Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/17780EF09B3C11E8A13BA63AC4F9AE02.roa
File:                     17780EF09B3C11E8A13BA63AC4F9AE02.roa (raw, json)
Hash identifier:          hx51tu3BzE0Ovl4vomnYpy0oQpk07CS6QaPZ68JMslE=
Subject key identifier:   EE:ED:24:26:3D:D5:10:36:48:47:19:DF:12:CC:B9:CC:3D:76:72:EB
Certificate issuer:       /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Certificate serial:       1293
Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/17780EF09B3C11E8A13BA63AC4F9AE02.roa
Signing time:             Mon 28 Aug 2023 17:34:43 +0000
ROA not before:           Mon 28 Aug 2023 17:34:43 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     23876
IP address blocks:        103.110.212.0/23 maxlen: 24
                          123.49.43.0/24 maxlen: 24
                          218.100.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
                          rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4755 (0x1293)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
        Validity
            Not Before: Aug 28 17:34:43 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ecdab3-d08b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5c:05:bc:5d:a3:64:7f:14:3f:ef:98:27:dc:
                    e3:42:59:17:d8:ea:b0:81:93:06:9a:4d:bb:44:40:
                    b2:6f:f5:ab:de:80:3a:4a:c8:50:8d:66:8e:a3:ec:
                    52:de:19:c7:1c:be:d6:bc:8e:4a:6b:24:09:21:bd:
                    41:63:cd:75:39:00:54:86:a0:e3:72:9d:8a:1a:35:
                    9f:74:ea:a5:36:ad:4a:36:93:be:da:7e:47:c7:3f:
                    6a:46:42:aa:03:c1:87:05:87:b4:c5:0c:85:4b:f4:
                    69:29:1c:9a:e7:63:80:fd:e7:3e:7c:07:10:6f:8b:
                    61:5d:22:32:e6:6a:41:48:79:d5:8c:d6:02:04:0a:
                    a6:e3:5e:de:75:5a:e7:c1:d2:de:40:fb:d8:e1:48:
                    23:43:32:35:b3:a3:ba:3b:ce:c3:ed:35:f3:95:db:
                    65:cf:a3:92:e3:c6:81:01:90:e1:02:8b:1b:85:64:
                    88:53:5a:05:19:e6:31:3b:74:2a:16:2d:41:4b:68:
                    ea:92:12:57:ca:5c:23:45:7e:46:4e:3e:43:1d:ab:
                    eb:25:12:b5:bd:51:e2:18:85:9c:5f:3b:32:9f:c3:
                    11:f7:88:49:4f:1a:f4:b7:46:a7:cf:f2:78:3b:4c:
                    3b:93:90:78:52:2d:79:cf:ba:21:7d:ee:ec:8c:d6:
                    bd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:ED:24:26:3D:D5:10:36:48:47:19:DF:12:CC:B9:CC:3D:76:72:EB
            X509v3 Authority Key Identifier:
                keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/17780EF09B3C11E8A13BA63AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.212.0/23
                  123.49.43.0/24
                  218.100.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:c2:83:20:95:c6:57:fb:32:b7:42:a7:3b:22:10:7b:a5:3b:
         a1:fa:5d:e4:d9:45:ad:3a:34:8b:11:48:8e:e0:10:17:6e:51:
         63:97:c5:4c:e8:79:e5:06:63:71:39:8b:f6:af:c0:e0:fc:ab:
         25:bb:c9:5c:65:db:78:a8:c3:5b:cb:d9:5f:81:47:2c:6d:d2:
         63:b6:fa:8c:6d:18:1f:5a:80:9a:a6:1d:57:e5:70:42:3a:7a:
         f6:be:0e:bd:b9:e7:1a:1f:ea:91:6f:eb:db:f0:01:15:bf:4a:
         d1:82:60:1a:09:9f:ac:56:c2:09:39:47:28:a1:6b:22:e0:c6:
         80:ef:a4:c7:ba:31:c8:d4:64:59:60:98:51:55:f4:d0:09:4a:
         b2:ec:1f:bf:c6:b1:64:7b:8c:cb:fe:46:05:29:76:ed:e2:a4:
         cd:d9:a8:e9:dc:e4:b8:51:6c:a9:04:96:0f:74:3c:34:e7:f9:
         ff:16:36:22:9b:4d:d1:d7:a6:aa:3a:28:a1:19:62:d9:3a:0d:
         3c:03:13:68:aa:e3:8e:12:85:31:45:9f:42:68:e8:02:29:35:
         b3:c5:19:60:8c:e9:8b:20:88:f2:03:31:ab:57:13:2d:a9:03:
         d2:ea:9c:39:02:52:d3:2f:48:65:76:3b:22:1c:0d:96:88:f0:
         2e:48:e0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 18:21:39 2024 by rpki-client on console-ams.rpki-client.org