Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/90BBD1B6884C11EB88489B75C4F9AE02.roa
File:                     90BBD1B6884C11EB88489B75C4F9AE02.roa (raw, json)
Hash identifier:          FmdbY9QipzaQlUDFsL3jY9YqRtDMRVNSSqRy0Syi7ec=
Subject key identifier:   D7:5C:69:A9:9E:0C:6D:3D:00:43:EC:A1:55:01:C4:9F:0B:2B:CD:7D
Certificate issuer:       /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14
Certificate serial:       0626
Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/90BBD1B6884C11EB88489B75C4F9AE02.roa
Signing time:             Wed 01 May 2024 01:03:39 +0000
ROA not before:           Wed 01 May 2024 01:03:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        103.162.82.0/24 maxlen: 24
                          2001:df6:1a80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1574 (0x626)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14
        Validity
            Not Before: May  1 01:03:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=663194eb-e5de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:70:7e:11:cd:f0:9f:b0:98:e6:44:e6:50:16:
                    cd:3e:46:96:41:7f:41:42:c8:ab:8c:c9:ca:50:e4:
                    46:06:58:2e:00:00:39:2e:b2:1c:dd:87:43:73:8c:
                    64:6f:8f:35:86:8e:e2:d0:10:4f:e9:d9:24:53:00:
                    1e:fd:9b:f2:f2:de:ff:37:b2:ae:35:83:e4:2f:69:
                    bc:14:64:ed:f1:f4:c9:90:a9:1d:80:14:d0:51:f3:
                    c2:fc:9f:3f:7d:06:17:77:8a:c7:72:df:5a:ff:e2:
                    f5:26:79:83:5d:5e:c9:b3:0b:1e:93:17:eb:0f:dd:
                    cf:d2:6b:95:96:e4:ee:52:f2:95:22:30:32:29:b8:
                    46:c6:1e:70:30:1e:06:8e:96:3c:e0:3f:0e:69:58:
                    25:b0:66:3a:c9:e6:b5:b7:fb:d2:0d:7a:3a:e7:9d:
                    0f:25:90:af:2c:e5:5f:69:68:85:95:5a:9f:a9:9d:
                    84:82:71:40:f7:2a:7d:7d:15:60:8c:ed:fd:37:45:
                    e8:de:c0:b9:68:88:1b:2d:ae:c7:b6:92:61:2f:0c:
                    df:53:95:c2:8b:89:f4:bb:ed:4b:b2:7c:17:22:27:
                    82:7c:52:a2:ff:2f:cc:b9:7f:75:40:83:35:34:a7:
                    2d:eb:4a:5d:76:29:6a:3b:2a:45:75:c9:fd:c4:16:
                    64:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5C:69:A9:9E:0C:6D:3D:00:43:EC:A1:55:01:C4:9F:0B:2B:CD:7D
            X509v3 Authority Key Identifier:
                keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/90BBD1B6884C11EB88489B75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.82.0/24
                IPv6:
                  2001:df6:1a80::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:54:7b:67:4d:4a:72:30:22:e6:ef:29:97:61:a0:b7:83:8a:
         08:3d:d0:71:b7:ac:c6:db:02:df:2e:b7:52:18:7a:48:c9:c5:
         10:99:f3:5d:2a:23:65:8b:00:4a:c5:cf:20:a8:50:19:ef:9c:
         7b:65:95:f8:36:1c:27:19:a6:ad:a4:2a:03:be:a6:c4:1a:5d:
         06:cc:38:9f:c5:94:a3:36:da:3f:9e:e1:81:d4:73:53:68:e4:
         e1:4d:c0:d8:83:28:f1:5c:49:23:c0:ab:d1:4c:a2:50:fa:32:
         13:50:33:ec:a8:d7:b8:6e:06:85:3a:d6:1c:fc:31:d2:4f:ac:
         82:2f:aa:f1:65:03:f5:87:ed:aa:39:d5:0d:85:77:84:89:7d:
         c0:a4:45:c2:03:6d:4c:0b:d4:26:eb:ca:cf:ec:d2:b3:05:f3:
         54:7b:88:d1:b0:ae:0b:46:ba:d3:9b:ed:bc:3a:9d:89:86:d4:
         ea:15:eb:ea:93:62:cb:49:71:db:83:b8:8f:cc:6d:17:37:9f:
         a5:fb:19:a1:77:5a:52:a7:b5:67:bf:02:78:e4:68:86:fe:4e:
         c0:32:19:95:4f:cb:7d:aa:1c:99:1b:e1:0e:03:6d:fb:ed:ff:
         3f:e0:52:86:df:c7:1a:e8:a4:e9:e8:cb:6b:f8:08:dc:d6:4d:
         5a:bc:85:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:56:03 2024 by rpki-client on console-ams.rpki-client.org