Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/78A3D4AE6AC011ED9C15EE6BC4F9AE02.roa
File:                     78A3D4AE6AC011ED9C15EE6BC4F9AE02.roa (raw, json)
Hash identifier:          YFHfbdx8wgYWAxYOVlgp/hr70vcAcV/rrs+TbpjVf/8=
Subject key identifier:   19:55:FD:8E:CE:BE:9C:51:39:16:5D:BC:CA:20:E1:AD:8B:A8:0D:4E
Certificate issuer:       /CN=A91F5B0D/serialNumber=02E3870EC3C61E2777716D7018B34CB3357A02C4
Certificate serial:       050F
Authority key identifier: 02:E3:87:0E:C3:C6:1E:27:77:71:6D:70:18:B3:4C:B3:35:7A:02:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/78A3D4AE6AC011ED9C15EE6BC4F9AE02.roa
Signing time:             Sun 16 Jul 2023 23:40:26 +0000
ROA not before:           Sun 16 Jul 2023 23:40:26 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     55550
IP address blocks:        103.115.100.0/24 maxlen: 24
                          2402:e4c0::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1295 (0x50f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5B0D/serialNumber=02E3870EC3C61E2777716D7018B34CB3357A02C4
        Validity
            Not Before: Jul 16 23:40:26 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64b47fe9-59ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ff:36:56:14:8d:49:cc:d9:76:31:45:d0:c9:
                    dc:11:4c:92:49:9f:70:db:30:c6:13:d5:bb:f8:33:
                    9d:0b:d1:66:ad:7a:c2:7f:44:25:e5:95:3c:29:57:
                    bf:b4:58:78:c0:97:df:95:73:46:47:fa:56:b8:ca:
                    7a:38:63:f6:51:af:02:08:9d:58:3c:ac:af:0e:af:
                    9c:58:5c:61:bb:c7:99:d5:3e:45:4c:91:99:88:95:
                    b1:97:bc:ea:19:4e:2b:b6:3b:4b:28:6b:fd:ae:8e:
                    5d:a3:c4:4d:85:63:4e:e7:0d:4a:c3:0b:9f:4c:62:
                    da:f0:d7:d4:f2:7a:7a:a1:68:b5:fc:57:a2:bb:93:
                    3c:b4:43:96:2e:e7:74:86:32:b5:d7:43:29:9c:46:
                    e2:43:11:08:ae:58:cd:a3:de:32:ee:9a:67:2c:3e:
                    5c:c7:62:03:61:1b:cb:4b:b2:12:95:99:41:ad:ec:
                    79:f5:ae:1c:43:e2:e5:29:b3:1b:4c:b5:0b:2a:b5:
                    9b:48:8e:18:24:60:d9:8b:9f:53:35:e5:88:d6:3d:
                    81:a7:e4:fd:0c:0c:1b:e0:d4:37:59:90:37:e8:80:
                    74:d5:fc:84:75:80:0f:6e:0e:0a:f7:5d:f1:d2:5c:
                    bb:38:dc:1e:6b:75:f9:4e:cc:fd:8f:f2:00:e5:d3:
                    81:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:55:FD:8E:CE:BE:9C:51:39:16:5D:BC:CA:20:E1:AD:8B:A8:0D:4E
            X509v3 Authority Key Identifier:
                keyid:02:E3:87:0E:C3:C6:1E:27:77:71:6D:70:18:B3:4C:B3:35:7A:02:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/78A3D4AE6AC011ED9C15EE6BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.100.0/24
                IPv6:
                  2402:e4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:a4:a8:35:d1:54:4d:7f:6b:8b:6e:1e:d6:a2:e1:c2:9d:ba:
         c3:0f:61:5a:91:82:12:e8:8b:86:58:96:94:d2:15:25:d8:ff:
         87:29:0c:51:df:93:d0:d5:ed:d9:f2:59:32:ac:f1:d1:6e:e5:
         6d:9b:b1:4e:ad:c6:40:5b:fc:f9:cc:a1:92:29:fa:1f:ea:5a:
         a3:6f:21:2e:2f:f7:61:96:46:d0:eb:84:d0:ec:ae:0c:bd:d7:
         82:ff:25:6a:56:33:08:a1:88:62:89:7e:db:ad:86:db:2b:73:
         1f:7f:ef:94:a3:4a:cc:f7:c4:be:38:24:1a:1c:18:e0:ed:46:
         fa:d7:79:9d:e8:24:65:0c:08:f8:21:74:a4:01:34:67:d6:3c:
         59:cb:3f:2d:96:a1:f3:d7:6a:7d:f8:b1:2e:ff:50:16:b8:00:
         a4:4f:20:46:c0:36:a3:1d:c6:e0:a0:62:ae:ee:4e:37:80:91:
         72:ff:41:1f:f5:4c:1c:9e:3c:dd:22:cf:af:20:ec:cb:28:45:
         6a:14:f7:fc:76:76:de:47:d8:ce:af:46:3c:17:34:24:6b:b3:
         dc:0d:49:f4:d8:91:3e:93:e0:f9:88:40:11:19:0a:f0:4c:d8:
         4e:fc:d0:75:c1:13:35:a7:5c:e2:c2:f0:92:18:2b:a1:5b:3a:
         2d:2e:ef:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:19 2024 by rpki-client on console-ams.rpki-client.org