         83:90:25:34:ec:c0:d3:54:bc:07:41:7c:4d:ba:d6:87:f7:c0:
         4b:47:79:55:94:44:89:a7:71:35:3f:53:f1:8f:bd:44:4a:77:
         c0:74:c9:62:e0:e8:dd:9f:45:7e:73:00:a6:ed:e8:4d:50:b5:
         4e:95:01:14:89:61:bd:00:94:e4:27:3a:05:b8:8d:a8:2a:b8:
         20:05:bd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:06:33 2024 by rpki-client on console-ams.rpki-client.org