Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/7E16D3240B5011EE9A518C7BC4F9AE02.roa
File:                     7E16D3240B5011EE9A518C7BC4F9AE02.roa (raw, json)
Hash identifier:          krhsFK4PFWTrjNJ4p9/c55q/gQAKBPQnFLQMSNIsQfk=
Subject key identifier:   F6:A8:82:27:45:DB:1C:57:A8:AD:0B:BE:A3:DE:7A:8B:BA:98:63:0B
Certificate issuer:       /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37
Certificate serial:       02DB
Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/7E16D3240B5011EE9A518C7BC4F9AE02.roa
Signing time:             Fri 15 Mar 2024 03:05:25 +0000
ROA not before:           Fri 15 Mar 2024 03:05:25 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     59371
IP address blocks:        103.84.44.0/24 maxlen: 24
                          103.84.45.0/24 maxlen: 24
                          103.84.46.0/24 maxlen: 24
                          103.84.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl
                          rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 23:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 731 (0x2db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37
        Validity
            Not Before: Mar 15 03:05:25 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65f3baf4-a2cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a8:53:ff:93:9d:4c:b1:7a:34:12:c5:06:92:
                    f9:03:d0:79:0f:55:24:07:a3:b8:6d:3d:02:33:65:
                    1a:bc:7f:0a:5f:0b:be:40:f1:64:7d:1d:c8:20:b4:
                    9b:4e:1f:ae:57:1b:89:bd:62:f8:36:8b:33:cd:50:
                    64:89:7a:c0:a4:08:04:a0:22:4e:ab:63:f3:a0:b3:
                    d2:14:fe:fa:4a:24:49:12:3f:36:eb:78:af:f9:be:
                    0f:ae:22:c7:e3:d7:31:7c:5e:05:72:a7:78:b4:a8:
                    9c:22:5b:1f:11:f1:a8:44:39:3b:0c:49:3c:81:18:
                    c2:92:ae:54:38:09:6d:0e:d1:c1:30:98:9f:39:d2:
                    b2:4e:70:56:bb:03:05:41:8f:f1:df:0c:a7:81:9e:
                    f7:16:b5:08:12:dd:ea:52:9f:a1:84:ae:6f:3e:56:
                    82:ec:24:dc:ee:69:6e:04:e2:0a:44:2d:e7:43:c5:
                    04:4a:b7:8d:d6:ea:8c:44:d8:2f:1e:a7:de:4a:ad:
                    49:05:a4:39:20:74:4b:5c:15:74:90:8d:4b:63:10:
                    6b:4f:c6:7b:e5:16:9b:30:f8:a4:2a:8b:30:48:b3:
                    9e:c2:d0:11:31:42:1c:99:d7:ca:ba:ed:39:a4:1e:
                    52:71:b9:4b:ec:8f:59:20:97:48:aa:01:5a:b3:b6:
                    c5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A8:82:27:45:DB:1C:57:A8:AD:0B:BE:A3:DE:7A:8B:BA:98:63:0B
            X509v3 Authority Key Identifier:
                keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/7E16D3240B5011EE9A518C7BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:72:01:5d:14:b3:53:17:5c:9f:96:22:b6:23:c9:bb:5b:7c:
         ae:f9:6d:b5:85:60:be:4b:e6:d0:62:92:3b:75:14:d9:1e:15:
         ec:2c:ff:4a:93:c2:4c:98:84:04:bd:42:cc:eb:5c:53:20:c8:
         3b:de:48:a0:3f:5a:97:69:f3:9b:a3:5a:1d:7c:c8:2b:c1:19:
         ec:96:a5:39:0e:08:fa:14:ba:da:1c:3c:d3:08:f2:c8:9d:9e:
         d2:0c:a8:07:5a:c1:64:8f:0b:7f:8a:c8:e2:e0:77:d3:c6:09:
         7e:69:61:4a:ea:71:58:69:01:de:57:c4:c1:9a:5e:36:84:b1:
         c7:26:f1:e1:0a:a4:30:6d:9f:29:ad:f2:e9:b8:e5:74:88:51:
         34:82:f8:9d:8f:f8:d9:0b:8f:2f:a0:b8:49:58:53:0c:0c:33:
         dc:04:d9:f3:2c:8f:b3:1d:a8:94:36:10:c7:28:18:95:b4:cf:
         5a:ba:07:35:18:bd:9c:85:ac:63:64:64:69:b0:05:e0:42:57:
         1e:74:27:53:cb:47:d2:93:01:53:f1:86:24:f0:c1:21:df:7a:
         4c:fd:86:87:91:26:57:6e:a0:5a:a5:df:d6:ec:d7:eb:63:2b:
         a0:4d:21:69:3c:76:76:2e:30:55:32:09:21:13:a4:18:7d:26:
         98:04:f7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:15:32 2024 by rpki-client on console-fra.rpki-client.org