Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/669F81ECC19E11ED9703E456C4F9AE02.roa
File:                     669F81ECC19E11ED9703E456C4F9AE02.roa (raw, json)
Hash identifier:          m6XiuJs3pbAGixYyBlP0zdgEX1/NL3vC7CknnokyCZM=
Subject key identifier:   FB:10:B4:D5:FD:7B:EC:5D:85:3D:71:4A:B9:76:A4:A7:1E:0B:29:88
Certificate issuer:       /CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
Certificate serial:       C9
Authority key identifier: 58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/669F81ECC19E11ED9703E456C4F9AE02.roa
Signing time:             Fri 19 Jan 2024 05:26:09 +0000
ROA not before:           Fri 19 Jan 2024 05:26:09 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     58715
IP address blocks:        103.61.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl
                          rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
        Validity
            Not Before: Jan 19 05:26:09 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65aa07f0-86f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2c:94:ea:e3:f2:d3:69:81:4e:57:38:d4:a5:
                    b6:08:b5:24:d4:b5:f8:04:29:ea:6a:6e:51:13:15:
                    0b:2c:4d:35:6d:6f:83:ca:37:2f:5f:29:96:e5:3a:
                    c2:c7:a0:31:6a:b0:15:be:6f:1f:5d:2c:8c:e6:43:
                    e7:fd:c1:8c:e1:00:81:a8:ab:34:7f:ed:e4:9f:20:
                    58:03:a5:14:14:46:d9:06:d7:92:25:0f:6d:27:57:
                    ae:14:77:cc:bf:ea:c8:28:92:8a:9e:dc:65:6c:92:
                    4e:42:83:8c:26:24:ac:af:e4:d1:7a:bf:f8:86:b1:
                    4c:f2:aa:8a:c7:50:b8:c0:d1:24:55:08:6f:55:b8:
                    df:a3:bd:aa:de:aa:26:1b:53:09:7f:d0:39:d2:8b:
                    8c:0e:74:15:53:c5:fc:c6:70:5e:f2:29:71:14:0d:
                    2b:f5:71:a1:49:dc:7d:1e:4f:03:ea:af:c2:a0:4f:
                    6f:3e:fb:d8:50:74:6d:1e:0e:19:28:8e:dd:0f:0f:
                    9b:ae:b4:a2:2f:ac:75:c1:94:4e:87:fb:52:bc:24:
                    90:eb:8d:39:fd:3e:89:c6:2f:a9:b2:8a:42:44:ab:
                    8e:bf:2e:5a:8d:61:24:c7:30:46:f6:b1:27:64:19:
                    5a:27:17:da:95:6e:7e:6e:60:82:af:07:da:8b:87:
                    ef:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:10:B4:D5:FD:7B:EC:5D:85:3D:71:4A:B9:76:A4:A7:1E:0B:29:88
            X509v3 Authority Key Identifier:
                keyid:58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/669F81ECC19E11ED9703E456C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:77:a6:e0:23:8f:77:57:01:67:ec:ab:c9:aa:49:5a:fc:58:
         b7:cf:fe:a8:9e:62:b3:b0:a5:b1:7f:14:d8:47:bd:c3:f6:0f:
         5a:1f:87:53:11:f4:81:7a:1b:2c:6b:39:2d:db:b1:d4:fb:77:
         48:28:97:98:68:b6:4e:cf:ec:42:26:94:fe:3d:41:c0:07:13:
         5e:19:99:06:08:31:85:03:4a:cd:ae:e1:ab:a2:ef:b0:b0:c8:
         ac:24:6b:fe:8d:20:fe:4c:bb:f8:32:d2:2a:4a:59:1c:ed:70:
         43:55:52:f3:14:0c:23:7b:37:bc:ad:1d:10:9b:88:9d:04:49:
         63:07:51:eb:e5:9f:62:db:41:c2:07:c4:88:2a:d0:3a:bc:60:
         0d:7d:f6:0a:9e:b6:30:5e:35:0f:6e:1f:08:8d:35:2b:e0:44:
         8d:c7:4f:d2:0e:d9:5d:fb:9f:d3:3a:7a:34:54:71:78:f8:7b:
         13:4b:80:a7:1c:46:41:57:da:b5:89:09:e8:1e:72:e8:1d:51:
         fd:89:49:11:ae:89:18:23:5f:40:0b:79:a5:7d:4e:cb:f8:21:
         c9:00:4c:27:92:af:21:30:ef:d8:51:c2:49:f5:0c:6f:ec:8c:
         43:be:01:fa:21:3c:53:90:1f:4d:71:3a:3a:07:5d:23:6f:4d:
         5a:07:ad:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:40:46 2024 by rpki-client on console-fra.rpki-client.org