Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB31B/755208DC553E11EB9187F478C4F9AE02/C45188B8554D11EBA9D33130C4F9AE02.roa
File:                     C45188B8554D11EBA9D33130C4F9AE02.roa (raw, json)
Hash identifier:          oaZwV6VdiAWhU8LpCHEa1Wy0xGXTkB3v4AFCD4GLNIA=
Subject key identifier:   46:CD:81:87:68:62:45:7A:AC:2C:EE:1E:F3:C6:2E:1C:F7:9F:44:49
Certificate issuer:       /CN=A91BB31B/serialNumber=27C5BE05E9FC30B312A069102DFEAF8EA75EF744
Certificate serial:       05FB
Authority key identifier: 27:C5:BE:05:E9:FC:30:B3:12:A0:69:10:2D:FE:AF:8E:A7:5E:F7:44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8W-Ben8MLMSoGkQLf6vjqde90Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB31B/755208DC553E11EB9187F478C4F9AE02/C45188B8554D11EBA9D33130C4F9AE02.roa
Signing time:             Sat 23 Mar 2024 00:02:28 +0000
ROA not before:           Sat 23 Mar 2024 00:02:28 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     9381
IP address blocks:        45.120.168.0/22 maxlen: 24
                          103.6.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB31B/755208DC553E11EB9187F478C4F9AE02/J8W-Ben8MLMSoGkQLf6vjqde90Q.crl
                          rsync://rpki.apnic.net/member_repository/A91BB31B/755208DC553E11EB9187F478C4F9AE02/J8W-Ben8MLMSoGkQLf6vjqde90Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8W-Ben8MLMSoGkQLf6vjqde90Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Jun 2024 23:53:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1531 (0x5fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB31B/serialNumber=27C5BE05E9FC30B312A069102DFEAF8EA75EF744
        Validity
            Not Before: Mar 23 00:02:28 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65fe1c13-0239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a5:90:32:e0:d8:e5:9d:81:72:bf:dc:db:1e:
                    ca:77:ef:fc:c9:33:55:29:22:51:96:c1:f8:ef:c6:
                    e8:be:60:f0:77:a1:87:99:ce:bb:34:c1:38:ad:ca:
                    38:27:9d:8e:95:82:e2:79:02:8e:01:99:20:56:32:
                    ce:53:f9:13:30:59:c8:a4:e9:1f:4d:3a:f9:ab:6e:
                    14:9b:e7:94:18:46:5d:f8:7a:88:38:b2:9b:b4:14:
                    55:ce:db:4a:11:96:ec:60:24:da:9f:36:ca:e5:96:
                    b0:9c:9e:0c:31:88:24:ca:0e:2c:ba:50:17:f4:dd:
                    4f:96:fa:40:7c:80:58:b0:47:42:96:26:f5:7a:7d:
                    56:91:70:b8:aa:46:2f:f9:9e:73:44:47:c0:a7:7d:
                    c2:79:7b:7a:e0:37:86:62:64:2c:ea:ea:c8:dc:39:
                    1f:b2:f6:27:a9:09:2c:b7:d6:dd:bb:21:14:db:47:
                    42:4d:b6:be:be:a2:24:78:9b:ed:6d:e5:95:62:fb:
                    32:1b:87:b0:8a:ae:58:a0:d6:5c:4c:9a:cd:22:09:
                    f3:ac:86:af:9f:fb:d6:8d:77:5e:98:9f:dd:f3:ad:
                    ca:13:e9:25:3e:99:b7:17:c4:93:65:71:dd:2a:18:
                    6c:9f:2e:bc:4a:7d:19:37:dd:b9:4f:4c:16:28:52:
                    c1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CD:81:87:68:62:45:7A:AC:2C:EE:1E:F3:C6:2E:1C:F7:9F:44:49
            X509v3 Authority Key Identifier:
                keyid:27:C5:BE:05:E9:FC:30:B3:12:A0:69:10:2D:FE:AF:8E:A7:5E:F7:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB31B/755208DC553E11EB9187F478C4F9AE02/J8W-Ben8MLMSoGkQLf6vjqde90Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8W-Ben8MLMSoGkQLf6vjqde90Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB31B/755208DC553E11EB9187F478C4F9AE02/C45188B8554D11EBA9D33130C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.120.168.0/22
                  103.6.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:2e:0e:c0:e9:dc:2e:ea:3c:48:41:b5:09:34:7c:d0:c5:7a:
         4e:07:0d:88:51:42:19:3d:5c:9e:5c:e6:22:36:9a:fc:a7:f4:
         3c:09:60:62:00:6a:8e:45:39:7e:92:31:bb:b5:31:dd:38:5f:
         a7:19:77:86:31:b8:a6:d6:87:b2:c3:d5:4b:1a:a1:38:3e:47:
         8c:d0:a5:61:d9:42:e4:10:2d:a8:a2:af:2e:a2:23:f9:77:f7:
         c5:d9:33:dd:4a:c6:df:68:e3:83:91:41:7d:75:3d:d9:79:50:
         db:00:c1:34:15:cf:43:9f:60:2c:fe:6e:a9:db:71:cd:23:bc:
         c6:8c:e6:05:38:15:f8:8f:db:99:45:0e:1d:65:eb:cc:e0:20:
         bf:09:5a:23:ed:21:58:37:1c:61:40:93:4e:5d:8f:b4:5d:fb:
         40:bc:ca:97:9d:f3:dd:16:ed:04:24:c7:55:ac:34:9e:7e:37:
         7f:f3:63:c0:3d:1b:03:50:42:fc:00:2c:4f:88:76:79:40:e1:
         8c:40:c5:27:1f:62:d7:6a:e8:37:61:9f:52:4c:69:ae:2f:45:
         f0:e9:63:1f:06:fe:93:7b:05:67:8e:12:c2:66:fb:df:9e:95:
         af:8d:b3:9b:92:9d:6c:6d:8c:09:3c:e9:6a:0b:bb:fd:f5:3a:
         b3:c6:10:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 00:32:52 2024 by rpki-client on console-fra.rpki-client.org