Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/7577B66812CD11EFAC15BB64C4F9AE02.roa
File:                     7577B66812CD11EFAC15BB64C4F9AE02.roa (raw, json)
Hash identifier:          5DPHq/CY+S8v0HlXrSKOIZMp7ysvYorgp09+oTX5qjM=
Subject key identifier:   10:26:7F:BF:9D:93:B5:80:89:BA:8D:FE:29:67:A6:91:3A:A2:8D:2C
Certificate issuer:       /CN=A91C0E6A/serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A
Certificate serial:       BD
Authority key identifier: F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/7577B66812CD11EFAC15BB64C4F9AE02.roa
Signing time:             Wed 15 May 2024 15:11:52 +0000
ROA not before:           Wed 15 May 2024 15:11:52 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     215133
IP address blocks:        103.130.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl
                          rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 07:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0E6A/serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A
        Validity
            Not Before: May 15 15:11:52 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=6644d0b8-95c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:26:53:c3:86:84:75:50:8e:56:5d:10:64:83:
                    92:70:f4:f4:81:56:88:f0:cc:cb:da:d7:8d:e7:da:
                    3a:93:55:71:2f:98:f9:d4:a2:9c:6e:c1:72:3a:db:
                    91:7d:b1:e2:5f:f0:6b:ed:02:54:7d:e1:6f:0f:bd:
                    b0:9d:d0:70:40:b4:41:55:96:d6:f8:be:4b:9a:f6:
                    b3:59:dc:01:19:ff:3e:93:41:32:71:32:f5:b2:8f:
                    fa:e4:ac:84:33:21:9e:95:e9:7c:c3:9d:32:97:c9:
                    d7:cf:45:a2:e5:44:cf:6c:74:fb:96:b9:7a:cc:54:
                    a7:0c:12:a2:48:ae:90:c1:4a:1a:1d:1d:1a:7f:f1:
                    bc:12:a4:fb:c5:41:c7:1b:1e:45:12:b8:44:32:dd:
                    4a:e4:cf:26:ad:08:9b:33:54:84:7e:e4:3a:e5:86:
                    95:ed:a0:5a:3f:e9:85:aa:c3:dc:0c:27:cc:62:82:
                    f0:63:2e:65:1d:20:58:8f:74:b5:1b:58:3f:69:a8:
                    81:b5:d8:9b:e9:77:ff:a9:b1:ca:10:1d:26:ef:b7:
                    1c:97:09:a2:24:1e:55:b6:93:12:96:28:7a:31:82:
                    ba:00:b8:8d:e0:a6:bf:21:48:5b:26:f6:59:42:87:
                    3e:ea:77:29:07:1e:a7:94:fd:bb:9c:a8:ad:42:97:
                    da:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:26:7F:BF:9D:93:B5:80:89:BA:8D:FE:29:67:A6:91:3A:A2:8D:2C
            X509v3 Authority Key Identifier:
                keyid:F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/7577B66812CD11EFAC15BB64C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:72:d5:27:fc:d0:b7:99:44:ec:36:e9:28:90:f7:00:98:e2:
         18:bc:00:75:57:e0:a0:76:68:da:6c:4a:83:30:be:19:06:0f:
         de:4b:b6:93:a8:f1:dd:d2:8c:5a:06:9d:59:08:77:00:e0:34:
         21:84:3d:60:21:e0:4e:84:89:fb:09:72:89:d5:e2:19:4c:1f:
         eb:04:ec:3b:fc:54:99:90:5b:ce:0d:64:8e:32:83:78:64:29:
         3d:5b:15:ac:59:1a:f4:73:81:22:49:58:ae:0b:c9:48:df:ab:
         e8:35:08:91:ad:bc:8a:56:70:ca:37:e8:0a:89:82:17:64:91:
         73:7c:0e:b1:73:2f:29:b7:56:33:c5:99:84:38:2c:ed:4c:bd:
         0e:c7:ae:7b:ad:7b:a1:37:0d:d1:c7:6f:c2:b6:7a:e2:bb:d1:
         ba:48:3e:43:9f:33:74:bd:44:ea:b1:56:43:47:f7:56:34:c8:
         4b:45:46:98:e5:2b:d6:3a:55:f8:09:da:f0:6f:fd:71:34:9f:
         9a:79:64:75:30:81:41:92:8c:92:ee:c8:6a:a2:36:e4:0d:f2:
         81:e9:e4:f5:86:6e:35:e6:93:82:10:fb:b6:43:4e:4a:72:6a:
         43:25:e9:db:1a:73:35:ee:e6:3b:80:11:b1:fd:38:77:c8:9e:
         01:68:82:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 09:41:07 2024 by rpki-client on console-ams.rpki-client.org