Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/01C04C52FB8D11ECABCA1D0AC4F9AE02.roa
File:                     01C04C52FB8D11ECABCA1D0AC4F9AE02.roa (raw, json)
Hash identifier:          Jy8dJE9jTJzFAsdw8VR/lx8oiKYZFdZ2IPhdcCmHBA8=
Subject key identifier:   47:26:8D:4F:B8:34:BD:C3:53:A4:7F:DB:08:A5:12:9D:B1:50:8E:24
Certificate issuer:       /CN=A91F2A41/serialNumber=EEFBC65363F5716D724C117CD54221E412D923CC
Certificate serial:       0169
Authority key identifier: EE:FB:C6:53:63:F5:71:6D:72:4C:11:7C:D5:42:21:E4:12:D9:23:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/01C04C52FB8D11ECABCA1D0AC4F9AE02.roa
Signing time:             Wed 07 Jun 2023 06:19:16 +0000
ROA not before:           Wed 07 Jun 2023 06:19:16 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     7594
IP address blocks:        103.188.182.0/23 maxlen: 23
                          103.188.182.0/24 maxlen: 24
                          103.188.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.crl
                          rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 04:12:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 361 (0x169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2A41/serialNumber=EEFBC65363F5716D724C117CD54221E412D923CC
        Validity
            Not Before: Jun  7 06:19:16 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64802164-df24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:76:a8:65:13:0e:34:c4:4e:55:e4:85:17:07:
                    7e:e6:17:00:be:31:4e:43:50:ed:4e:2d:cd:9f:52:
                    44:28:f1:be:10:f9:d6:8f:d3:4b:b9:2e:94:f1:ae:
                    0e:4e:7c:ba:dc:e2:63:e4:cb:42:73:ed:c1:35:2c:
                    65:63:1b:10:e9:59:4a:af:d7:36:65:6f:bc:64:dc:
                    74:94:28:7e:fc:ec:b9:77:18:7e:03:e3:c7:01:e4:
                    cb:76:5e:b6:68:80:18:bf:6a:bb:c7:63:45:72:41:
                    80:34:0e:b6:18:64:09:ac:dc:c6:7f:e9:01:38:84:
                    27:47:0d:9e:5d:22:f9:7f:a4:00:5e:f2:d0:ee:52:
                    96:4d:df:1c:9a:fc:c1:fa:19:7d:0d:6a:80:cf:93:
                    df:a6:cd:6d:47:f6:57:5b:44:d9:26:cb:8c:65:f2:
                    24:74:7b:cc:48:07:56:94:d0:8e:a7:bf:41:0b:af:
                    a4:3e:5e:2d:d8:d3:23:fb:07:f4:81:75:5c:b4:5d:
                    aa:d1:5d:0b:7f:c7:a9:96:9a:c2:11:73:71:35:68:
                    ad:52:63:93:51:db:a9:bb:c9:47:e6:87:35:8e:f7:
                    da:1e:31:e4:f3:1d:98:62:25:51:e3:1d:33:d5:af:
                    44:0d:6b:fa:2e:99:af:d7:b5:a4:7e:bb:ae:4b:c1:
                    f0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:26:8D:4F:B8:34:BD:C3:53:A4:7F:DB:08:A5:12:9D:B1:50:8E:24
            X509v3 Authority Key Identifier:
                keyid:EE:FB:C6:53:63:F5:71:6D:72:4C:11:7C:D5:42:21:E4:12:D9:23:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/01C04C52FB8D11ECABCA1D0AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:c6:cf:d7:88:c4:74:1c:d5:c9:1c:71:47:d6:f1:2c:72:0f:
         f3:60:d3:04:38:99:58:76:d6:bc:bd:3c:e6:6f:5e:37:4f:51:
         74:bc:fa:52:9a:da:a9:02:62:bc:7a:fd:d5:e1:b5:41:94:3a:
         a3:d0:6c:05:41:d7:73:73:63:4b:c6:d3:ad:bd:66:48:01:a0:
         1b:22:81:80:79:77:43:eb:16:1d:9a:8e:9d:7d:7b:5b:4d:2b:
         ce:75:90:b2:0c:cb:66:54:1d:b3:3b:88:90:c3:d6:28:9a:e2:
         cf:84:9f:ec:d5:1d:17:9f:05:40:5f:de:0c:73:62:12:4e:99:
         55:1c:9e:24:f6:41:f7:e8:89:9b:d1:df:78:db:37:c6:d9:e9:
         8c:cb:0b:23:91:52:d4:e7:04:b5:a9:1a:c0:bb:31:40:dd:10:
         90:82:82:a9:d2:83:43:b6:44:79:5e:5b:17:5e:f4:4e:65:65:
         7d:d4:55:2e:c1:fa:9f:c4:4c:40:28:ae:6a:c3:7c:62:13:98:
         9a:16:0e:a8:ce:4f:03:ab:26:c9:73:ee:c7:c4:ce:de:6a:e2:
         58:63:5e:58:b6:e9:c7:80:43:7e:db:26:48:dc:3a:59:fd:96:
         f8:84:ee:14:0d:10:08:75:62:08:36:34:cf:35:e8:09:04:ba:
         b5:f2:1e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:46:30 2024 by rpki-client on console-ams.rpki-client.org