Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/29DCC95AB0FE11ED810FE355C4F9AE02.roa
File:                     29DCC95AB0FE11ED810FE355C4F9AE02.roa (raw, json)
Hash identifier:          VtwBByQOp2H/wP37+dnk31mvycm+fJZxt5+b0ozXHA8=
Subject key identifier:   37:AA:B2:77:75:D4:E1:ED:B3:7E:E7:98:4E:DA:AB:0B:21:F5:6F:AD
Certificate issuer:       /CN=A91C612E/serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2
Certificate serial:       05B4
Authority key identifier: C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/29DCC95AB0FE11ED810FE355C4F9AE02.roa
Signing time:             Thu 08 Feb 2024 19:37:30 +0000
ROA not before:           Thu 08 Feb 2024 19:37:30 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     135637
IP address blocks:        103.77.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl
                          rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 19:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1460 (0x5b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C612E/serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2
        Validity
            Not Before: Feb  8 19:37:30 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=65c52d7a-6523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c2:58:c8:35:83:d4:8d:ef:10:85:5a:73:63:
                    95:36:4a:d5:f0:36:c5:d6:54:5e:c9:c5:f6:f3:75:
                    ec:45:5c:60:31:c5:52:a6:3b:81:a4:22:16:5a:b8:
                    fe:2c:46:2c:06:3d:b0:67:87:2f:ac:35:d3:a7:c5:
                    fa:0c:ce:3f:2e:59:37:dc:a9:ff:99:1c:cb:11:c0:
                    e5:a9:b8:2c:5a:e8:70:b1:5a:5e:20:e6:ce:69:ae:
                    65:86:e9:13:61:5f:50:24:ea:69:b9:89:41:bc:87:
                    32:43:46:2e:e3:90:4f:74:37:a0:f2:b9:2e:4a:a7:
                    94:39:ce:fe:12:4f:01:46:be:27:1a:50:35:0f:58:
                    95:65:8e:72:1f:65:88:50:cc:54:21:a1:66:5d:7a:
                    09:5a:5a:58:79:84:19:b5:52:89:b0:03:f8:0f:2f:
                    a7:16:49:52:e4:06:ad:03:16:9b:23:77:35:e5:30:
                    22:1d:22:6e:0d:8e:1b:94:81:24:0a:fa:8a:d1:f5:
                    cb:70:9a:b5:30:c6:c4:b2:34:86:34:8f:76:c5:aa:
                    b8:13:5b:ba:aa:c4:00:8f:4a:91:df:3b:f2:90:fd:
                    65:69:07:44:fb:6b:d7:2c:36:e5:95:f7:78:95:8e:
                    da:0d:15:98:aa:8d:af:5a:fb:5f:62:52:ce:c8:b4:
                    15:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AA:B2:77:75:D4:E1:ED:B3:7E:E7:98:4E:DA:AB:0B:21:F5:6F:AD
            X509v3 Authority Key Identifier:
                keyid:C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/29DCC95AB0FE11ED810FE355C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:8b:11:87:33:56:98:dc:1d:0a:06:8e:9a:7c:19:11:d3:23:
         2a:87:42:0c:a4:ac:4c:7f:6d:28:15:a2:f4:62:dc:3b:32:d7:
         0e:5d:83:95:37:19:50:81:bc:66:48:38:19:73:85:d2:0c:d4:
         b8:df:23:c4:61:9e:10:f7:ac:9f:31:f0:9b:e0:06:56:19:69:
         a5:1c:73:a9:11:0a:27:ff:a7:14:0e:d8:3d:b7:4b:f7:d3:e7:
         2e:74:da:44:df:61:43:64:25:51:3a:74:2d:58:d4:9b:1d:08:
         46:0e:b5:55:57:a9:e7:68:65:af:28:b1:1b:c3:c3:2e:f7:0b:
         9d:d8:87:64:87:34:07:f8:c1:1b:1c:f0:92:04:a9:91:25:8f:
         f9:5b:14:18:ae:ca:a3:56:1d:01:99:d9:79:68:7d:2d:8c:4d:
         3c:7f:89:40:ab:c4:29:2c:93:47:93:ce:57:c1:91:46:24:1a:
         14:df:94:48:df:24:55:df:9b:6e:28:35:96:78:32:07:6f:73:
         ea:9a:f4:67:db:a9:0c:23:b2:8f:33:f4:17:1e:c3:c2:5e:c3:
         89:49:7e:c0:c1:d5:3e:a1:17:02:0f:b8:4b:47:c2:a2:25:9a:
         d9:b6:be:db:15:81:24:e6:2f:c8:f7:2b:54:b0:c0:20:95:c3:
         c8:f7:dd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 21:45:31 2024 by rpki-client on console-fra.rpki-client.org