Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/FC3C8A6A81E211EE963BAB87C4F9AE02.roa
File:                     FC3C8A6A81E211EE963BAB87C4F9AE02.roa (raw, json)
Hash identifier:          548P4XWsPS3JTWuhyip3nqsrffc51BRt/khZw2JCljI=
Subject key identifier:   CF:78:2E:D9:97:F2:2E:A9:2D:56:43:96:CE:0C:88:09:81:86:AA:A9
Certificate issuer:       /CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0
Certificate serial:       04
Authority key identifier: F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/FC3C8A6A81E211EE963BAB87C4F9AE02.roa
Signing time:             Mon 13 Nov 2023 05:10:39 +0000
ROA not before:           Mon 13 Nov 2023 05:10:39 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     136262
IP address blocks:        103.141.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl
                          rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0
        Validity
            Not Before: Nov 13 05:10:39 2023 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=6551afcf-f5c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:42:9f:40:de:ca:4a:b3:77:51:3f:4e:cb:42:
                    ff:a0:4c:3f:7f:a4:1e:5d:6f:ca:30:04:ab:aa:75:
                    38:95:46:7d:89:bd:95:51:2f:d2:1f:36:1c:54:e1:
                    fb:d8:ae:23:3d:83:64:8d:5d:b4:cb:6a:ce:36:63:
                    e1:2b:66:ad:3a:30:b6:96:ec:61:51:24:ca:32:45:
                    25:cd:8f:fa:05:a3:cc:50:e5:29:0f:2c:ad:65:5f:
                    55:51:bf:e4:dc:94:35:90:39:04:14:9f:0d:8f:ef:
                    0a:67:09:2a:56:cc:76:58:b3:88:3a:39:f3:a9:52:
                    f4:0c:55:2a:9d:82:f7:67:a6:cc:59:36:94:19:45:
                    51:82:8c:09:a9:ff:5c:54:f4:71:a7:08:d1:91:28:
                    c9:f5:54:10:43:fb:40:1e:98:c9:94:f8:7c:8f:df:
                    e9:db:3f:05:67:27:ac:ca:9e:61:ae:73:29:28:54:
                    5b:4f:e0:d0:37:8c:76:83:e6:ab:20:cf:45:ae:f3:
                    1a:da:f4:3d:44:68:44:04:fd:33:86:04:81:54:a8:
                    69:ed:c4:7a:17:f6:8b:9c:bb:47:f8:c1:49:6e:bf:
                    bd:a8:6e:12:b7:59:0f:c9:8c:7e:99:04:79:0c:0c:
                    a4:ea:fb:6e:21:b9:54:c8:0d:c8:7b:ed:14:6d:7c:
                    23:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:78:2E:D9:97:F2:2E:A9:2D:56:43:96:CE:0C:88:09:81:86:AA:A9
            X509v3 Authority Key Identifier:
                keyid:F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/FC3C8A6A81E211EE963BAB87C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:03:8d:50:d4:7e:10:86:33:a4:ff:c2:3e:1e:3c:fc:49:a0:
         fd:d9:43:a5:ac:bd:77:84:20:2b:88:64:c1:18:62:03:79:01:
         b2:9a:70:09:e6:3f:12:64:e9:c3:2a:bd:fc:59:2a:a1:9f:84:
         69:e0:23:a6:dd:83:5d:11:74:e7:e0:b9:8a:97:78:c5:77:76:
         23:5e:85:e4:3f:fb:8a:87:44:2d:ef:b2:9b:22:8c:0c:8e:e9:
         38:c9:b5:c2:3c:e1:c9:a8:ff:17:68:e3:15:cf:92:e0:b3:37:
         82:b1:8c:94:02:59:bb:33:b3:e9:cc:34:8f:c9:0b:09:6e:54:
         b4:1c:88:54:2b:dc:f5:53:34:1a:53:56:b0:88:23:11:43:d5:
         aa:b1:43:78:1d:83:61:fd:66:77:9d:f7:74:b4:31:08:9b:3e:
         e0:a8:e5:9b:88:84:1b:ba:3f:b8:32:1b:02:b0:e4:ef:93:1a:
         b7:7d:dc:63:22:09:50:77:a4:88:f1:7d:84:7b:39:c1:ef:0a:
         9e:60:a8:90:5f:f4:e1:19:0f:d1:db:c6:b4:c8:00:ce:2d:03:
         62:02:fc:11:2c:46:dc:63:b8:c6:9f:3b:94:6b:ab:0c:90:ec:
         6f:18:bb:af:00:7c:46:26:9d:ce:2f:3e:8b:fa:25:03:88:d8:
         dc:f1:4c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:21 2024 by rpki-client on console-ams.rpki-client.org