Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/F189CB86C81D11EBA4C0E321C4F9AE02.roa
File:                     F189CB86C81D11EBA4C0E321C4F9AE02.roa (raw, json)
Hash identifier:          Uz4HXvqGssuPE8rQ4AQM1SNspVzHLX+/sQbvg64mXw4=
Subject key identifier:   D2:B5:29:8C:0C:9F:00:AD:74:CA:80:D1:69:5C:38:61:1F:2C:02:7B
Certificate issuer:       /CN=A91FB5CE/serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643
Certificate serial:       048F
Authority key identifier: 58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/F189CB86C81D11EBA4C0E321C4F9AE02.roa
Signing time:             Fri 03 Nov 2023 01:13:23 +0000
ROA not before:           Fri 03 Nov 2023 01:13:23 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     137968
IP address blocks:        203.25.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl
                          rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 00:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1167 (0x48f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB5CE/serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643
        Validity
            Not Before: Nov  3 01:13:23 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=65444933-e61a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:30:b8:41:2f:4a:f6:c1:64:65:e5:fa:19:1e:
                    36:80:b7:5d:c4:e6:06:4d:58:18:9c:9a:40:ca:3f:
                    cf:50:20:81:56:21:94:e8:0e:de:21:74:27:34:c6:
                    9e:d2:05:8f:b8:1b:ca:6b:4d:51:19:95:2e:24:58:
                    e2:fb:6c:b2:1d:a5:f2:9c:4e:da:fe:93:6b:b0:6d:
                    61:55:94:75:dd:b3:0a:23:f7:c1:fc:d2:00:46:46:
                    22:3a:f6:ff:61:44:84:c7:c9:f4:9f:06:a0:51:96:
                    a2:de:f8:47:0b:b7:07:a0:b2:09:a4:8b:8d:56:62:
                    55:dc:b0:88:80:aa:22:a8:e9:7e:62:8b:d9:46:00:
                    35:f4:26:de:35:a0:41:fb:37:7a:1a:65:e8:a5:fb:
                    c0:f0:36:18:26:29:fa:ba:55:cf:5c:3c:9a:f1:21:
                    0b:a3:22:08:d8:68:fb:53:31:0f:63:8e:81:36:f2:
                    fa:d4:11:14:9e:ee:71:4b:59:77:df:ac:2f:a8:02:
                    cb:4b:f2:5b:fc:da:a3:fd:11:52:0b:82:03:b4:2c:
                    16:2d:1e:0c:72:b2:cd:71:12:58:12:c2:f6:5e:d7:
                    5c:3e:dd:4a:ef:85:ee:e3:20:36:ba:f4:fb:2c:69:
                    e6:46:bd:95:12:3a:4e:52:f6:d2:d9:36:ce:6e:d6:
                    4d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B5:29:8C:0C:9F:00:AD:74:CA:80:D1:69:5C:38:61:1F:2C:02:7B
            X509v3 Authority Key Identifier:
                keyid:58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/F189CB86C81D11EBA4C0E321C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.25.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:58:50:5d:c5:6e:e2:b7:f4:05:e0:96:6c:b5:d2:5e:11:17:
         1f:67:34:66:f8:92:6b:f5:4e:4d:ba:4e:5b:ed:15:3d:d1:61:
         23:1f:18:82:0c:c7:ac:e4:a0:cb:d6:ef:88:ee:06:5b:85:73:
         52:89:bd:5d:86:bc:1f:bb:21:cd:7b:c6:91:4c:b0:f6:7b:58:
         87:4e:cd:f5:d4:a4:af:8b:00:fa:75:91:5c:c7:6e:4f:d2:6b:
         e1:97:e8:dd:55:42:f3:c0:27:21:99:67:91:6f:45:7c:19:00:
         c6:0b:6b:a7:7e:c9:ac:c0:52:6c:e3:ba:e5:06:73:da:fe:0d:
         08:4b:4e:c4:3c:30:b4:00:6f:58:b6:cb:20:d7:2c:85:fe:c7:
         fd:f3:67:a3:db:cb:1b:2b:31:4f:44:d1:29:64:53:f2:be:22:
         8c:55:31:04:69:51:4d:47:8c:6d:f5:88:ec:db:b0:15:99:91:
         04:73:03:27:6a:9e:dc:fd:d8:13:d2:91:3c:54:76:7c:c5:fb:
         45:02:b6:6f:88:3d:19:cf:63:d9:39:95:f8:8b:63:2d:9f:10:
         8a:35:a8:cd:c8:06:97:43:a8:19:9e:7b:1d:b5:9c:c8:1e:e1:
         1d:2f:94:2d:29:fe:fd:da:3c:69:1f:c0:68:4c:f9:b8:21:34:
         67:e9:e7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:38:41 2024 by rpki-client on console-fra.rpki-client.org