Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/C18E7856446C11EDA55DB951C4F9AE02.roa
File:                     C18E7856446C11EDA55DB951C4F9AE02.roa (raw, json)
Hash identifier:          f3dkko2SsUhOvSSMI7rmurbucL4yK02dZgoRDuXpmPk=
Subject key identifier:   E8:A6:64:83:4C:AA:74:6F:B3:79:E9:C6:21:62:49:A3:87:48:F1:18
Certificate issuer:       /CN=A91F1B39/serialNumber=D18F98A41C0ADC8C8184B826A71F3EF27F195323
Certificate serial:       BC
Authority key identifier: D1:8F:98:A4:1C:0A:DC:8C:81:84:B8:26:A7:1F:3E:F2:7F:19:53:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/C18E7856446C11EDA55DB951C4F9AE02.roa
Signing time:             Tue 03 Oct 2023 04:04:33 +0000
ROA not before:           Tue 03 Oct 2023 04:04:33 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     137006
IP address blocks:        103.101.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.crl
                          rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 05:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1B39/serialNumber=D18F98A41C0ADC8C8184B826A71F3EF27F195323
        Validity
            Not Before: Oct  3 04:04:33 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=651b92d1-5f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:63:59:02:d7:69:d5:af:03:87:ee:5b:65:7d:
                    0c:22:f0:b5:32:6c:4a:b4:b7:45:40:e4:bc:52:57:
                    57:d3:13:f6:bd:c1:fa:2d:31:30:db:39:bf:eb:f0:
                    be:04:20:27:7b:fd:8f:89:57:6a:29:36:68:4f:90:
                    32:59:bf:24:bc:a9:b7:96:02:4b:e6:47:ec:24:b0:
                    c7:ab:02:44:bc:a0:66:eb:5f:2d:1d:6f:b5:35:1b:
                    c0:da:bf:89:b5:33:5d:aa:80:8b:88:27:19:ed:64:
                    18:e2:e3:c1:b9:be:5c:d2:61:43:d0:41:e5:88:60:
                    ff:27:d3:d0:cc:3c:bd:66:44:d1:25:d9:5a:7a:fb:
                    bb:c2:fc:18:1e:5b:b9:20:ba:54:4e:db:10:8a:97:
                    f4:85:70:db:25:37:8f:37:62:35:33:30:56:fe:df:
                    72:1a:b2:82:9d:85:dc:01:2f:41:ad:78:fb:f0:54:
                    23:a6:9d:ab:2c:30:0d:d2:7d:c1:8e:95:e9:f5:3e:
                    dc:d7:1b:5c:b5:08:2a:10:2d:a0:cd:9b:96:7d:b4:
                    3c:13:5a:99:a1:e7:b4:27:96:ea:75:39:88:d2:b4:
                    55:97:c2:ac:7a:5d:70:ad:e4:58:2b:3c:4b:ba:7d:
                    4b:76:52:5e:35:1e:d9:c6:19:24:76:5e:0d:28:2c:
                    c7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A6:64:83:4C:AA:74:6F:B3:79:E9:C6:21:62:49:A3:87:48:F1:18
            X509v3 Authority Key Identifier:
                keyid:D1:8F:98:A4:1C:0A:DC:8C:81:84:B8:26:A7:1F:3E:F2:7F:19:53:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/C18E7856446C11EDA55DB951C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:89:ee:f3:73:15:7f:2a:5e:1d:01:d0:fe:a8:d2:37:03:68:
         b7:3e:f2:1e:07:37:91:66:46:bc:24:fd:b9:73:02:a8:f9:86:
         f8:b6:4d:fa:34:62:20:72:a3:22:7b:0d:2f:50:b7:83:5a:e0:
         48:d3:d4:6d:2a:b1:e5:f9:35:f2:da:eb:f6:21:92:0c:52:2e:
         95:4d:50:dc:8e:10:40:1f:5c:36:38:c2:3d:79:79:3c:d7:e1:
         3f:4a:b6:3d:77:7d:f6:72:9e:c8:25:7f:a0:e5:79:56:09:e3:
         73:be:d2:d8:47:b1:53:7f:4b:5c:89:31:46:36:d0:50:ca:4d:
         fb:5c:f6:db:d2:13:27:ed:fb:5f:2a:80:bf:aa:77:9d:51:4c:
         75:21:21:8c:b3:31:e2:9d:a3:7f:71:70:92:d6:a4:d0:76:57:
         ad:3a:d8:57:13:02:1d:ad:82:7c:3c:57:9b:54:c4:3b:a7:90:
         fb:a9:60:dc:3a:3f:ab:31:d0:f0:f3:3c:32:02:ed:1b:6c:9d:
         30:72:cd:6d:12:36:a9:86:59:32:43:43:6c:a7:29:2b:8d:d0:
         08:a2:df:c9:b3:45:27:07:f6:7e:8c:a9:cf:45:3e:ea:df:00:
         0f:dd:64:d3:64:fc:ca:c9:e2:35:05:3e:6f:0b:28:56:a7:53:
         ff:b2:5c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:46:30 2024 by rpki-client on console-ams.rpki-client.org