Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/5FC8538AE7D811ECB3E05318C4F9AE02.roa
File:                     5FC8538AE7D811ECB3E05318C4F9AE02.roa (raw, json)
Hash identifier:          lvng27DiFzCyVc2i5zmfqJi0iNnFNWM7WkBlCvqiKg4=
Subject key identifier:   1F:FD:9F:69:9B:2B:A8:19:90:47:27:9D:D3:96:EE:90:4B:A5:3D:79
Certificate issuer:       /CN=A91CB06F/serialNumber=C945B7772CCC27413865A92CB892DFD27CAA9F77
Certificate serial:       0211
Authority key identifier: C9:45:B7:77:2C:CC:27:41:38:65:A9:2C:B8:92:DF:D2:7C:AA:9F:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/5FC8538AE7D811ECB3E05318C4F9AE02.roa
Signing time:             Tue 30 Apr 2024 06:35:09 +0000
ROA not before:           Tue 30 Apr 2024 06:35:09 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     149860
IP address blocks:        103.189.66.0/24 maxlen: 24
                          103.189.67.0/24 maxlen: 24
                          2001:df0:ccc0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl
                          rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 04:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 529 (0x211)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB06F/serialNumber=C945B7772CCC27413865A92CB892DFD27CAA9F77
        Validity
            Not Before: Apr 30 06:35:09 2024 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=6630911d-defe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d0:0a:39:55:b9:cd:60:73:dd:91:98:22:24:
                    29:20:e8:24:0c:a4:a0:4c:bd:c0:5d:0e:50:07:c7:
                    19:1b:d7:12:15:fa:02:5d:ce:21:b4:97:4f:41:a2:
                    ae:1a:6c:9d:bf:b7:03:35:18:4d:c5:d9:fd:b3:f6:
                    53:7a:74:b4:07:0d:ba:c4:eb:a8:e6:c3:8b:59:38:
                    2e:f8:85:67:3b:52:2f:6a:24:69:69:e8:b2:38:a7:
                    56:f8:0f:95:2c:4b:da:bb:f3:1b:44:bf:dc:fe:f1:
                    2f:ba:68:17:a6:88:63:07:e3:aa:63:72:52:1d:c1:
                    3d:13:5d:c5:68:53:7b:d5:ef:d0:8d:58:49:4b:b1:
                    9a:cf:b6:c1:0e:98:8d:89:2b:99:e9:36:7e:67:5d:
                    3c:d7:f5:6d:e7:e7:eb:d9:a3:32:21:98:50:99:5c:
                    b3:55:62:8e:45:58:0c:bf:6a:56:27:41:3f:88:30:
                    60:c6:16:ce:6a:5d:e4:06:95:41:6f:01:78:81:b5:
                    a3:ed:bf:48:c6:e4:c7:ac:67:4f:64:b5:3a:9a:14:
                    80:d0:74:2a:6e:cd:bc:27:c6:9c:0d:83:79:9f:fa:
                    aa:a1:b0:42:03:84:22:cf:ee:23:a5:0c:4e:d1:aa:
                    6a:b4:9e:b0:5e:68:b6:5f:60:74:d6:75:5c:82:79:
                    e5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FD:9F:69:9B:2B:A8:19:90:47:27:9D:D3:96:EE:90:4B:A5:3D:79
            X509v3 Authority Key Identifier:
                keyid:C9:45:B7:77:2C:CC:27:41:38:65:A9:2C:B8:92:DF:D2:7C:AA:9F:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/5FC8538AE7D811ECB3E05318C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.66.0/23
                IPv6:
                  2001:df0:ccc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:1c:1a:24:93:1f:91:63:de:bd:13:64:ae:e4:4c:7c:bb:50:
         2a:8e:b1:d6:1f:b9:3e:33:e7:dc:83:1c:f5:c2:38:31:16:de:
         7e:b2:f8:f7:b9:02:40:e2:e6:03:13:db:1a:ad:69:b4:5c:42:
         fe:45:5f:42:44:15:21:2f:d8:34:e8:0d:6d:ae:cb:95:77:a4:
         19:11:ef:5c:5e:9a:f1:a4:98:4e:35:5d:e2:3b:42:4a:f1:c5:
         27:b0:9c:c1:d7:c6:6e:6a:c3:5f:b7:f3:fe:2b:50:b9:71:fa:
         79:47:d0:02:3c:ec:f2:ee:50:36:92:da:5f:56:f6:b2:f1:38:
         d0:c5:88:60:ab:71:ac:e9:38:c1:65:f5:9c:6b:6c:fb:4d:a1:
         3f:39:3c:40:6b:6a:ac:19:00:f4:88:48:49:6b:e1:70:ca:d0:
         40:0e:ac:cd:ab:36:bf:a1:30:0f:68:da:b2:2a:bf:34:86:df:
         70:6b:1b:f9:85:b4:9c:b3:20:f0:7b:9e:b1:63:d4:7e:be:1b:
         81:33:55:f9:cd:23:07:45:27:75:ea:3d:97:63:4c:22:e1:41:
         a6:d9:1e:0f:32:b9:8f:c6:e0:d9:ca:51:89:9b:76:79:5a:fc:
         19:bd:f1:7d:c5:c3:ba:20:0f:b5:a3:08:0a:53:d1:77:7e:26:
         52:ad:f0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:18:10 2024 by rpki-client on console-fra.rpki-client.org