Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/0104D0BADB0D11EE88489759C4F9AE02.roa
File:                     0104D0BADB0D11EE88489759C4F9AE02.roa (raw, json)
Hash identifier:          M/Fz4ZzJ8nw9WIT1K6CJ2Uj7khwmgkRLFLTllMUPveM=
Subject key identifier:   7F:58:1D:29:F4:42:A1:75:64:9D:EB:BD:27:81:94:6C:85:16:A3:56
Certificate issuer:       /CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
Certificate serial:       0384
Authority key identifier: 50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/0104D0BADB0D11EE88489759C4F9AE02.roa
Signing time:             Tue 05 Mar 2024 16:25:39 +0000
ROA not before:           Tue 05 Mar 2024 16:25:39 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     136969
IP address blocks:        103.152.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl
                          rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 02:52:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 900 (0x384)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
        Validity
            Not Before: Mar  5 16:25:39 2024 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=65e74783-211b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5c:3e:db:87:94:f4:11:01:e0:60:23:3e:9e:
                    10:b9:a5:31:c1:87:2f:8c:64:02:66:5f:9a:82:2e:
                    63:2b:c6:0d:a9:ae:0a:9d:53:58:b0:47:ea:92:ee:
                    1e:52:7b:3e:cd:ff:9e:ce:0e:c9:92:72:05:46:57:
                    24:8a:97:62:a7:2c:07:2e:3b:99:b8:fc:5c:ee:29:
                    99:9d:ee:84:03:32:3d:46:8f:7a:a0:6c:09:39:2b:
                    18:73:29:97:e3:f6:b6:25:d2:6f:48:96:22:c4:e3:
                    71:b3:e3:66:c4:9e:11:30:3e:c5:2a:e7:da:74:d6:
                    54:69:18:8e:66:9c:3f:ba:5f:74:22:e1:8d:07:18:
                    ee:05:f5:48:d8:48:d4:b0:f4:b2:45:17:98:a3:ca:
                    45:4f:cd:a5:ff:64:99:41:15:63:aa:9e:59:3a:d8:
                    cf:45:4d:53:01:bf:17:12:66:83:40:b5:91:bd:39:
                    7d:8d:f7:33:3f:34:80:45:08:e4:dc:8f:bd:a0:81:
                    8b:fa:7a:5f:1d:d3:50:13:67:3f:24:7a:fc:cc:8d:
                    5f:3b:22:10:41:63:70:69:32:6f:86:79:0e:ec:1e:
                    bf:24:fd:65:e0:69:7d:15:4f:0c:7f:00:af:3c:20:
                    6d:bf:03:25:14:05:8b:01:af:fa:23:3e:fd:ab:10:
                    6b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:58:1D:29:F4:42:A1:75:64:9D:EB:BD:27:81:94:6C:85:16:A3:56
            X509v3 Authority Key Identifier:
                keyid:50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/0104D0BADB0D11EE88489759C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:f2:1b:21:fd:e7:fc:42:7f:d6:d2:07:4d:7d:45:fd:67:fd:
         ee:fc:9a:2a:a1:47:2e:0f:e5:33:f3:c3:8b:36:ef:46:b1:8a:
         a4:98:12:c8:d9:16:11:58:2d:af:13:cf:26:f2:46:c4:85:94:
         e7:5d:b3:87:f7:e7:f0:13:9a:b1:2b:ba:a5:7f:d9:b3:e5:d8:
         bb:f5:27:c7:b5:8e:b9:39:d9:c7:7c:5b:b7:5c:9c:81:e6:38:
         1a:05:5a:a3:d7:12:5a:5d:8a:cd:16:77:af:37:0a:77:aa:dd:
         9f:99:04:91:59:bf:2a:25:92:71:40:86:49:1f:0e:33:3b:5e:
         3d:4b:2e:e4:05:54:24:8e:8f:cf:95:c2:d0:0d:32:67:75:fa:
         a5:e0:c2:6c:33:d4:e9:45:a5:35:bd:e6:cd:d0:e4:5d:ac:07:
         79:4d:dc:9d:e6:6d:d7:13:51:40:3a:34:81:22:96:51:9a:cd:
         3c:1a:e5:86:14:b5:08:5f:39:98:f4:18:16:75:0d:b0:d4:54:
         7d:49:3f:d6:92:03:99:6d:14:ff:76:d8:51:a7:a8:39:8e:c8:
         1d:0c:83:05:61:03:58:80:50:c7:eb:28:44:82:7d:96:3e:c1:
         69:a2:6f:8e:a5:4c:3b:c5:59:4e:31:99:41:3d:58:96:cc:00:
         65:a9:65:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:52:23 2024 by rpki-client on console-ams.rpki-client.org