Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/29ED0D46839011EE946C5E63C4F9AE02.roa
File:                     29ED0D46839011EE946C5E63C4F9AE02.roa (raw, json)
Hash identifier:          xcxRZivsLcCkVUktyewe/XyH0UGaw784MWqTbGphmYk=
Subject key identifier:   2D:1D:DE:A1:19:A7:F2:C2:DA:40:5D:90:9B:7F:0F:24:C0:0C:21:74
Certificate issuer:       /CN=A91E3E33/serialNumber=379743714CE012230AA978BB1AA8C790E70667AB
Certificate serial:       10EB
Authority key identifier: 37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/29ED0D46839011EE946C5E63C4F9AE02.roa
Signing time:             Wed 15 Nov 2023 08:22:50 +0000
ROA not before:           Wed 15 Nov 2023 08:22:50 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     63916
IP address blocks:        103.81.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl
                          rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4331 (0x10eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3E33/serialNumber=379743714CE012230AA978BB1AA8C790E70667AB
        Validity
            Not Before: Nov 15 08:22:50 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=65547fd9-7107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4e:eb:ed:ac:c8:1a:1a:21:d2:af:18:3b:6b:
                    6f:16:fb:01:73:1e:15:ad:55:15:63:55:3c:a0:27:
                    14:e7:2b:75:24:92:5b:5f:9a:e5:68:e7:2e:eb:a1:
                    a0:70:59:14:7e:0e:de:ec:f5:44:43:0a:bb:15:f6:
                    b8:78:04:07:5c:db:38:26:47:b5:65:b0:d6:40:31:
                    44:01:5e:f1:7f:cd:d0:c1:35:13:1f:fc:58:36:72:
                    a0:c8:f1:b4:a1:91:dc:54:e9:98:18:4f:e6:e7:17:
                    17:b0:27:7c:7e:76:bd:63:c4:f8:1d:5f:11:63:b0:
                    03:97:6e:9e:38:88:69:9b:31:99:f1:0b:0f:e5:51:
                    d3:6e:9f:bf:68:70:c3:d7:f9:6c:68:b1:0f:99:02:
                    a7:0f:a5:8e:80:4f:3d:74:ea:cf:b6:2d:2c:2d:1e:
                    34:98:83:95:4e:cf:52:2d:55:01:82:0d:bd:8e:22:
                    23:ed:08:dd:b2:61:c7:a6:ac:65:8d:05:fb:07:67:
                    5d:49:5a:10:5d:db:ae:fc:d2:bb:ca:46:33:3a:66:
                    50:e5:63:ec:1c:38:78:13:cb:8e:6c:2e:94:2e:55:
                    80:78:3a:d6:ef:77:ac:b7:ee:50:c3:d4:ec:ae:9f:
                    bc:ee:37:f3:1b:fd:25:95:79:d5:94:2b:57:b6:4b:
                    08:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1D:DE:A1:19:A7:F2:C2:DA:40:5D:90:9B:7F:0F:24:C0:0C:21:74
            X509v3 Authority Key Identifier:
                keyid:37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/29ED0D46839011EE946C5E63C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:93:0c:75:39:5f:d3:b6:82:81:41:e7:84:09:51:7e:bb:ae:
         1c:b9:db:02:4c:61:6f:3c:84:7f:b0:56:36:58:51:c4:dc:3c:
         fe:32:f0:2a:5d:03:06:f0:14:13:68:dc:70:2f:f4:d4:6a:e4:
         a7:b2:a6:e2:4e:ea:b8:e0:84:d3:55:fb:46:b4:64:e0:a9:09:
         60:28:a9:8f:a7:b9:db:a7:79:7a:d0:46:4c:65:ef:74:ae:a8:
         65:bf:7e:8c:6c:92:4d:e8:d1:7f:cf:01:3a:53:9f:8d:65:46:
         4c:94:20:5a:a3:61:49:2b:ef:7f:43:bc:fa:ac:33:cb:4a:03:
         83:5b:96:73:c4:cb:15:1a:80:98:6f:09:46:dc:da:0f:40:30:
         e7:85:f9:86:d6:e0:4c:fa:29:fa:01:02:45:65:a3:81:18:04:
         eb:9c:33:e3:9a:85:eb:03:3a:47:1c:57:ff:b1:3d:8c:b5:d3:
         ab:30:4e:fb:b8:29:44:43:d3:7c:c8:18:a1:fa:35:e0:51:a0:
         2f:5c:ac:ac:63:9f:2a:13:6e:da:35:00:e4:c8:6b:25:83:33:
         eb:37:16:02:a1:20:f3:68:68:4e:c6:13:f5:96:86:b0:57:ad:
         68:f9:9f:25:f0:94:58:8f:ae:f1:3d:e1:cd:af:55:08:cb:b6:
         f8:10:2b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 19:15:26 2024 by rpki-client on console-ams.rpki-client.org