Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/44B3B572011611EA972FFC57C4F9AE02.roa
File:                     44B3B572011611EA972FFC57C4F9AE02.roa (raw, json)
Hash identifier:          aIByxK9JXmYqUFWAbW5QYUcefzxBLVKsjpZawUPcHRI=
Subject key identifier:   EF:3F:6A:56:C7:26:F8:24:27:19:27:13:84:2E:8B:BC:00:11:BE:8E
Certificate issuer:       /CN=A91DE8C5/serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442
Certificate serial:       0B29
Authority key identifier: EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/44B3B572011611EA972FFC57C4F9AE02.roa
Signing time:             Wed 04 Oct 2023 18:56:55 +0000
ROA not before:           Wed 04 Oct 2023 18:56:55 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     132829
IP address blocks:        103.123.28.0/24 maxlen: 24
                          103.123.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl
                          rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 19:25:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2857 (0xb29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE8C5/serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442
        Validity
            Not Before: Oct  4 18:56:55 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=651db576-a030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9d:b5:f7:23:37:91:5b:18:ed:79:2f:58:63:
                    ed:33:7d:c8:98:c2:a8:6b:7c:65:15:36:59:17:c7:
                    1a:52:02:7f:5f:cf:3a:46:14:c1:01:b6:d5:48:7f:
                    3d:07:6e:90:8d:e2:56:f9:9a:05:e6:f8:57:f4:d4:
                    c8:30:48:1f:d8:cb:af:03:68:ad:5e:b7:eb:da:6d:
                    87:3e:66:9f:a7:99:b0:17:d0:01:2d:3d:9f:4c:db:
                    41:3a:9c:cd:01:98:db:1a:a5:a3:7a:84:76:88:82:
                    c2:17:f9:98:64:08:f1:88:01:65:8d:c9:4f:e0:00:
                    86:ca:0c:dc:50:9f:e1:8a:b6:35:cb:51:c8:c3:06:
                    70:30:69:fd:e4:c1:5e:2c:d0:01:23:4c:c0:a8:62:
                    70:9b:33:8d:99:19:c1:63:f3:43:d1:77:08:14:4b:
                    96:be:5e:26:e6:17:b0:37:56:e8:86:e1:de:85:1a:
                    3e:91:9e:74:53:73:0f:23:8b:5e:31:29:8e:d9:f2:
                    aa:d2:8a:bf:33:8c:cc:6b:01:9e:d2:72:42:d6:b0:
                    a1:d5:14:38:f3:15:a5:e0:ca:cc:0f:18:5a:3e:fe:
                    c0:99:2d:dd:9d:28:5a:28:1a:33:e8:bd:dd:8f:0a:
                    cf:76:cb:5a:ba:d1:17:b6:f4:5d:16:dc:c0:9a:77:
                    63:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:3F:6A:56:C7:26:F8:24:27:19:27:13:84:2E:8B:BC:00:11:BE:8E
            X509v3 Authority Key Identifier:
                keyid:EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/44B3B572011611EA972FFC57C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:b1:e0:4a:b5:6e:07:55:fc:74:ce:50:a5:cf:57:16:09:0a:
         1a:86:08:09:d4:12:eb:7d:16:cc:d8:47:56:56:84:c4:75:a1:
         e8:b9:14:ff:9c:e9:76:d9:d5:da:02:73:d5:00:87:c2:9d:97:
         05:1e:9d:72:51:3e:69:77:33:ae:96:e8:b1:b1:27:ab:82:40:
         41:ab:1c:04:2c:b1:c8:1b:e9:b2:ed:2c:74:bf:54:3a:9e:27:
         cc:bf:64:a5:2d:5e:16:90:b0:2a:8e:17:9d:77:2d:31:7c:9e:
         1a:04:32:97:1a:9f:43:a9:e1:63:a1:d9:ce:a5:65:f2:a7:2f:
         6c:18:53:58:48:8c:4a:87:b4:3b:78:c9:fe:6f:79:77:20:ae:
         68:2b:81:e8:c1:fc:28:a0:16:02:40:65:ea:c0:15:ae:bd:83:
         cd:40:fa:9d:5a:b4:f9:68:fe:56:90:17:e2:48:3a:63:df:55:
         df:f3:2c:f5:18:50:c8:9c:4f:09:2b:dd:5a:b9:f5:28:de:d7:
         b9:30:05:26:9c:29:8f:6e:c2:f8:84:a8:a5:52:7f:8b:9d:8b:
         50:de:a7:39:56:31:fd:8a:f2:93:f2:c1:f9:49:81:4c:d2:29:
         34:a9:7b:d7:8f:04:fd:d8:f4:2b:cb:30:e3:1e:4c:ed:fc:db:
         c8:5f:ca:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 22:51:41 2024 by rpki-client on console-ams.rpki-client.org