Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/2E5E44C40D7311ED90DA6411C4F9AE02.roa
File:                     2E5E44C40D7311ED90DA6411C4F9AE02.roa (raw, json)
Hash identifier:          KHOAkVPi66KUPnmPsf4tmQjjiT0OwquerDu+NzqW/ZE=
Subject key identifier:   C4:5B:14:68:3D:D0:37:5A:07:46:40:05:BD:80:39:C4:2E:7D:37:A8
Certificate issuer:       /CN=A91C89A2/serialNumber=C30854C9951F2D866BFFA9C4D53D399379D80FAC
Certificate serial:       018B
Authority key identifier: C3:08:54:C9:95:1F:2D:86:6B:FF:A9:C4:D5:3D:39:93:79:D8:0F:AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wwhUyZUfLYZr_6nE1T05k3nYD6w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/2E5E44C40D7311ED90DA6411C4F9AE02.roa
Signing time:             Thu 29 Jun 2023 02:50:15 +0000
ROA not before:           Thu 29 Jun 2023 02:50:15 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     149843
IP address blocks:        103.188.44.0/23 maxlen: 23
                          103.188.44.0/24 maxlen: 24
                          103.188.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/wwhUyZUfLYZr_6nE1T05k3nYD6w.crl
                          rsync://rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/wwhUyZUfLYZr_6nE1T05k3nYD6w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wwhUyZUfLYZr_6nE1T05k3nYD6w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395 (0x18b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C89A2/serialNumber=C30854C9951F2D866BFFA9C4D53D399379D80FAC
        Validity
            Not Before: Jun 29 02:50:15 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=649cf167-ea1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:24:45:a7:2c:c1:5a:7b:f0:df:f0:5a:9a:2e:
                    11:3d:30:57:e0:84:a9:4f:84:1d:d6:83:69:79:89:
                    f5:0b:23:6d:da:a0:0a:dd:d9:c4:e2:30:cf:bd:4b:
                    91:9e:68:e0:a9:e9:0a:f2:d5:c0:f5:81:68:40:19:
                    b6:1f:ce:78:03:f0:fd:7f:b7:ce:b1:70:59:80:f9:
                    0c:95:48:1a:05:83:ae:9f:95:2e:0a:bc:c9:3e:61:
                    32:08:87:ca:7d:67:27:13:5c:3a:1d:f4:a6:ac:67:
                    53:91:34:55:fa:7d:f3:97:e8:5d:3c:b9:93:2e:0d:
                    87:e9:0f:df:ac:3e:75:61:1a:ea:b7:d8:07:a6:2c:
                    6a:84:32:0e:a4:cc:df:84:49:c9:ec:41:41:5c:9b:
                    52:72:3c:43:8b:7b:01:4c:3e:0c:dc:c6:86:02:fa:
                    85:56:85:6a:c5:d0:e9:22:6e:f8:60:e1:29:88:59:
                    d8:f8:3c:d2:c6:10:31:59:ea:2d:5e:c5:9e:8c:d0:
                    cd:3e:3b:98:0b:40:22:19:cc:bf:91:7d:2a:ed:d0:
                    0e:15:1f:94:84:a6:de:a7:a3:2a:da:70:0e:31:0c:
                    33:ef:36:e8:20:55:50:61:ea:19:01:09:a6:95:48:
                    4a:aa:37:d7:52:d3:83:66:ac:d7:ba:7f:e5:9d:21:
                    59:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:5B:14:68:3D:D0:37:5A:07:46:40:05:BD:80:39:C4:2E:7D:37:A8
            X509v3 Authority Key Identifier:
                keyid:C3:08:54:C9:95:1F:2D:86:6B:FF:A9:C4:D5:3D:39:93:79:D8:0F:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/wwhUyZUfLYZr_6nE1T05k3nYD6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wwhUyZUfLYZr_6nE1T05k3nYD6w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/2E5E44C40D7311ED90DA6411C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:44:50:b9:e8:a2:df:83:6c:cf:c0:8f:15:5b:85:c6:45:50:
         1a:56:0e:ef:bd:07:f3:23:fd:92:98:91:ff:c1:dd:92:6d:6a:
         cd:15:f6:bd:8d:a3:3e:bd:14:99:e8:c3:85:36:cb:9c:16:39:
         11:cf:76:c6:a7:00:f5:7c:4d:56:8b:5d:55:4f:3e:99:10:52:
         cf:53:b8:95:98:25:41:d8:4f:18:37:1c:d7:65:7a:f8:cc:23:
         c8:c1:29:9c:f2:ee:d7:43:ae:a0:5a:a7:1f:ab:4b:52:a2:73:
         90:1d:56:20:54:68:a1:74:82:d6:31:d3:30:12:96:63:9e:4a:
         d5:c3:45:6c:d0:29:e5:ea:6b:21:98:eb:59:2e:81:84:57:ef:
         55:f1:2b:96:b9:84:6f:f8:e9:3f:3e:86:8f:db:f6:5e:58:57:
         c3:35:00:f8:31:27:2e:2d:ad:6f:98:02:74:86:c7:cc:3c:03:
         22:a0:84:2c:a2:51:77:88:c8:41:23:68:2a:0d:e5:f9:85:6f:
         0b:3d:c9:39:f0:74:fb:83:98:24:9c:72:f4:1c:db:db:69:dc:
         18:41:ca:9b:57:00:a3:43:c6:c7:34:76:d3:6d:69:6b:98:39:
         a1:b6:5f:e6:00:f1:b1:32:12:12:58:35:d6:37:7f:f3:bd:55:
         aa:26:dd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:08:06 2024 by rpki-client on console-ams.rpki-client.org