Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/008702ECFD2511EC813E430BC4F9AE02.roa
File:                     008702ECFD2511EC813E430BC4F9AE02.roa (raw, json)
Hash identifier:          mdwjdnEcrUfM7aLdZ7REcC0a8w2sZkQI5vBKiVrVe5k=
Subject key identifier:   95:69:BB:75:32:89:30:96:D5:BE:5C:34:18:6A:EA:FA:EA:B0:CE:A5
Certificate issuer:       /CN=A91D86BA/serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4
Certificate serial:       0183
Authority key identifier: CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/008702ECFD2511EC813E430BC4F9AE02.roa
Signing time:             Tue 07 Nov 2023 04:15:25 +0000
ROA not before:           Tue 07 Nov 2023 04:15:25 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     139737
IP address blocks:        103.144.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 04:43:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D86BA/serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4
        Validity
            Not Before: Nov  7 04:15:25 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=6549b9dd-1a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d0:63:56:cc:cb:34:31:42:2b:55:71:ee:1e:
                    8d:96:77:13:2f:15:63:e9:8a:55:59:e6:7f:39:1d:
                    67:eb:fb:5d:ef:bb:b7:5d:6b:9d:91:5e:e9:ee:43:
                    2f:59:59:be:ba:c1:93:b0:d9:ab:23:13:78:fe:a2:
                    4d:7f:1f:d9:54:2b:df:dc:fb:ce:94:10:09:6a:8d:
                    bc:aa:a2:8e:f0:95:5c:e0:95:ed:14:ed:0a:65:25:
                    0d:92:e7:98:69:8c:5d:54:d6:5d:48:98:66:1e:4c:
                    a8:c4:b5:31:4e:63:91:2b:20:c4:bc:52:c8:0f:62:
                    a1:37:50:16:d6:4f:79:06:ca:05:94:a3:f7:49:ba:
                    b7:43:d9:04:1b:59:5f:3d:b2:6a:07:60:e5:b0:07:
                    d8:21:33:2a:d7:08:09:29:1f:a7:aa:b5:e6:ff:41:
                    9b:00:83:ee:ae:af:c8:38:c1:8a:9d:be:a6:b5:2b:
                    4e:56:9b:f3:b7:86:08:4f:45:f9:da:b4:7f:d8:a6:
                    25:3a:4f:e3:d3:1c:7b:23:f7:f2:ca:dc:39:3a:d6:
                    c3:bd:e9:d1:b9:2f:0f:aa:04:11:05:67:b4:df:f9:
                    11:68:77:c4:93:8f:01:7e:e2:0f:46:8c:18:8e:e1:
                    08:66:a2:a2:c3:da:12:28:3f:73:25:a0:8c:59:58:
                    82:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:69:BB:75:32:89:30:96:D5:BE:5C:34:18:6A:EA:FA:EA:B0:CE:A5
            X509v3 Authority Key Identifier:
                keyid:CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/008702ECFD2511EC813E430BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:91:5c:fa:ce:dc:1c:18:cf:d9:21:d2:ac:f9:fc:25:f1:00:
         a3:cf:b5:48:87:7c:e3:dc:a8:e8:68:34:6b:c7:e7:a2:37:cf:
         d3:64:6c:80:7c:40:3e:05:c7:76:89:ae:65:7d:a4:a4:c8:43:
         c4:52:d1:fe:d1:a1:7e:08:f8:31:bf:6d:f1:48:82:8d:d9:9a:
         54:79:ca:06:1a:a5:4a:74:6a:16:d4:b0:d3:a4:63:0a:95:b5:
         a8:26:39:ba:47:6a:af:63:1c:e6:4b:8f:d3:ab:17:5d:e3:c3:
         bf:15:fd:95:69:6d:d8:76:aa:17:e0:9f:f9:3f:fd:5f:93:bc:
         ec:83:5c:c2:40:03:99:39:60:e1:42:2f:c9:40:27:2a:e7:63:
         51:3d:eb:23:d8:66:a5:9f:bd:77:04:76:08:bf:86:ec:f4:a8:
         cd:96:6b:ab:a1:f4:61:63:73:fe:5f:b5:f3:83:46:e4:a8:f2:
         8a:85:0b:8c:a2:eb:2f:2c:1c:74:fe:fa:b5:21:ac:ff:93:f6:
         0d:29:c6:b6:51:c6:35:1a:2d:d9:af:07:e7:6d:1a:bf:db:dd:
         6a:26:c7:e1:66:45:f2:18:7f:9f:bd:e4:c6:f5:09:6f:93:e3:
         fc:35:35:cc:e1:aa:18:c4:95:bd:9c:12:77:b3:10:b2:d4:94:
         0a:c1:79:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 06:12:26 2024 by rpki-client on console-ams.rpki-client.org