Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/3C3F21BAD6F011EE9B38B67DC4F9AE02.roa
File:                     3C3F21BAD6F011EE9B38B67DC4F9AE02.roa (raw, json)
Hash identifier:          u322EHujrVRo9OC7ZpT3sQ6YS+unmZdbppt6TaJ+XJ4=
Subject key identifier:   DC:9B:41:F5:41:82:6A:7D:9D:64:E5:62:C9:67:17:92:52:E7:0C:DF
Certificate issuer:       /CN=A91B3CA4/serialNumber=B58D29F7B8107F1585B5FFE70C502C6C8F5D3302
Certificate serial:       0769
Authority key identifier: B5:8D:29:F7:B8:10:7F:15:85:B5:FF:E7:0C:50:2C:6C:8F:5D:33:02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/3C3F21BAD6F011EE9B38B67DC4F9AE02.roa
Signing time:             Thu 29 Feb 2024 10:49:39 +0000
ROA not before:           Thu 29 Feb 2024 10:49:39 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     150774
IP address blocks:        103.138.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.crl
                          rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1897 (0x769)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3CA4/serialNumber=B58D29F7B8107F1585B5FFE70C502C6C8F5D3302
        Validity
            Not Before: Feb 29 10:49:39 2024 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=65e06142-1334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:be:66:b4:58:83:76:26:0b:83:35:76:ac:67:
                    95:1b:e7:8d:6d:9b:f0:da:28:ae:8b:b5:2f:ed:10:
                    be:d3:7f:65:38:b9:c1:43:f8:7d:44:2f:2b:33:67:
                    4a:26:5f:51:16:3f:ce:52:28:d3:f8:72:c5:98:67:
                    bf:18:e5:d9:95:dc:f8:1e:45:4b:72:a9:5d:f0:70:
                    3a:78:af:9e:99:e2:34:3f:0e:de:5a:fa:43:04:9c:
                    64:c6:7e:27:32:50:8a:b0:c6:41:ae:99:0c:cd:94:
                    01:e7:81:3c:b0:f4:09:44:39:67:1e:a2:aa:8c:c9:
                    17:53:fe:e4:8d:f7:94:8a:4f:f4:47:14:74:6e:70:
                    42:f7:44:29:03:8c:49:4e:49:46:ac:1d:c1:ea:f4:
                    62:fb:c2:87:47:7f:63:65:d5:c5:25:41:e5:ff:7f:
                    c6:73:c5:35:8e:b4:b4:65:6a:dc:bc:be:c5:94:46:
                    92:57:1e:fa:71:06:fc:02:c2:eb:f7:90:8b:4f:43:
                    f0:30:79:44:27:aa:f2:b1:4a:65:51:0c:0c:22:fa:
                    e1:fd:df:e8:bf:48:97:7b:7c:9e:55:6a:31:ec:6d:
                    73:a5:b9:e8:b4:e3:46:51:8e:7f:7b:5f:ab:df:6e:
                    d7:08:80:d7:ba:22:93:4e:1c:a1:4b:a4:d8:38:b7:
                    01:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9B:41:F5:41:82:6A:7D:9D:64:E5:62:C9:67:17:92:52:E7:0C:DF
            X509v3 Authority Key Identifier:
                keyid:B5:8D:29:F7:B8:10:7F:15:85:B5:FF:E7:0C:50:2C:6C:8F:5D:33:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/3C3F21BAD6F011EE9B38B67DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:15:ac:d0:2f:da:43:bf:29:de:3a:30:4a:98:fc:17:ef:66:
         79:32:52:da:5d:b7:78:57:32:7f:1e:4a:b6:b6:14:cd:cd:8c:
         34:12:e4:73:75:c0:1b:9a:60:a7:56:4d:69:3d:f3:23:ab:ac:
         7b:12:89:d6:ec:c8:f8:56:01:37:c3:89:e7:50:cf:d0:3f:f2:
         ad:1a:81:7c:ea:15:b2:a0:4e:8a:96:d7:af:38:e8:41:5a:65:
         0c:3e:ee:af:35:05:72:82:e2:ca:3f:61:ef:a5:b0:af:f5:bd:
         2a:db:10:a8:e0:c7:61:8a:b7:15:a1:00:01:cc:ed:6f:58:30:
         f1:91:c3:16:c0:31:99:b3:b7:4c:04:00:11:88:25:19:3c:4e:
         40:87:ce:61:97:37:60:72:7f:a2:94:ab:61:cc:83:c6:a7:f9:
         87:b5:d9:53:3a:c9:5a:14:2d:b5:b4:47:12:2d:7d:50:ef:da:
         d2:fd:f0:8e:eb:4e:5a:5d:c6:36:63:9f:92:00:dc:bd:d0:54:
         c6:11:5a:21:ab:cc:b5:f4:c6:57:5f:1b:36:c0:03:b7:0c:05:
         54:06:6e:de:09:8f:c9:77:70:6c:81:f9:db:0d:60:4c:95:11:
         34:b9:c2:e4:5a:0a:99:c9:0d:bc:58:50:e4:83:10:82:6a:a1:
         59:a9:1b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:30:20 2024 by rpki-client on console-ams.rpki-client.org