Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/44E601A48AE411EB9FA47119C4F9AE02.roa
File:                     44E601A48AE411EB9FA47119C4F9AE02.roa (raw, json)
Hash identifier:          RqWjIzRpTkG4RIhz0EwkHDJkKT6pzO4pTDtTG0aBM94=
Subject key identifier:   6A:21:A9:12:7B:AB:3C:DA:80:18:0F:66:3D:1B:99:8C:0D:F4:D3:05
Certificate issuer:       /CN=A91CD98D/serialNumber=BFE461375DC223D4F7B27055E2B34745FE6101D4
Certificate serial:       0647
Authority key identifier: BF:E4:61:37:5D:C2:23:D4:F7:B2:70:55:E2:B3:47:45:FE:61:01:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/44E601A48AE411EB9FA47119C4F9AE02.roa
Signing time:             Wed 29 May 2024 10:25:54 +0000
ROA not before:           Wed 29 May 2024 10:25:54 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     134506
IP address blocks:        103.161.106.0/23 maxlen: 23
                          103.161.106.0/24 maxlen: 24
                          103.161.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.crl
                          rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1607 (0x647)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD98D/serialNumber=BFE461375DC223D4F7B27055E2B34745FE6101D4
        Validity
            Not Before: May 29 10:25:54 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=665702b2-ba75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cc:1e:cf:95:c0:56:cf:a8:2a:b0:f6:ed:f1:
                    4d:ac:db:77:ba:48:ac:d2:39:90:a2:89:19:9a:93:
                    df:bc:3d:c2:36:59:3d:04:2a:3e:62:48:9e:2b:ba:
                    3c:20:3f:df:e4:bc:66:9a:e2:d5:7a:4b:f9:96:9d:
                    a3:5e:3b:2b:fe:3b:07:17:3d:16:78:08:c8:4e:bf:
                    c9:65:f3:5c:8a:1a:f7:43:cf:a3:22:12:ca:3d:01:
                    79:ca:d6:19:cd:2e:0c:2a:b1:6d:08:8d:45:68:98:
                    aa:d5:7b:7d:8f:27:ed:1d:eb:56:3d:66:88:cf:0c:
                    50:cb:8c:e6:cf:5c:a7:31:86:78:a7:4a:2b:56:ed:
                    a3:92:1c:c8:da:2c:02:b3:52:76:6f:84:1d:ea:10:
                    2b:3a:6c:c8:e2:af:05:91:c2:b1:93:9b:81:53:e7:
                    08:1e:f4:fb:36:38:b0:91:33:59:4b:be:b9:fc:4b:
                    2a:f3:61:4a:77:fa:40:88:a3:01:d2:29:60:47:42:
                    83:e7:a8:9d:7f:c8:6c:ea:be:f7:8b:d0:3a:2e:89:
                    17:9f:a4:e5:a7:f9:46:75:3a:eb:22:22:fd:52:c5:
                    cb:42:dc:ab:8b:04:fb:a8:29:06:bc:24:3c:89:e3:
                    42:99:f1:5b:fa:fe:63:89:ce:0c:43:68:5b:d7:bd:
                    28:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:21:A9:12:7B:AB:3C:DA:80:18:0F:66:3D:1B:99:8C:0D:F4:D3:05
            X509v3 Authority Key Identifier:
                keyid:BF:E4:61:37:5D:C2:23:D4:F7:B2:70:55:E2:B3:47:45:FE:61:01:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/44E601A48AE411EB9FA47119C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:9c:bd:cc:2d:69:dc:2f:56:b2:8d:03:8d:e8:23:24:ec:e3:
         9f:f7:53:fa:ca:eb:ba:d0:d8:ff:b0:64:b4:73:2c:94:ac:db:
         cb:50:69:82:cb:e1:4e:86:db:d6:4e:81:7b:ba:09:ef:49:09:
         d9:77:b3:08:87:b0:53:9a:d5:55:e2:4f:d3:b4:28:d6:dd:d4:
         41:e3:27:23:dd:4d:51:8b:33:53:a3:8a:05:d3:5b:94:29:6a:
         ca:20:92:19:5f:be:a2:cc:9f:ff:74:96:d0:e9:7a:a1:3a:92:
         54:47:eb:5e:49:a3:49:93:38:5a:14:68:ce:30:86:4e:51:3c:
         5f:1e:81:44:f9:75:cf:aa:83:95:e7:f2:80:bf:23:74:bd:03:
         26:8e:eb:fa:76:41:52:2d:fc:91:a1:cf:bf:4b:ea:ea:9a:db:
         e4:82:0f:47:d1:ac:c8:1d:33:4a:69:5e:28:29:c7:85:94:9c:
         a3:6d:72:36:c1:be:81:ae:26:e9:09:fc:3a:7d:39:65:31:9b:
         e0:83:a1:3d:19:57:04:17:d4:f0:f4:6b:30:fe:c6:dc:64:48:
         77:91:7b:20:c0:65:18:c7:57:da:54:f9:30:90:4f:6b:0c:01:
         c0:bb:be:32:fc:9a:1f:62:ad:7a:d3:dc:eb:37:d7:04:b0:e7:
         7e:08:d5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:50 2024 by rpki-client on console-ams.rpki-client.org