Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/B62A6E82D7F511EB82D62F73C4F9AE02.roa
File:                     B62A6E82D7F511EB82D62F73C4F9AE02.roa (raw, json)
Hash identifier:          hf/o0iaRpkyoPKP4Zo/iRJ7GH6KXTJyi16A/MloOvxE=
Subject key identifier:   B7:9A:37:59:16:CA:C7:64:F2:01:F1:39:0D:BC:00:D5:BA:8D:75:FE
Certificate issuer:       /CN=A91CCE54/serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
Certificate serial:       0444
Authority key identifier: 1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/B62A6E82D7F511EB82D62F73C4F9AE02.roa
Signing time:             Tue 01 Aug 2023 01:02:16 +0000
ROA not before:           Tue 01 Aug 2023 01:02:16 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     55953
IP address blocks:        103.230.13.0/24 maxlen: 24
                          103.230.14.0/24 maxlen: 24
                          103.230.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl
                          rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 00:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1092 (0x444)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCE54/serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
        Validity
            Not Before: Aug  1 01:02:16 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c85998-c139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7e:cc:c9:ec:c8:d4:77:46:17:c3:fc:d5:cd:
                    b3:00:93:6e:0b:0f:61:16:e4:9e:cf:98:33:50:87:
                    53:c7:98:1e:08:8d:fd:bc:01:1e:fe:80:e9:86:d2:
                    a6:42:a9:d0:70:91:fe:a7:a1:87:ea:b0:fc:ea:8b:
                    87:35:ed:f2:ec:00:ef:86:2b:f4:ca:bd:d7:fe:a1:
                    cc:2b:a1:5d:91:0b:ed:97:11:a5:2a:91:d6:48:5d:
                    34:fe:46:d8:90:5c:14:05:46:89:f1:0c:b8:a4:d4:
                    65:ac:c7:2f:c1:5b:bb:b7:38:38:d5:74:29:75:c1:
                    37:3f:28:36:08:13:f5:6c:c0:9e:4e:39:ca:a4:f7:
                    9d:2c:d7:a1:56:cb:b0:31:60:18:14:40:79:09:b3:
                    45:70:ba:e2:7a:d1:49:1f:4f:e9:dc:c4:6e:97:c0:
                    28:33:cd:80:2f:d4:26:7e:c0:e4:29:d5:e5:f6:f2:
                    e7:ca:94:13:e9:66:c8:55:c7:77:83:0b:04:4a:36:
                    3e:8e:3d:98:4f:f0:b1:da:56:2d:b3:18:3d:93:bb:
                    e5:36:64:d7:15:b1:46:60:e8:40:41:4f:54:51:22:
                    5c:97:0e:cb:9b:9e:83:06:7a:53:3e:ff:b7:d0:77:
                    f7:2b:7d:30:bf:69:34:99:02:e4:32:e0:26:8b:a5:
                    20:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9A:37:59:16:CA:C7:64:F2:01:F1:39:0D:BC:00:D5:BA:8D:75:FE
            X509v3 Authority Key Identifier:
                keyid:1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/B62A6E82D7F511EB82D62F73C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.13.0-103.230.15.255

    Signature Algorithm: sha256WithRSAEncryption
         40:6b:c0:1b:fc:30:63:d4:7b:33:ae:0f:77:c1:0e:dc:49:b7:
         04:04:9b:81:1c:8c:87:4f:f4:f0:63:17:ba:a2:42:21:e9:ab:
         cd:e2:b3:07:8c:df:71:7c:50:ac:73:da:3a:d4:d5:3b:2e:4d:
         d1:2e:e2:b0:7d:20:64:e9:86:82:98:1a:69:65:df:82:86:0e:
         82:f2:85:d9:84:25:6e:04:54:a8:58:a2:69:bc:e2:ca:b7:15:
         00:03:31:d0:9b:96:7b:39:47:b2:fc:b5:34:ec:c5:8d:af:54:
         ea:12:0c:24:f3:2c:af:76:c9:53:6f:9e:37:be:06:8e:48:69:
         1d:ea:b2:f5:d9:15:5e:1b:b6:e4:67:11:15:0f:7d:44:3d:ea:
         e6:38:eb:2a:31:30:b2:74:51:fb:c2:96:81:37:26:d0:ff:d9:
         e7:c1:6c:d1:1f:db:22:66:0c:c7:2a:90:a6:de:fc:38:03:70:
         d9:7b:9c:40:91:b0:92:f4:04:93:e0:f7:b5:51:69:25:85:fe:
         62:ae:da:d1:a0:88:00:88:b1:78:c7:10:c6:55:82:73:41:90:
         7e:cb:8b:34:a7:02:d0:93:13:a0:20:cf:9e:3e:05:13:47:86:
         14:8f:21:35:11:f9:6d:9a:f9:0a:76:63:51:3f:ee:6c:34:e9:
         29:6a:81:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:38:40 2024 by rpki-client on console-fra.rpki-client.org