Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/659779341A4511EAA4C46765C4F9AE02.roa
File:                     659779341A4511EAA4C46765C4F9AE02.roa (raw, json)
Hash identifier:          7tDTevdIUafpD/tRA3WIItZA6n7Msz16uOVRY6qjfBg=
Subject key identifier:   65:6A:8F:7C:17:3C:27:36:C6:FF:74:85:94:9A:2F:73:00:02:65:91
Certificate issuer:       /CN=A91C81E8/serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E
Certificate serial:       0A5D
Authority key identifier: 8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/659779341A4511EAA4C46765C4F9AE02.roa
Signing time:             Wed 24 May 2023 20:51:18 +0000
ROA not before:           Wed 24 May 2023 20:51:18 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     137575
IP address blocks:        103.113.244.0/24 maxlen: 24
                          103.113.245.0/24 maxlen: 24
                          103.115.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl
                          rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 20:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2653 (0xa5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C81E8/serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E
        Validity
            Not Before: May 24 20:51:18 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=646e78c6-817b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7c:b0:99:36:b2:e7:00:7d:bf:78:f1:3d:43:
                    08:a7:17:1d:d4:26:78:ca:78:18:9b:e1:0a:bc:2b:
                    ce:78:94:f8:31:cc:d0:30:af:d6:4b:a2:d6:34:f1:
                    87:88:ff:e5:99:9f:c2:e3:6c:f3:1c:79:f3:1c:3e:
                    1a:c4:c0:f1:6b:b7:02:47:f6:b3:29:cd:75:28:0f:
                    de:a8:6a:14:0c:f2:e8:3c:2d:b4:c9:b0:eb:94:b0:
                    4b:0e:66:80:81:bc:f5:07:93:c9:a0:58:16:c0:41:
                    57:7b:59:bf:ca:94:ad:47:1b:6a:c9:97:6f:60:24:
                    73:15:70:ef:2a:59:f5:bc:f7:ad:d2:d5:d4:24:35:
                    06:6a:97:22:c7:f9:c2:85:f4:80:ba:17:2a:80:5a:
                    b3:e0:47:9a:ed:37:b9:8a:a7:75:a1:15:d2:4b:c2:
                    0f:4e:e6:9f:2d:92:fe:12:23:87:6a:03:2d:5f:20:
                    c0:96:e7:bf:13:d2:f4:8c:9c:03:6d:a4:fd:3b:85:
                    a2:1d:14:3b:74:06:11:22:2a:2a:42:19:c5:9c:b0:
                    9a:da:00:8d:b3:a7:d3:f6:fd:4d:5b:89:db:12:09:
                    9e:24:65:a6:9a:7e:68:04:16:3c:35:99:62:b7:ad:
                    71:4c:0b:ae:22:19:64:89:89:37:fd:c8:2f:87:6e:
                    d2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:6A:8F:7C:17:3C:27:36:C6:FF:74:85:94:9A:2F:73:00:02:65:91
            X509v3 Authority Key Identifier:
                keyid:8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/659779341A4511EAA4C46765C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.244.0/23
                  103.115.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:74:a9:bd:d2:ff:7a:e1:ad:e1:61:12:ae:fc:ba:9e:0d:47:
         52:00:41:53:a0:a1:e1:90:6b:98:58:6d:0e:27:3f:27:ef:6c:
         bb:58:1f:b3:fe:ed:7d:78:61:85:20:55:95:32:0d:df:ce:d1:
         35:14:c6:69:dd:95:87:d2:87:6a:13:35:b1:01:28:92:82:0d:
         62:1f:bd:e9:ac:6c:16:ae:37:64:ea:d8:b5:00:b7:06:cf:13:
         65:ff:08:6f:37:dd:04:66:e8:5e:0e:07:9b:1b:8c:58:02:9e:
         2a:9c:af:f7:85:51:15:21:7c:0d:51:41:ba:5b:b4:ed:86:42:
         3b:fe:44:f0:0e:e5:1d:03:15:ae:c0:f5:7e:8a:0c:d6:54:1d:
         32:65:e8:9c:c2:85:e3:f9:5c:6a:8e:38:84:69:3c:56:fc:bc:
         57:66:fd:8d:0e:b3:68:d6:dd:d0:83:68:74:29:8d:09:a4:cb:
         eb:ff:ce:22:ed:d1:86:da:c5:4b:f8:28:2e:56:7f:fa:5e:76:
         d1:68:76:aa:45:6b:a2:06:c5:3c:13:2a:58:da:c9:17:b5:05:
         2a:e8:c1:17:2b:e6:a1:24:3d:02:47:f0:49:10:6c:c2:71:e6:
         e0:e0:88:92:58:53:85:b8:f8:10:92:40:00:5b:85:56:24:1e:
         c2:1d:6f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 22:34:53 2024 by rpki-client on console-ams.rpki-client.org