Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/4551BE2CD19D11EAA120EE14C4F9AE02.roa
File:                     4551BE2CD19D11EAA120EE14C4F9AE02.roa (raw, json)
Hash identifier:          0v9M1/doReV6RjOB27laEEC7Y4U/Hc1DGCSbqCo/5MY=
Subject key identifier:   BE:F3:75:76:9F:D3:11:92:1F:DC:84:33:3C:98:A5:CE:CC:A3:43:91
Certificate issuer:       /CN=A91E3E33/serialNumber=379743714CE012230AA978BB1AA8C790E70667AB
Certificate serial:       10CB
Authority key identifier: 37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/4551BE2CD19D11EAA120EE14C4F9AE02.roa
Signing time:             Wed 20 Sep 2023 17:35:22 +0000
ROA not before:           Wed 20 Sep 2023 17:35:22 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     134520
IP address blocks:        103.81.247.0/24 maxlen: 24
                          103.82.4.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl
                          rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4299 (0x10cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3E33/serialNumber=379743714CE012230AA978BB1AA8C790E70667AB
        Validity
            Not Before: Sep 20 17:35:22 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=650b2d5a-25d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:13:80:0a:2e:84:e5:69:bf:c3:8f:b5:c6:9a:
                    42:07:72:5b:68:d3:c0:c3:15:2e:e0:11:7b:b4:3b:
                    0c:6e:61:01:cd:af:2f:1e:61:cd:1f:ef:c9:3b:16:
                    85:41:0b:10:f7:ce:8a:41:7d:01:7e:ca:8b:95:2c:
                    28:96:f6:7f:aa:50:ea:f5:25:f9:40:9f:02:a6:c6:
                    d3:f3:ac:12:41:a0:87:65:dc:69:16:09:a7:9c:c5:
                    18:f1:1f:ae:96:49:5f:c0:30:f3:88:e5:48:24:c5:
                    04:e7:6e:97:4e:80:33:1f:f2:05:c6:5f:2e:6a:fc:
                    0b:d7:be:b6:3d:e4:2a:2a:3f:f4:fb:6e:eb:2e:3f:
                    11:86:ac:ea:19:7d:f5:72:37:77:fe:85:4f:0c:c9:
                    f1:29:88:cf:69:57:0a:34:a5:d1:25:a5:67:5d:ea:
                    45:ef:98:fe:55:08:2c:37:91:48:55:d5:c9:c8:57:
                    6e:00:ec:f1:7f:85:50:85:e9:a4:93:24:8e:15:6e:
                    75:3c:ca:f4:90:90:b1:e3:f2:3a:47:95:df:8f:c4:
                    dd:ea:4e:59:a0:b8:68:c1:3c:58:eb:8e:18:84:33:
                    51:6e:4e:a9:07:4e:d3:d9:bc:47:9d:bf:cb:9f:71:
                    d2:4e:94:f6:48:3e:f2:7b:a8:b7:4d:a0:16:2f:7e:
                    2b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F3:75:76:9F:D3:11:92:1F:DC:84:33:3C:98:A5:CE:CC:A3:43:91
            X509v3 Authority Key Identifier:
                keyid:37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/4551BE2CD19D11EAA120EE14C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.247.0/24
                  103.82.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:9d:0b:bb:c9:32:e6:bb:0c:4b:04:a5:00:bf:49:54:6a:a7:
         0b:a5:3d:e2:50:61:53:1c:a1:6f:c4:cc:7e:15:dc:62:bd:18:
         7d:40:7f:56:9b:d9:ba:c8:d0:64:6f:cb:62:45:30:36:12:34:
         c8:ae:bf:89:f2:a6:c1:93:75:90:8f:12:0d:03:93:90:e3:a0:
         7e:97:b9:b2:82:94:b0:d0:40:a6:d9:39:9f:a5:0c:ca:e5:5d:
         a2:39:39:3b:31:a6:f9:7c:e2:d0:a9:11:c6:54:aa:74:e8:05:
         f4:7e:65:8d:cb:07:9e:71:01:d5:20:2b:df:7b:16:ca:36:b5:
         85:4a:ca:11:12:13:12:b7:26:88:f0:9f:20:0f:b8:4b:64:c5:
         5d:f9:0e:ee:b0:f7:1c:5f:bc:15:0b:13:d1:62:7e:22:76:f7:
         44:63:09:e6:df:85:e2:87:4b:2f:2d:41:58:41:d5:7d:24:49:
         e8:e7:f8:94:d5:fa:2b:fd:e8:59:a8:45:8c:15:93:ce:6c:10:
         0f:33:40:66:f0:be:a4:0b:19:03:fe:45:75:98:16:e2:07:fe:
         7c:83:4e:a4:f7:26:8b:e6:ef:82:fe:b9:92:c5:15:af:4c:a2:
         81:02:51:dc:41:ba:45:7b:01:11:92:f5:5d:36:1b:99:9c:01:
         e7:55:c7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 19:15:26 2024 by rpki-client on console-ams.rpki-client.org