Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/B76C776472E411ED833AE326C4F9AE02.roa
File:                     B76C776472E411ED833AE326C4F9AE02.roa (raw, json)
Hash identifier:          8ESr5AHaLU3ScgTHpRgo6a6bq6KGpzQvfWDCdvjEYds=
Subject key identifier:   E5:82:3D:A6:17:5E:75:76:DB:31:A9:17:E9:71:5D:F4:CF:2D:AA:40
Certificate issuer:       /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Certificate serial:       058A
Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/B76C776472E411ED833AE326C4F9AE02.roa
Signing time:             Mon 14 Aug 2023 23:20:34 +0000
ROA not before:           Mon 14 Aug 2023 23:20:34 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     400619
IP address blocks:        103.68.192.0/24 maxlen: 24
                          103.68.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl
                          rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 23:54:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1418 (0x58a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
        Validity
            Not Before: Aug 14 23:20:34 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64dab6c2-abc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:80:2c:72:e3:ad:43:7b:57:cb:c6:48:3c:4d:
                    d5:db:d8:eb:58:af:0c:e7:0b:8a:92:94:42:80:45:
                    d3:d1:15:76:b3:64:e8:31:28:c2:09:86:77:0e:04:
                    eb:6e:ad:71:52:d2:28:2f:02:c5:c9:31:09:43:30:
                    6b:99:fd:2d:0b:73:81:ea:ca:1a:30:ff:b9:62:87:
                    fd:68:2f:b9:30:9d:23:f0:55:bf:e1:0d:83:5b:a0:
                    81:00:32:57:02:11:22:ff:94:d2:3e:11:ce:d9:5d:
                    ee:d7:c7:36:73:9c:a2:37:2d:89:60:e8:a9:f6:d2:
                    a0:69:4c:c9:27:d6:5a:8f:c0:97:b8:c8:cb:60:1f:
                    8c:25:38:34:79:fa:86:ea:7b:3b:c1:c3:78:f6:68:
                    e4:3f:ff:1e:be:16:95:b9:d2:5b:de:17:a0:0a:83:
                    5d:9b:5e:39:4d:f6:e2:0e:85:94:12:c4:73:0d:a5:
                    11:88:5a:3a:06:a6:72:a4:cf:39:20:07:96:39:7f:
                    5d:85:86:ec:17:da:03:c2:ff:95:4c:5c:01:9d:f5:
                    d7:48:1b:11:d6:74:4c:2c:e1:44:50:9e:75:8b:b4:
                    a9:1b:78:07:34:5a:ab:d6:16:82:8d:06:a0:80:51:
                    6f:30:cb:8c:31:83:26:3d:eb:12:58:cc:00:ad:66:
                    4d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:82:3D:A6:17:5E:75:76:DB:31:A9:17:E9:71:5D:F4:CF:2D:AA:40
            X509v3 Authority Key Identifier:
                keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/B76C776472E411ED833AE326C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cb:32:dd:b5:ad:9e:5d:49:a1:1e:f3:53:61:2f:ce:de:cc:eb:
         00:3b:b0:d3:ea:de:04:f6:51:88:af:f1:60:eb:d6:03:40:76:
         43:09:e4:f1:13:55:25:80:32:d5:04:0c:2a:4c:9a:9a:32:ff:
         41:5d:80:16:8e:b5:ba:67:de:a0:f5:75:81:ec:03:a1:b1:68:
         6b:05:a4:1f:59:eb:fa:62:57:62:c8:fa:3d:8f:62:79:f3:e6:
         f4:e5:74:94:be:d0:62:ac:7b:7b:9e:d8:b4:0f:6e:41:57:2a:
         e7:d0:df:a2:f3:2c:ea:9b:94:93:5c:07:7c:1a:c1:36:d7:5e:
         da:25:96:7d:74:7c:dc:7f:5c:87:90:c9:94:e6:4d:cc:67:f7:
         7e:27:6f:68:7a:76:c0:1d:72:a4:f6:ca:08:27:b8:92:90:c3:
         52:88:e1:2c:b6:f6:9e:62:91:01:ce:e9:e5:8c:8a:97:0c:c6:
         2c:a1:d2:f0:e6:7c:da:0e:2b:c7:1a:d4:c2:fc:ae:03:a3:68:
         c7:05:90:98:22:22:a9:8f:8d:79:3d:36:2d:f0:11:06:98:0b:
         68:22:c3:9f:5d:1e:6d:43:40:c1:02:ea:63:c4:71:29:30:a9:
         31:0b:4a:76:fa:e0:3a:8a:7b:ad:f8:c5:d2:24:44:7c:d1:84:
         7b:0f:75:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:52:31 2024 by rpki-client on console-ams.rpki-client.org