Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/4B058994B18D11EC886B063CC4F9AE02.roa
File:                     4B058994B18D11EC886B063CC4F9AE02.roa (raw, json)
Hash identifier:          WURUYtGrE36qaA+U3h7jPSYSVF0DMG2ykrYxAeCPNho=
Subject key identifier:   5F:D7:BC:14:76:F7:B9:5F:08:ED:AE:F2:F7:CD:1A:C3:C1:52:A4:5B
Certificate issuer:       /CN=A91C0741/serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
Certificate serial:       0D1E
Authority key identifier: 37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/4B058994B18D11EC886B063CC4F9AE02.roa
Signing time:             Mon 04 Mar 2024 18:56:49 +0000
ROA not before:           Mon 04 Mar 2024 18:56:49 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     271917
IP address blocks:        103.83.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl
                          rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 17:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3358 (0xd1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0741/serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
        Validity
            Not Before: Mar  4 18:56:49 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65e61971-f582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ef:ef:6a:77:f6:db:cc:ad:41:af:76:2c:08:
                    a4:88:de:92:ba:25:37:a7:b2:c9:76:19:4b:d9:7f:
                    60:34:7f:6f:28:c1:56:ec:97:80:f4:79:ac:14:8c:
                    9b:2f:0c:c1:e4:5f:1b:5c:47:d9:bb:46:f2:2c:aa:
                    f9:20:b1:33:9a:47:f6:2e:44:74:d2:ea:6b:13:35:
                    cf:83:87:ad:b6:70:be:b9:f7:2c:e7:6d:89:69:60:
                    0a:3a:90:12:cd:bf:82:78:ef:af:85:2b:53:14:98:
                    0e:cf:50:2b:0d:96:93:04:8e:02:83:3b:f7:bb:ba:
                    e9:06:91:9b:7a:b6:66:fb:6d:8a:92:1f:f7:99:11:
                    02:ff:80:24:1a:14:a5:84:79:6c:20:bd:96:5d:dc:
                    92:cd:e4:58:b0:f8:ed:18:79:8e:32:67:64:f7:b4:
                    fd:53:80:f5:ea:b4:33:fa:97:32:b7:1a:a2:f6:a4:
                    93:f3:b8:75:b3:82:38:4c:09:ed:52:e8:9b:15:d3:
                    51:86:e7:1f:d6:6c:1d:2e:bb:1c:42:a7:61:d6:2a:
                    83:8c:09:86:2f:b2:c7:7c:fa:f1:68:f4:f1:0e:51:
                    a0:43:24:e2:62:72:22:29:47:f0:ad:97:67:97:79:
                    f2:1f:eb:ef:2d:24:fd:87:b3:36:c1:20:ba:c9:a7:
                    7f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D7:BC:14:76:F7:B9:5F:08:ED:AE:F2:F7:CD:1A:C3:C1:52:A4:5B
            X509v3 Authority Key Identifier:
                keyid:37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/4B058994B18D11EC886B063CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:a6:d9:8e:73:70:f9:b8:b3:1f:ec:0a:85:8c:8c:fa:ec:be:
         05:52:91:5b:af:07:33:77:b4:0e:5d:1e:a9:6d:7e:14:3b:93:
         a1:83:cb:09:cc:c6:15:ca:f9:f9:61:1e:38:ec:e3:bc:bc:46:
         dd:2d:68:fe:29:b9:b7:63:5c:de:37:42:b3:c3:a9:91:b2:5d:
         3f:39:30:ac:3b:5a:df:8b:03:93:06:58:82:29:34:f5:d7:9d:
         aa:68:a3:c2:86:5b:cb:c3:e3:97:57:1f:1e:d0:b4:3f:96:a8:
         3a:9d:9e:df:3a:0f:14:b1:04:46:1c:47:94:4f:34:21:23:fc:
         d1:2c:17:0b:69:ab:85:29:7c:08:56:25:cf:b3:40:04:94:72:
         db:91:a7:cd:2d:db:25:55:8f:f4:a4:26:74:57:46:06:11:a1:
         ff:bf:d5:f4:bd:7c:13:c4:c0:ed:80:ad:8b:00:ec:d5:b9:0a:
         db:a3:9c:7e:89:d2:79:1f:07:dc:25:d8:bb:05:d0:56:fa:6c:
         5f:88:6f:a1:6c:2e:2b:e4:99:bd:7f:0a:33:83:74:24:14:e3:
         b3:21:57:58:3c:e7:03:8b:5e:8e:d2:3a:97:07:24:1e:c4:2e:
         9d:c7:f6:92:89:45:46:a0:a0:d5:0c:4e:fc:f0:bf:9a:73:b3:
         ff:d4:d9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:36:24 2024 by rpki-client on console-fra.rpki-client.org