Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/F99707CEBAC511E9A77CDE7BC4F9AE02.roa
File:                     F99707CEBAC511E9A77CDE7BC4F9AE02.roa (raw, json)
Hash identifier:          iZLozjkQrVx5Rip88rCFEDljYu/qf4k+eN+MjfIimJg=
Subject key identifier:   97:1F:2E:33:87:9A:85:F8:88:33:F6:89:74:25:BC:E2:A1:B7:FA:1F
Certificate issuer:       /CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
Certificate serial:       1463
Authority key identifier: 12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/F99707CEBAC511E9A77CDE7BC4F9AE02.roa
Signing time:             Thu 02 May 2024 17:35:43 +0000
ROA not before:           Thu 02 May 2024 17:35:43 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        103.114.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl
                          rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 16:50:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5219 (0x1463)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
        Validity
            Not Before: May  2 17:35:43 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6633ceef-0b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:90:5f:d6:c6:49:0d:8d:18:c2:40:9a:53:f2:
                    55:76:0c:57:ca:eb:a8:a7:25:7d:62:66:ff:fb:94:
                    45:ec:71:49:65:cd:62:e0:8e:e8:53:dc:c8:7e:5f:
                    a8:56:ba:c7:22:bd:e2:3e:2e:90:8b:ac:9e:38:2e:
                    ae:49:aa:ac:b9:0a:8a:30:89:95:b5:68:d0:6c:30:
                    6e:b6:51:5d:b5:ab:d2:e3:69:5c:ad:b3:15:de:4f:
                    a2:91:81:e6:ac:0e:2e:ac:76:48:92:bb:0c:01:d8:
                    21:1d:db:03:72:ec:f9:04:17:db:62:4b:9d:3b:f2:
                    ef:f0:c0:af:9c:9d:0c:fd:1b:4d:ea:5c:17:44:68:
                    88:7f:70:8f:c4:3b:77:da:d6:77:59:3a:6d:53:2a:
                    ae:2c:7c:05:13:e5:e3:88:4b:31:d8:f1:2c:29:d0:
                    bc:35:48:49:ca:31:d1:a0:e3:8a:d4:73:2d:c7:4e:
                    f6:34:8f:32:9d:09:fc:89:90:3a:0c:b9:e0:a4:10:
                    b6:c9:62:c1:12:0f:f6:fd:4f:68:ac:84:f1:77:9f:
                    94:9a:e6:10:ab:c4:01:bd:13:72:00:c1:97:d1:f1:
                    de:a9:76:5a:e0:10:89:d7:c6:6e:cf:b1:1e:4d:82:
                    9f:cf:f0:75:48:4a:6a:5a:fe:8a:a9:00:a0:ec:ba:
                    53:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:1F:2E:33:87:9A:85:F8:88:33:F6:89:74:25:BC:E2:A1:B7:FA:1F
            X509v3 Authority Key Identifier:
                keyid:12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/F99707CEBAC511E9A77CDE7BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:76:25:ec:bd:6b:86:23:fc:86:a8:78:68:fe:84:41:76:e2:
         6f:80:04:c4:46:b4:ff:80:10:83:5c:cc:89:60:a6:2c:47:8a:
         df:d4:88:02:d6:c4:f2:d7:72:a6:2d:81:e0:33:29:ea:09:98:
         68:c2:46:2f:d3:9d:92:12:80:3e:d2:0f:92:e4:a7:ec:88:83:
         c2:13:d1:46:94:e8:bc:92:81:10:da:6e:f3:b2:fb:1f:83:bd:
         fd:18:0f:35:65:97:48:ea:0f:f7:6c:bf:96:88:e7:60:be:e3:
         29:88:3c:6a:0f:12:82:8d:e3:df:5a:60:e6:59:b4:71:1c:84:
         bc:b7:7e:92:2e:ab:fd:f4:43:1e:c6:93:34:d8:19:0c:8a:a5:
         2d:d2:9f:70:3b:fb:09:8f:40:9b:3c:ee:db:9e:7c:ab:23:16:
         2f:62:a5:dd:e9:08:c2:8c:eb:96:09:41:0a:86:35:3b:89:de:
         21:31:ef:86:ad:3b:62:4c:f7:6b:c0:35:c3:00:bc:65:0d:c7:
         77:8c:cc:67:30:32:07:94:8c:44:5a:76:20:6b:02:e4:54:dc:
         c0:68:2a:ad:06:54:df:f1:e7:07:e2:01:9d:09:0b:d7:ec:aa:
         2b:ec:b5:53:33:9a:6d:90:9b:bc:c0:19:4e:24:97:8b:44:e5:
         c0:ff:4c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:06:11 2024 by rpki-client on console-ams.rpki-client.org