Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/108B7DAAB2A711EAABBE8663C4F9AE02.roa
File:                     108B7DAAB2A711EAABBE8663C4F9AE02.roa (raw, json)
Hash identifier:          YA4GLUdsIaWbGiBm3KmTSbRFQ2G7IxEvDdxZRgo0HEU=
Subject key identifier:   5C:EE:52:2B:A2:10:62:37:37:E1:3B:60:C5:1A:75:3B:3A:8A:A9:AD
Certificate issuer:       /CN=A91D1E29/serialNumber=5BF6243990A9464C85B7823DB426E2AB96720A3C
Certificate serial:       0778
Authority key identifier: 5B:F6:24:39:90:A9:46:4C:85:B7:82:3D:B4:26:E2:AB:96:72:0A:3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/108B7DAAB2A711EAABBE8663C4F9AE02.roa
Signing time:             Tue 08 Aug 2023 21:18:21 +0000
ROA not before:           Tue 08 Aug 2023 21:18:21 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     131582
IP address blocks:        103.69.130.0/24 maxlen: 24
                          103.69.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl
                          rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 May 2024 22:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1912 (0x778)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1E29/serialNumber=5BF6243990A9464C85B7823DB426E2AB96720A3C
        Validity
            Not Before: Aug  8 21:18:21 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64d2b11c-81e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:83:9c:91:cc:20:fb:6d:eb:10:76:84:de:55:
                    c8:2b:28:d9:07:df:c8:f8:d7:cd:d3:3c:f7:84:0a:
                    3e:66:31:61:7d:95:89:9d:af:0f:76:23:be:a2:97:
                    80:5f:3f:bd:62:bd:f2:ec:83:42:ee:0a:fa:81:77:
                    82:91:c7:2e:0c:63:42:1d:e3:d8:8d:71:f5:18:ed:
                    a3:4b:b0:fe:cd:e7:04:2d:f7:30:ed:b1:30:4a:7c:
                    d5:20:0f:cc:3f:82:bb:31:07:bb:d3:65:1c:35:3a:
                    ed:b2:27:18:14:14:7e:ff:d1:a7:09:a5:0f:4c:0b:
                    cb:eb:49:8e:3c:b1:9a:4b:e2:b1:ea:ac:65:df:76:
                    cb:c3:32:e2:19:cf:54:b9:63:27:83:52:d9:b9:cc:
                    f9:de:3c:80:bc:5f:cf:90:1a:79:99:ed:41:59:1c:
                    98:c6:3d:f8:5e:66:eb:0e:60:65:96:62:b1:e6:ee:
                    6b:9c:71:ae:f2:bc:17:a1:17:fb:ba:a8:b3:98:d1:
                    a0:e0:1d:e9:d3:fe:dd:5f:81:e9:49:05:77:01:98:
                    f9:8c:95:61:42:4f:ba:94:17:bd:65:2c:6a:dd:20:
                    77:b9:aa:19:5a:7b:b7:2a:79:ac:39:e0:23:10:9c:
                    9c:5f:c1:c3:9d:79:05:e1:6f:6f:70:93:ab:83:71:
                    aa:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:EE:52:2B:A2:10:62:37:37:E1:3B:60:C5:1A:75:3B:3A:8A:A9:AD
            X509v3 Authority Key Identifier:
                keyid:5B:F6:24:39:90:A9:46:4C:85:B7:82:3D:B4:26:E2:AB:96:72:0A:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/108B7DAAB2A711EAABBE8663C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:36:77:68:5b:cd:08:f6:81:9a:7b:2a:98:4d:d8:c2:d3:3f:
         8c:09:de:f5:fd:32:83:67:a5:36:fb:b3:15:59:d8:7f:95:1c:
         c9:86:8b:bd:84:c2:7a:1d:f5:e4:4e:34:7d:e5:34:50:96:89:
         77:c7:0a:11:ca:db:d4:a4:2e:b8:72:89:e7:ce:85:79:87:bb:
         fb:e9:5f:63:7e:26:19:f7:76:de:f5:c2:49:a5:c9:9d:be:c3:
         23:db:9b:ef:55:b0:b7:ec:2e:bf:3b:de:49:8b:5c:0c:9d:e7:
         98:af:cd:7d:dc:a6:a2:72:b8:4e:26:bf:81:76:bf:c1:7a:bb:
         a6:f7:a2:38:56:cc:88:fc:ab:81:f3:5e:9a:8a:d6:54:43:e1:
         1f:d4:b1:3f:cc:5b:a0:03:59:26:f1:43:4a:77:fc:fa:ca:4e:
         be:c5:6a:00:e0:90:62:c2:8b:89:34:a2:07:66:41:9d:13:08:
         0a:57:81:7b:27:6d:b2:fe:e2:10:ff:1b:56:19:69:6b:fd:a0:
         10:4f:79:74:f3:42:ad:9a:fd:b9:98:54:4d:7b:f0:df:3b:eb:
         a1:70:00:29:77:6e:01:27:aa:eb:c9:c8:ab:f6:89:05:32:41:
         40:23:75:23:fa:b7:f7:94:06:36:1f:f6:7a:4a:4f:41:fa:06:
         58:90:96:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 01:00:20 2024 by rpki-client on console-ams.rpki-client.org