Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/C0BBFCC003A911EF9DE2F919C4F9AE02.roa
File:                     C0BBFCC003A911EF9DE2F919C4F9AE02.roa (raw, json)
Hash identifier:          a3TV3Qr98YNHe55DJ7WbLvKYcURrK12GnbhFOXLtRjc=
Subject key identifier:   DC:AA:28:51:FB:EF:B0:6E:93:30:81:E6:B9:17:A5:A8:BC:67:CD:80
Certificate issuer:       /CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051
Certificate serial:       02AA
Authority key identifier: C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/C0BBFCC003A911EF9DE2F919C4F9AE02.roa
Signing time:             Fri 26 Apr 2024 08:48:29 +0000
ROA not before:           Fri 26 Apr 2024 08:48:29 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     58945
IP address blocks:        103.181.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl
                          rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 682 (0x2aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051
        Validity
            Not Before: Apr 26 08:48:29 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=662b6a5d-1aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:20:97:6c:ba:3f:54:2b:1d:00:a1:36:d3:10:
                    9d:4c:5e:ec:83:ff:0b:1d:38:45:b7:58:ee:1f:f1:
                    52:30:11:7b:40:f5:4e:10:2f:06:ef:b0:7d:5b:a0:
                    b8:e7:6a:f0:31:55:c6:f7:14:14:d5:60:d3:ed:b1:
                    66:10:54:df:77:58:8f:f8:03:ab:74:c8:41:da:cd:
                    dc:27:c0:b8:ae:89:db:bf:b8:93:bc:c5:10:6f:c8:
                    44:56:7e:99:8b:f6:73:b2:3f:d1:31:30:01:28:ec:
                    08:05:30:4d:40:28:91:20:ac:a1:d9:25:8e:be:78:
                    ad:c9:b7:23:44:79:2c:9e:1d:2f:12:53:a4:8c:f0:
                    5d:85:fa:ff:09:fc:08:a8:4b:30:ec:6d:30:c7:51:
                    43:ca:3d:f8:b8:50:e1:56:35:24:68:c9:51:96:35:
                    18:3e:4a:23:f8:f8:d0:c6:c1:8d:0f:74:74:91:c2:
                    79:78:2f:20:fc:01:77:ae:d0:2e:06:fc:f8:d4:f6:
                    27:58:07:cb:c7:9e:ac:14:89:35:51:6a:cf:ce:a5:
                    56:35:ab:3a:f3:f3:15:9f:62:3c:27:76:f6:34:49:
                    c2:80:19:c7:97:87:67:1a:1b:14:06:dc:dc:3c:57:
                    4f:50:6d:35:97:d8:4e:d9:50:18:26:c3:39:d7:29:
                    db:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:AA:28:51:FB:EF:B0:6E:93:30:81:E6:B9:17:A5:A8:BC:67:CD:80
            X509v3 Authority Key Identifier:
                keyid:C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/C0BBFCC003A911EF9DE2F919C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:f4:90:76:62:e4:18:2f:ec:ff:f8:b0:23:91:78:91:81:6f:
         33:f3:22:34:b1:2d:60:45:86:47:75:df:66:5d:35:61:4f:cf:
         45:3a:46:80:be:21:80:de:ff:1b:c3:ca:74:17:fa:5d:b5:b8:
         cc:83:95:8e:6a:c8:f8:b5:bf:76:1a:58:04:a3:07:de:43:6f:
         41:05:e7:1c:03:ec:88:b8:d2:4e:3f:35:7a:bd:14:08:c4:55:
         52:8e:51:3b:12:d7:38:89:6a:f7:a2:89:12:a7:94:64:1c:0e:
         a6:0a:98:0f:57:90:56:e9:f5:24:63:b8:ec:4c:d6:bc:51:7f:
         f4:ec:44:31:6f:29:74:bb:85:4f:23:8a:3e:ca:91:d0:39:bc:
         6c:c6:a4:23:d4:42:dc:1d:60:32:7f:3a:82:8e:8e:02:19:88:
         25:cc:72:53:b8:44:0c:a5:0f:31:b6:c0:6b:07:1a:d7:75:cc:
         91:0e:c5:b1:5d:47:fe:9d:96:b3:6b:43:33:8d:60:1a:fd:3b:
         23:d1:c2:9d:79:4a:b9:4a:54:03:8b:09:a6:ce:30:ac:f3:42:
         36:11:51:9e:11:13:aa:04:90:11:45:b1:14:4d:ab:14:a0:1b:
         52:90:72:40:da:02:ab:5d:d2:6a:29:ab:ab:94:28:ce:97:24:
         a2:33:99:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 04:20:44 2024 by rpki-client on console-ams.rpki-client.org