Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/654307DC26CC11EDB395A078C4F9AE02.roa
File:                     654307DC26CC11EDB395A078C4F9AE02.roa (raw, json)
Hash identifier:          BReMrJcPdWP5VKstav51f7UkEGbQ0HINNMdxpuIBj0U=
Subject key identifier:   CD:83:5C:B3:F7:38:4C:0B:3A:76:B9:CD:A3:99:92:05:BF:76:F9:3F
Certificate issuer:       /CN=A91EACB9/serialNumber=1E61E0002CE44BBF59553C804A0AC912E6FEBF3B
Certificate serial:       0107
Authority key identifier: 1E:61:E0:00:2C:E4:4B:BF:59:55:3C:80:4A:0A:C9:12:E6:FE:BF:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/654307DC26CC11EDB395A078C4F9AE02.roa
Signing time:             Tue 03 Oct 2023 03:44:07 +0000
ROA not before:           Tue 03 Oct 2023 03:44:07 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     139651
IP address blocks:        103.142.212.0/23 maxlen: 30

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.crl
                          rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 04:53:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EACB9/serialNumber=1E61E0002CE44BBF59553C804A0AC912E6FEBF3B
        Validity
            Not Before: Oct  3 03:44:07 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=651b8e07-5cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:39:e2:b8:61:32:98:11:78:0e:a7:4b:a4:da:
                    a5:15:b5:6a:d6:d8:14:f0:5f:a4:84:65:f4:d3:d2:
                    e1:9a:30:ea:8d:3d:0a:5e:f8:be:c9:9c:2e:7c:6c:
                    d6:6b:ff:5a:03:3a:5d:a8:e5:49:07:f8:72:16:28:
                    99:fe:b2:e0:8d:3e:3d:7f:64:2d:cd:d7:88:4c:4d:
                    18:c0:d1:e1:5e:eb:fa:83:46:de:c1:1e:fd:d2:38:
                    e4:7c:e8:d7:d8:18:73:22:be:5f:f7:e6:78:a6:d3:
                    ba:91:93:79:38:c1:47:08:f0:af:c1:16:65:18:eb:
                    01:2c:4e:16:22:61:d5:13:e8:a5:16:94:09:a2:ab:
                    48:26:38:dc:76:09:d9:c7:2f:b5:40:d3:16:98:92:
                    40:2a:65:73:16:4e:35:32:69:c5:ff:ab:f0:7a:4a:
                    60:9b:2c:db:64:c5:31:f8:62:f4:ff:28:51:5f:62:
                    8e:d4:d9:3f:16:2e:03:59:9f:8f:6a:ac:bb:81:04:
                    3d:b7:d2:f2:4d:f5:bb:44:c2:52:18:31:7f:a6:0e:
                    bc:6e:5f:a4:76:6e:ea:8d:c6:d4:4f:c6:dc:4f:21:
                    50:98:3a:71:1e:4e:40:cd:6c:07:d8:7f:56:fb:c9:
                    bf:82:32:a1:5c:0c:3b:f7:e5:21:d2:31:28:60:5a:
                    f5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:83:5C:B3:F7:38:4C:0B:3A:76:B9:CD:A3:99:92:05:BF:76:F9:3F
            X509v3 Authority Key Identifier:
                keyid:1E:61:E0:00:2C:E4:4B:BF:59:55:3C:80:4A:0A:C9:12:E6:FE:BF:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/654307DC26CC11EDB395A078C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:ed:82:20:9f:31:47:13:78:61:7d:a9:85:e8:5e:e0:04:e0:
         ab:ae:d2:01:09:b9:c1:89:dd:f4:ac:a0:39:cf:15:1c:38:cf:
         0b:f8:d4:f8:bd:c8:e6:ba:5a:b2:1e:60:b3:37:71:c5:49:81:
         0d:7c:08:d8:55:d1:d8:84:17:48:96:ee:54:4a:85:b4:99:24:
         8e:6d:16:52:93:84:76:c1:12:9c:d4:0c:76:fb:a6:c4:ad:fe:
         d2:9e:84:55:a8:8b:85:42:2a:b1:2f:d4:43:36:89:4e:9b:bd:
         ac:21:cc:77:77:d9:1a:b4:a2:35:1a:46:c2:f9:8a:86:b4:39:
         62:75:9f:fc:9f:66:18:cb:7f:5c:c2:d3:04:73:0c:8e:3a:36:
         f1:51:75:a3:a2:e1:b3:49:3f:59:9b:eb:51:28:32:69:f1:7f:
         5b:1a:34:e6:78:98:ba:7f:23:e6:34:e8:1c:48:24:6c:eb:9c:
         68:a9:7d:ab:23:ec:90:33:3a:84:ba:35:fe:a5:1d:6f:3f:d2:
         05:53:a6:fa:a1:ed:f7:18:ad:03:ff:68:d5:eb:64:e8:a0:1d:
         8b:ec:9b:0e:5a:70:65:ed:bc:90:09:1e:9b:9e:b2:49:98:16:
         37:25:86:43:88:1e:43:67:51:e2:17:b1:d3:2e:72:41:aa:f1:
         b4:d7:9a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:46:30 2024 by rpki-client on console-ams.rpki-client.org