Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/4BF23558026D11EBB136622CC4F9AE02.roa
File:                     4BF23558026D11EBB136622CC4F9AE02.roa (raw, json)
Hash identifier:          w7wu9wh9fif0tC5nr5NEZaPxJ5u4oaVCyGFKNUO3P1g=
Subject key identifier:   0B:4C:89:8D:89:2F:41:1F:82:87:CD:E7:37:F4:B6:E0:47:19:20:42
Certificate issuer:       /CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
Certificate serial:       0E21
Authority key identifier: AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/4BF23558026D11EBB136622CC4F9AE02.roa
Signing time:             Wed 10 May 2023 19:28:48 +0000
ROA not before:           Wed 10 May 2023 19:28:48 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     137443
IP address blocks:        103.113.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl
                          rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 18:22:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3617 (0xe21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
        Validity
            Not Before: May 10 19:28:48 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=645bf070-02ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:69:ca:df:62:b5:92:55:bd:b1:2b:03:d6:76:
                    b9:d3:b5:e5:20:fc:dd:08:79:ab:b1:e6:f3:c7:3a:
                    ce:e3:77:42:43:49:39:83:cc:ad:bc:eb:47:f8:6b:
                    78:5e:83:5c:d5:dc:6a:7e:9f:29:80:12:95:a2:a0:
                    b0:a8:d7:40:11:42:c9:0e:00:8a:9a:24:b8:48:e2:
                    35:44:07:1a:4f:f4:f2:5a:b4:42:dd:59:95:98:55:
                    49:0a:b9:b1:69:41:01:9f:d3:4a:66:0b:5f:63:86:
                    a6:f0:c8:4f:eb:9a:1a:c5:7c:a4:7b:b5:01:c3:ec:
                    b6:00:00:40:58:ed:88:8c:46:bc:e3:05:05:34:7d:
                    5a:ff:5e:9d:09:7f:8c:51:7f:6e:3a:12:a4:36:06:
                    b5:2a:0b:6b:6f:39:a7:20:61:1f:03:11:6f:5a:f1:
                    ad:45:32:97:d7:49:73:ad:0b:2c:5a:f7:cd:87:cf:
                    e4:1e:10:8e:18:17:2e:8a:c8:53:80:d7:18:d5:02:
                    8a:b2:cd:9c:54:62:e7:1e:91:ab:f9:32:02:ec:98:
                    13:be:41:78:14:e7:ae:1b:78:0c:2a:de:8c:ed:51:
                    4c:46:7f:65:b1:c3:e7:ef:88:55:ed:85:ab:90:d2:
                    f2:80:02:95:67:d7:b6:18:49:b6:46:8f:50:a4:0b:
                    f3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4C:89:8D:89:2F:41:1F:82:87:CD:E7:37:F4:B6:E0:47:19:20:42
            X509v3 Authority Key Identifier:
                keyid:AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/4BF23558026D11EBB136622CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:95:af:2d:50:de:4b:58:62:a7:cb:c5:13:3f:3f:a6:58:88:
         60:fd:45:ee:0e:bc:0c:d0:8d:d8:9a:4f:3b:34:d3:d9:bd:2f:
         d2:4b:27:83:4f:03:09:c7:42:ad:ce:97:5e:91:44:84:12:5f:
         22:89:eb:0a:4f:99:28:2b:b2:b9:c8:bd:97:c7:13:2c:17:94:
         af:d2:35:1b:b3:4b:31:63:e1:fd:7c:85:18:5f:26:03:b2:b9:
         28:f2:ef:0d:13:94:33:9b:53:c5:f1:7a:de:63:1d:7c:49:a5:
         4c:db:ea:0c:2f:ec:89:0c:67:52:c7:1c:45:00:fb:dc:84:12:
         5b:c4:d7:7e:d9:d9:37:a3:7a:f9:50:ff:4c:33:04:3c:1f:13:
         66:42:6a:54:88:1a:ee:2f:98:aa:39:cf:54:3b:9b:d3:66:4b:
         42:fe:0c:d1:6b:29:53:8f:b1:29:2d:1d:94:92:b5:8c:18:5d:
         4a:66:49:8a:d0:f0:a7:ca:88:66:b6:a7:4e:23:1b:3d:15:ce:
         41:12:90:03:d2:5e:9f:b4:f1:a8:a1:e0:8c:a7:30:2d:30:7e:
         6e:b3:1d:77:06:d4:f4:ba:f7:d9:57:84:6b:5a:2d:ee:93:9f:
         76:e7:f7:16:5a:f8:fc:10:2a:03:d2:d6:dc:ad:13:f6:33:c6:
         dc:96:5e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 20:29:54 2024 by rpki-client on console-fra.rpki-client.org