Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/3FF7C9468C9211ED8D052619C4F9AE02.roa
File:                     3FF7C9468C9211ED8D052619C4F9AE02.roa (raw, json)
Hash identifier:          7DeO0VfCI4oTaSwmK9iUkVYLdmtRBaM+mO6JVXyn98k=
Subject key identifier:   BE:1C:E4:AB:F4:BD:69:C6:65:13:60:F4:42:C5:AB:1B:61:37:CB:9B
Certificate issuer:       /CN=A91DD468/serialNumber=ED39781E7CA2632C54B7FAE2254E21F01BA07687
Certificate serial:       92
Authority key identifier: ED:39:78:1E:7C:A2:63:2C:54:B7:FA:E2:25:4E:21:F0:1B:A0:76:87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Tl4HnyiYyxUt_riJU4h8Bugdoc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/3FF7C9468C9211ED8D052619C4F9AE02.roa
Signing time:             Fri 13 Oct 2023 04:35:16 +0000
ROA not before:           Fri 13 Oct 2023 04:35:16 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     147037
IP address blocks:        103.173.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.crl
                          rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Tl4HnyiYyxUt_riJU4h8Bugdoc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 02:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD468/serialNumber=ED39781E7CA2632C54B7FAE2254E21F01BA07687
        Validity
            Not Before: Oct 13 04:35:16 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=6528c904-a14c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6b:fa:0f:e1:52:36:3f:26:e6:5f:ed:2f:f0:
                    72:6e:15:22:67:31:30:b2:12:df:79:70:ba:2b:f4:
                    43:26:2e:37:74:65:97:0a:e5:bf:ad:bf:6d:ec:79:
                    45:e1:a5:d7:14:b2:02:38:77:c3:48:8c:67:a7:a6:
                    b2:b8:04:15:f5:b3:f7:db:aa:43:5b:b8:2c:3e:5a:
                    d3:61:ec:35:f8:8a:5d:20:3b:12:62:2a:e9:4b:d9:
                    f3:10:bf:84:71:24:c3:b5:67:b4:6a:17:b7:00:15:
                    0a:91:3e:5c:89:0b:55:97:cd:2d:64:61:15:49:1e:
                    d3:64:dd:97:16:26:dc:d5:70:52:b7:18:f7:94:e7:
                    1b:3f:a5:03:08:3d:68:0c:49:e5:0d:67:cb:62:8d:
                    7c:f8:44:4e:64:f1:c0:ad:b1:ee:3c:46:23:f6:59:
                    ed:7b:89:48:10:13:9b:8f:17:0e:ad:73:2b:fd:c7:
                    83:9f:09:e1:c1:17:c6:2b:5f:bb:4f:6a:87:5d:8d:
                    e0:6f:d6:31:be:ff:03:8a:d6:ec:b3:5a:b9:ea:a3:
                    48:18:6a:f0:5e:97:4c:f0:81:30:95:50:75:9c:98:
                    ad:82:bf:a6:32:fd:4b:0c:ca:57:dd:e7:88:bd:80:
                    8f:b4:4c:99:0b:34:ba:53:f0:f2:db:8d:35:b9:43:
                    22:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1C:E4:AB:F4:BD:69:C6:65:13:60:F4:42:C5:AB:1B:61:37:CB:9B
            X509v3 Authority Key Identifier:
                keyid:ED:39:78:1E:7C:A2:63:2C:54:B7:FA:E2:25:4E:21:F0:1B:A0:76:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Tl4HnyiYyxUt_riJU4h8Bugdoc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/3FF7C9468C9211ED8D052619C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:e1:7b:c6:6f:89:7d:04:f0:d4:f8:32:17:e5:bd:98:21:d0:
         23:5a:90:a4:d1:04:2b:da:7c:e1:17:94:fc:b8:2c:e0:80:f3:
         5e:8c:f4:97:e4:b1:47:24:3b:85:a3:d9:f8:3f:30:f5:0d:90:
         32:ca:c9:ec:aa:70:ba:4b:7a:86:37:90:4b:de:83:93:2d:ef:
         30:b3:5f:3f:7d:da:2d:a7:60:73:ef:35:c6:b2:35:f9:77:a8:
         95:12:12:be:32:96:93:76:25:60:5a:4f:f4:c7:7c:40:2c:07:
         81:ee:ae:3a:bf:3b:ec:a9:77:c4:ec:f7:b6:50:e3:65:05:02:
         eb:2f:86:3a:0b:29:8c:ce:92:25:6d:5b:43:b8:6e:53:b5:60:
         39:89:dd:15:cc:6e:a7:f2:2c:36:3e:46:93:99:da:ed:5b:7b:
         e6:09:f5:bb:4d:9f:05:59:8d:4d:03:84:ea:85:1d:b6:24:50:
         8a:29:2f:97:9d:03:d0:52:21:d2:de:76:de:99:ef:dc:f6:ea:
         c7:09:46:2b:fc:44:24:cf:24:4a:28:57:d3:d9:bf:c2:6f:be:
         c6:ce:ed:14:0b:88:c9:76:16:34:91:08:e5:8e:9d:50:4b:7e:
         df:5f:3a:e8:fd:7d:67:0e:52:04:3d:13:33:a1:df:2e:b6:56:
         ac:12:08:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 06:19:23 2024 by rpki-client on console-fra.rpki-client.org