Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/48B3316EFFC411EEB2369013C4F9AE02.roa
File:                     48B3316EFFC411EEB2369013C4F9AE02.roa (raw, json)
Hash identifier:          JAdEVsOB845IZ1/xZ8NJex5kHLfPD9h7+AZ1hRdoedY=
Subject key identifier:   63:A2:DF:84:76:A3:C5:DE:A2:EA:8B:4A:BD:38:6B:D6:A1:79:6A:F3
Certificate issuer:       /CN=A91C5A9F/serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B
Certificate serial:       0BD5
Authority key identifier: 6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/48B3316EFFC411EEB2369013C4F9AE02.roa
Signing time:             Sun 21 Apr 2024 09:48:19 +0000
ROA not before:           Sun 21 Apr 2024 09:48:19 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     134599
IP address blocks:        103.140.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl
                          rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 May 2024 19:14:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3029 (0xbd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5A9F/serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B
        Validity
            Not Before: Apr 21 09:48:19 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=6624e0e3-0f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4c:83:c9:4b:a5:a8:70:0e:33:27:03:4e:25:
                    ac:15:6d:fe:25:6d:87:97:2d:02:98:61:7d:dc:c2:
                    b4:7f:91:af:f5:8d:55:2c:75:ac:93:ac:c8:d1:38:
                    45:c3:0b:53:91:13:54:59:a7:13:64:c6:6e:b2:7b:
                    6a:38:3c:21:ea:d8:88:35:0d:3d:84:c6:fb:79:5e:
                    e4:4b:2c:09:95:90:2f:fc:2f:65:39:29:24:d3:dd:
                    00:71:c4:dc:40:a2:0f:33:c8:dc:7e:e1:9e:2a:f1:
                    3e:10:d1:45:6c:22:5e:f4:1c:e7:86:dd:05:85:f5:
                    b7:d5:7b:f1:43:1a:69:06:e4:f9:e8:b6:f7:ab:2d:
                    e1:0d:4e:62:d8:78:cf:d2:ad:cc:52:b4:9f:1a:cf:
                    a9:0f:14:4e:2d:ca:32:17:c1:e0:79:7c:dd:f4:2c:
                    4b:b5:04:09:ab:da:18:f7:52:c1:03:dd:67:49:bf:
                    f2:08:6a:67:4f:db:d6:e1:d9:78:7b:b3:8f:79:78:
                    7d:c7:f6:fd:98:ea:31:01:de:87:72:07:c6:76:83:
                    80:77:16:4b:9d:54:18:ca:89:2e:fa:7b:d5:7e:e6:
                    e3:a0:72:ce:4d:72:ad:dd:52:9a:13:9e:4c:00:a6:
                    dd:11:f5:f9:db:e2:f1:fc:51:8a:29:9e:df:7f:db:
                    3c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A2:DF:84:76:A3:C5:DE:A2:EA:8B:4A:BD:38:6B:D6:A1:79:6A:F3
            X509v3 Authority Key Identifier:
                keyid:6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/48B3316EFFC411EEB2369013C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:df:bc:25:fc:b0:14:cc:6c:fe:45:e2:57:57:56:a3:02:46:
         0c:91:35:e3:81:80:79:2b:db:dd:1f:2f:b5:ef:d3:7d:eb:30:
         ee:7e:b8:66:f4:7b:bb:bc:e4:fb:2d:ee:15:ed:fc:aa:ae:69:
         d1:cf:50:90:6a:77:13:9b:73:2f:46:77:b8:0e:e4:98:98:81:
         f4:da:3c:78:d2:aa:b8:2c:50:78:86:e3:f8:14:8f:f2:2a:51:
         12:ed:a8:38:b1:23:39:0c:42:bc:44:1c:f7:05:c3:1c:27:66:
         5b:2a:43:f2:10:4d:f2:5d:fa:72:2f:a3:7b:4e:b9:5a:9a:8d:
         93:1f:eb:c6:08:1f:7a:cf:56:1a:f2:79:bc:43:14:81:c5:6b:
         26:a1:54:5e:98:55:be:8c:aa:e8:a8:2e:96:83:8f:2f:3e:4b:
         78:53:7f:86:2b:23:f3:02:ee:72:ab:c8:e5:a8:4b:29:1c:96:
         d5:89:a3:30:b5:6c:32:bd:5f:9d:d8:30:4a:d9:7d:fa:61:e1:
         58:67:95:c5:dc:8c:f5:96:94:c6:b8:f8:d7:33:b3:f3:56:cf:
         27:6c:38:d4:76:ec:88:e3:9d:47:54:dd:07:1c:0d:1c:0e:e4:
         aa:ff:24:cc:2e:37:32:1f:c1:c9:6e:08:5d:8e:4c:4e:ae:cd:
         57:8b:a7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 21:43:31 2024 by rpki-client on console-ams.rpki-client.org