Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/03ADBBC4194B11EB8C73474DC4F9AE02.roa
File:                     03ADBBC4194B11EB8C73474DC4F9AE02.roa (raw, json)
Hash identifier:          7x4qBE67/oDn1y7KkzQ60QdK+Xtk25yoPaLY3rkvEiM=
Subject key identifier:   7E:7C:6B:4E:CE:8D:59:02:06:50:1C:0B:51:1D:AD:BB:D0:0A:3C:A8
Certificate issuer:       /CN=A91D483A/serialNumber=EDCDF060A6102BFAD06EBA8D6831D2848D1DBDE7
Certificate serial:       0671
Authority key identifier: ED:CD:F0:60:A6:10:2B:FA:D0:6E:BA:8D:68:31:D2:84:8D:1D:BD:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/03ADBBC4194B11EB8C73474DC4F9AE02.roa
Signing time:             Tue 28 Nov 2023 23:10:52 +0000
ROA not before:           Tue 28 Nov 2023 23:10:52 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     63961
IP address blocks:        103.157.134.0/23 maxlen: 23
                          103.157.134.0/24 maxlen: 24
                          103.157.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.crl
                          rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 20:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1649 (0x671)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D483A/serialNumber=EDCDF060A6102BFAD06EBA8D6831D2848D1DBDE7
        Validity
            Not Before: Nov 28 23:10:52 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=6566737c-f7fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c2:7d:3d:81:58:2a:b1:f5:b1:38:3e:3c:d5:
                    c0:f4:63:4c:6a:50:3d:76:7b:bf:10:b3:61:e7:89:
                    9f:87:e4:4c:19:07:00:bd:03:78:d9:7c:6a:e7:1d:
                    d3:25:63:29:87:93:1a:d7:b7:b3:b1:c0:5a:71:7d:
                    25:0c:c9:15:8c:77:f6:c1:f5:a6:5a:8e:23:d5:d5:
                    47:f6:0a:c8:47:b9:40:d1:17:cd:ef:40:50:4e:67:
                    d6:c2:87:2d:c8:e1:d4:52:5b:b2:30:6d:e5:ed:6c:
                    69:12:0d:f9:9c:0c:70:67:0e:a5:01:16:25:fb:3c:
                    ea:51:91:2b:a3:f4:de:ab:81:f1:05:e3:4c:ae:84:
                    20:8b:dd:6c:49:24:8a:f1:23:2f:ec:73:0b:64:55:
                    da:d4:15:99:ec:af:65:81:55:a6:50:9f:24:13:bb:
                    47:49:de:6a:53:44:9f:71:16:e4:aa:88:e0:d6:f7:
                    88:d3:1a:59:88:fc:48:38:6c:59:b1:65:d3:ae:c8:
                    46:dd:48:26:f9:fb:38:de:24:33:33:23:d6:92:9d:
                    f6:a7:27:16:96:bc:12:e3:8c:bc:50:df:7c:38:7f:
                    80:a1:7e:66:46:6d:fd:d4:15:88:3a:53:49:76:0b:
                    8d:57:26:f8:8f:34:b9:8a:28:b7:26:18:38:7f:d9:
                    5a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7C:6B:4E:CE:8D:59:02:06:50:1C:0B:51:1D:AD:BB:D0:0A:3C:A8
            X509v3 Authority Key Identifier:
                keyid:ED:CD:F0:60:A6:10:2B:FA:D0:6E:BA:8D:68:31:D2:84:8D:1D:BD:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/03ADBBC4194B11EB8C73474DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:a2:4e:b4:e9:0f:7a:8e:24:fa:c2:11:b3:45:62:35:ae:ba:
         b4:e3:97:86:5d:10:59:65:19:82:a8:5c:85:0d:e4:85:f9:b2:
         0e:23:73:92:e4:ad:4f:fa:dd:a9:00:31:d9:50:40:33:f9:95:
         cd:74:ea:65:e5:eb:9e:19:94:9b:96:52:8c:c8:c9:63:d6:dc:
         60:24:98:72:89:08:1d:19:b6:21:4f:25:0b:23:f7:b3:19:85:
         40:7e:a7:f3:70:b0:c4:63:5a:7d:04:39:7a:ef:c9:d9:68:80:
         1d:06:d7:cb:92:14:0c:99:5b:2f:eb:c1:ae:d7:bd:88:60:a2:
         70:df:ab:da:53:fb:ee:e2:15:fb:95:8f:ca:55:46:e8:ad:a3:
         d7:88:8e:d8:58:37:27:f0:d0:a4:4d:cb:5b:6e:d3:18:03:8c:
         d4:60:dc:1e:55:31:47:b7:49:30:1c:b0:aa:61:a8:b0:da:fd:
         c2:f7:f0:e2:e8:2c:66:13:fc:f0:5f:66:1e:dc:1e:51:4f:8c:
         be:8c:e7:71:60:c9:b4:db:e7:e9:77:89:28:87:15:b7:1a:c5:
         81:1f:55:98:b1:53:1b:51:09:f6:a3:9d:2d:2b:12:8c:0e:a7:
         70:76:a3:0f:dd:85:0d:4e:e5:32:f0:3f:74:94:9e:f9:c4:36:
         76:f8:13:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 23:48:42 2024 by rpki-client on console-fra.rpki-client.org