Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/BE8DA638EA7711EE8B5EB145C4F9AE02.roa
File:                     BE8DA638EA7711EE8B5EB145C4F9AE02.roa (raw, json)
Hash identifier:          +S5JOrVzExr1tWHPqpyasu36DpJpYPUsXS+qspyQe+g=
Subject key identifier:   06:A4:02:8C:5A:C9:A1:D7:A3:58:D8:B8:5A:C8:FC:73:15:50:6E:B3
Certificate issuer:       /CN=A91EE8AC/serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8
Certificate serial:       02
Authority key identifier: BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/BE8DA638EA7711EE8B5EB145C4F9AE02.roa
Signing time:             Mon 25 Mar 2024 07:17:31 +0000
ROA not before:           Mon 25 Mar 2024 07:17:31 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     136969
IP address blocks:        103.189.194.0/24 maxlen: 24
                          103.189.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl
                          rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Jun 2024 05:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE8AC/serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8
        Validity
            Not Before: Mar 25 07:17:31 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=6601250b-a84a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f6:6d:53:f8:d4:1d:68:a4:90:05:1d:13:16:
                    66:0f:97:f8:41:f1:99:83:12:25:77:1a:b5:c6:07:
                    91:8a:c2:5a:56:f5:4c:b0:df:a6:80:cc:9d:f1:31:
                    3b:f1:70:bc:19:af:62:e1:c2:4b:e2:2a:32:2a:ee:
                    d2:42:58:80:d1:2f:0f:a6:6e:dd:68:36:49:1d:3c:
                    a4:f1:31:aa:8c:86:33:29:cd:43:cd:02:e4:08:26:
                    3f:d4:d9:55:97:d5:ce:0f:6a:80:85:b8:8c:7a:7c:
                    a1:f2:b2:89:ba:d8:6c:2f:d3:ce:02:b8:c3:e6:0f:
                    b9:a6:72:31:8e:02:2a:99:06:c2:92:b2:96:c4:a5:
                    89:f7:f4:15:0d:ca:16:73:b9:12:a6:55:2d:d1:ad:
                    06:92:cd:50:27:2d:de:b2:18:58:cd:d1:65:c9:75:
                    14:9a:38:1d:5d:bc:82:b7:08:70:72:01:22:cc:45:
                    76:67:4b:2e:57:a7:8e:d1:23:4e:e7:5f:c1:70:fd:
                    24:1d:c1:6f:44:5f:e0:1b:e1:24:99:d3:89:98:fa:
                    de:be:f1:33:11:28:64:99:40:f8:dd:7b:04:a3:84:
                    c2:bd:00:4a:b9:2d:a7:b0:d7:57:83:90:50:69:14:
                    4b:96:3f:3c:ec:41:f1:03:cd:1b:d9:44:be:dd:1f:
                    de:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A4:02:8C:5A:C9:A1:D7:A3:58:D8:B8:5A:C8:FC:73:15:50:6E:B3
            X509v3 Authority Key Identifier:
                keyid:BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/BE8DA638EA7711EE8B5EB145C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:6f:14:55:5b:e2:26:29:6d:41:38:7c:73:d1:8f:81:48:74:
         71:75:bd:83:65:35:77:10:db:14:f0:65:06:96:b3:8a:ee:db:
         75:57:e1:49:42:88:d6:34:c6:13:3d:cd:89:8f:e5:5d:22:f3:
         0d:67:73:7c:8c:8a:ff:63:a2:ea:74:e5:41:90:3c:4f:67:e6:
         d7:4e:60:d5:36:90:f5:b6:e5:50:e0:54:a0:2b:0e:d3:4b:15:
         a3:2b:28:04:d9:9f:dd:6d:65:be:e1:ef:3a:eb:8f:af:a0:bb:
         0c:98:cb:aa:7b:d3:09:33:4a:ce:28:0e:17:f6:66:11:57:d4:
         30:9b:9e:00:48:09:e2:a6:4d:10:85:a6:6e:b2:84:e8:88:68:
         c2:37:cd:ce:2b:a5:bb:50:6e:eb:85:77:52:a0:0f:9b:2b:a9:
         ac:56:46:18:3b:11:00:51:85:79:6d:ec:83:8f:c8:0c:41:46:
         12:b4:3a:86:ac:21:06:30:e9:24:86:79:8b:f7:1f:b0:1f:cf:
         6f:16:eb:62:b8:ae:ad:11:4a:08:d8:3f:2b:f5:26:6a:61:9a:
         90:21:93:ca:ae:dc:90:30:16:13:d6:4d:6c:2e:39:e5:56:51:
         e2:20:d5:5d:bf:2f:30:1e:fe:5e:94:e2:3f:4f:ec:f0:32:e2:
         0b:a6:5a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:47 2024 by rpki-client on console-fra.rpki-client.org