Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/9F2711861C8C11ED903AF819C4F9AE02.roa
File:                     9F2711861C8C11ED903AF819C4F9AE02.roa (raw, json)
Hash identifier:          m3IL/Nx+bW0gwi3M1I53/qMj9OSn7nf8hhPK7849ajY=
Subject key identifier:   9F:9A:55:33:E5:DC:03:53:BF:13:2C:50:1A:38:EF:D5:CC:9B:28:24
Certificate issuer:       /CN=A91C5D32/serialNumber=1A82D1C6888AB73099F8E59AEB288C0D48BB292B
Certificate serial:       0258
Authority key identifier: 1A:82:D1:C6:88:8A:B7:30:99:F8:E5:9A:EB:28:8C:0D:48:BB:29:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/9F2711861C8C11ED903AF819C4F9AE02.roa
Signing time:             Wed 27 Mar 2024 03:45:38 +0000
ROA not before:           Wed 27 Mar 2024 03:45:38 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     133128
IP address blocks:        103.162.242.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl
                          rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 00:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 600 (0x258)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5D32/serialNumber=1A82D1C6888AB73099F8E59AEB288C0D48BB292B
        Validity
            Not Before: Mar 27 03:45:38 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=66039662-d494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9a:5f:04:b9:be:e7:8f:e4:98:53:00:04:1b:
                    6e:2a:27:4e:f9:dd:8e:26:4f:c3:7e:93:1c:3c:e2:
                    16:48:a9:fd:65:54:11:8f:67:f0:4b:8a:28:5f:e1:
                    1b:86:99:aa:7b:f0:e9:cb:d6:12:45:10:37:db:74:
                    c4:33:4c:9a:42:f5:a1:1b:da:b4:14:48:73:72:b1:
                    7a:f6:d1:ed:8b:21:30:69:86:60:bc:02:c9:3a:be:
                    ad:d4:7b:1d:12:54:09:95:00:65:32:4c:dc:ca:59:
                    50:92:c6:36:bc:10:ed:74:31:83:a9:5d:34:56:d8:
                    53:da:5b:ee:4b:92:8c:70:53:87:89:0d:15:17:d6:
                    3d:4b:4b:e2:71:09:a7:75:83:4e:74:58:d9:31:32:
                    3f:e5:73:3f:ab:30:ff:6b:b9:30:78:fc:a2:b1:d7:
                    08:f9:8b:04:76:7e:f0:46:68:b5:6d:c0:89:aa:b5:
                    91:11:35:f2:db:aa:54:af:cf:ff:5c:04:1b:cb:7d:
                    4f:3e:c8:c6:b7:44:ea:69:ce:fd:ae:f1:5b:be:bc:
                    d7:06:6a:eb:e4:ca:29:35:1a:d8:a5:79:a8:e4:70:
                    45:a3:ee:66:25:73:b9:b7:7c:88:5e:1b:0f:f9:ad:
                    15:e8:1a:e3:87:f0:b1:2f:8f:62:e6:56:b0:bc:0a:
                    46:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9A:55:33:E5:DC:03:53:BF:13:2C:50:1A:38:EF:D5:CC:9B:28:24
            X509v3 Authority Key Identifier:
                keyid:1A:82:D1:C6:88:8A:B7:30:99:F8:E5:9A:EB:28:8C:0D:48:BB:29:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/9F2711861C8C11ED903AF819C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:c3:65:83:3b:a9:9d:1e:12:54:8c:af:f9:fb:63:18:5e:58:
         9e:82:1d:22:f3:e8:db:7b:3f:1c:74:93:2d:3e:a1:4d:fa:22:
         c3:6e:94:ea:46:f1:65:56:31:a5:dd:da:e2:8f:84:b7:6f:eb:
         1b:92:f4:68:7a:40:38:6e:39:61:96:e4:f7:ce:d2:35:80:87:
         1c:d5:51:32:75:bb:86:4c:81:f2:66:40:a2:70:83:26:36:ac:
         60:99:dc:23:d5:b3:24:a3:1e:31:86:c6:48:82:4b:01:bd:e3:
         50:c5:bd:7a:c0:b7:75:ca:6c:f9:cf:df:b7:18:41:9c:41:7b:
         99:e4:cf:9a:85:12:7f:37:ef:e4:fa:67:8d:7b:49:0b:4e:40:
         c3:46:62:26:84:3f:ae:83:6b:4e:8c:45:61:7e:f8:cf:d5:f7:
         dd:6d:ea:72:b6:80:ce:82:78:61:d7:17:c1:ec:f8:8d:44:7e:
         e4:f0:dd:54:bf:23:52:57:b0:3d:f9:6e:07:9a:bd:1f:55:28:
         e2:45:9b:36:1b:b9:29:ea:67:dc:08:4d:c1:a6:95:ec:3b:02:
         16:2a:81:1f:32:b9:88:2f:c0:6f:bd:01:07:d3:1c:d1:2e:99:
         1c:c7:be:8e:df:69:36:d2:4c:a7:92:48:43:f2:b4:f2:be:af:
         6f:56:2e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:50 2024 by rpki-client on console-ams.rpki-client.org