Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/9BA13212344C11ED8F22CB70C4F9AE02.roa
File:                     9BA13212344C11ED8F22CB70C4F9AE02.roa (raw, json)
Hash identifier:          p7r78zQdPe18WNwZUgJb7Y6MXFrT+9kPthn7k/9lmnw=
Subject key identifier:   BF:EC:2B:2D:56:BC:4A:C5:CD:CF:E8:DF:0C:2C:50:8B:87:96:F5:3F
Certificate issuer:       /CN=A91EAD63/serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386
Certificate serial:       F7
Authority key identifier: 77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/9BA13212344C11ED8F22CB70C4F9AE02.roa
Signing time:             Mon 13 Nov 2023 04:14:52 +0000
ROA not before:           Mon 13 Nov 2023 04:14:52 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     138357
IP address blocks:        103.131.80.0/23 maxlen: 23
                          103.131.80.0/24 maxlen: 24
                          103.131.81.0/24 maxlen: 24
                          2001:df1:47c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl
                          rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 05:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAD63/serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386
        Validity
            Not Before: Nov 13 04:14:52 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6551a2bc-5e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d7:5c:5c:8e:a2:29:31:d6:2c:5c:a3:e2:3b:
                    0f:df:a2:17:26:9b:81:25:81:17:36:28:68:ef:f1:
                    ee:98:a4:08:e2:f7:cc:0c:f6:fa:6f:b8:8e:67:6d:
                    cd:6b:93:ac:1e:22:22:af:09:96:93:31:f7:04:3a:
                    9c:b0:b7:ff:84:54:52:71:35:e4:29:2e:c4:b0:07:
                    f1:ce:08:43:87:5e:28:2e:f6:3c:fb:5a:df:28:e1:
                    1f:a0:78:b7:89:36:a7:8c:a6:04:a1:83:cb:70:66:
                    11:d0:39:d2:38:1f:f1:8e:3e:65:55:b7:22:fb:80:
                    63:7f:d1:5d:e7:d1:89:bd:a8:60:0a:51:1e:7c:b8:
                    ed:f6:b4:0f:87:22:ce:07:76:28:d3:2b:be:4e:70:
                    90:61:88:5f:e4:3a:7b:80:d1:b9:b5:dc:80:3d:6f:
                    31:e0:0d:75:60:69:d3:be:eb:10:8f:ab:a3:0a:6b:
                    a8:c9:d9:3c:8e:77:21:1c:41:ca:b8:1a:b8:1b:42:
                    7a:eb:04:83:de:8d:cb:d8:a7:b7:70:31:3d:a9:bd:
                    2c:15:d0:15:bd:0c:b5:33:16:6a:a7:9e:05:11:07:
                    8a:86:ad:6f:c8:21:98:0a:88:23:0e:d4:cb:87:77:
                    68:59:bb:f0:3f:1a:c9:51:bf:96:ea:73:68:7c:29:
                    74:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:EC:2B:2D:56:BC:4A:C5:CD:CF:E8:DF:0C:2C:50:8B:87:96:F5:3F
            X509v3 Authority Key Identifier:
                keyid:77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/9BA13212344C11ED8F22CB70C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.80.0/23
                IPv6:
                  2001:df1:47c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:22:ff:be:34:67:61:16:69:da:26:0d:55:b7:5a:c7:87:ec:
         83:6e:2c:a7:bb:47:b8:2a:85:3a:62:04:69:82:a1:6e:75:fd:
         18:0f:55:17:ee:ef:95:da:ee:62:e7:a1:a4:a0:15:e0:3c:fc:
         be:41:12:14:9d:c9:dd:80:39:1c:a5:89:5d:ff:72:55:10:5f:
         16:24:6e:f2:28:d9:74:57:6e:30:44:06:17:29:9f:1c:6a:ab:
         a5:f5:77:18:94:59:40:31:cd:39:07:39:4d:25:9d:d8:63:71:
         4f:51:b9:f4:e1:c3:68:37:80:77:77:88:5b:e0:05:6c:71:5f:
         5b:9a:08:3f:a5:58:a1:d9:e7:85:19:ca:f1:df:9a:3b:08:65:
         d9:53:72:c4:ad:32:6b:a5:6f:7a:ed:8a:f9:fa:39:0c:48:90:
         96:0d:d9:41:27:d5:28:ae:a8:9f:81:9a:63:7d:90:a7:56:26:
         cf:06:0f:7a:71:6c:82:ee:b2:c2:1a:96:35:52:f8:cc:83:d0:
         4b:48:83:ab:26:d7:86:01:7e:5a:11:8e:76:76:4d:02:c4:c6:
         a0:e5:b1:5d:ce:d9:1d:88:70:0d:51:eb:ca:ac:da:43:99:ed:
         6b:26:44:e1:f6:cf:9f:e5:08:cf:46:ee:02:6e:98:34:71:90:
         18:91:09:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:46:30 2024 by rpki-client on console-ams.rpki-client.org