Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/7D7F944CE63711EE9235F65AC4F9AE02.roa
File:                     7D7F944CE63711EE9235F65AC4F9AE02.roa (raw, json)
Hash identifier:          FGTOqwzLHk6CfyISDfRQg479E1UFJRHn2yk0jTzEG98=
Subject key identifier:   51:A3:C3:25:0A:28:16:AB:B0:1D:C6:8A:AB:34:12:8A:1F:B7:3F:9F
Certificate issuer:       /CN=A91FD8BE/serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162
Certificate serial:       05
Authority key identifier: E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/7D7F944CE63711EE9235F65AC4F9AE02.roa
Signing time:             Tue 19 Mar 2024 21:27:30 +0000
ROA not before:           Tue 19 Mar 2024 21:27:30 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     174
IP address blocks:        103.67.54.0/24 maxlen: 24
                          103.67.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl
                          rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Apr 2024 07:44:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD8BE/serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162
        Validity
            Not Before: Mar 19 21:27:30 2024 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65fa0342-fa06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7e:f8:1e:8c:a7:be:dc:b6:ed:8b:55:3f:6c:
                    60:84:ef:15:52:b7:56:25:88:0c:78:07:bc:81:a6:
                    0b:05:7b:26:a7:e4:de:8d:1b:3c:25:91:ae:33:60:
                    47:25:e5:09:5d:60:07:76:70:82:6b:0a:2a:89:36:
                    92:82:15:9c:e4:ce:e1:70:8f:60:19:b0:c0:c0:95:
                    15:cb:5a:31:9e:9b:da:7b:ec:88:99:09:54:ce:78:
                    f1:20:3f:03:6b:30:8d:79:15:c7:9f:81:1d:e2:0e:
                    0a:f7:4a:9e:20:82:8c:bb:45:67:0e:4f:8b:a8:4c:
                    43:0b:a7:57:03:b4:eb:cf:eb:e4:1a:fd:58:8b:f3:
                    ed:18:6f:d8:27:66:7c:f6:0c:87:f1:e2:35:68:3f:
                    4c:e1:e6:42:2c:42:db:00:a5:3b:13:23:db:42:28:
                    c2:36:31:06:9d:7e:c3:66:e3:d2:bb:d6:59:88:e0:
                    56:71:91:e8:d4:73:71:b2:73:af:54:04:33:59:ef:
                    21:a9:ff:70:8e:29:6e:ab:1e:4a:c8:a5:73:76:7d:
                    f7:01:c7:fd:19:ea:ce:d6:c6:19:31:53:17:be:1c:
                    d7:a7:f6:52:b9:2f:69:87:06:2c:09:ce:4d:f6:3c:
                    e1:70:65:cf:10:0d:0e:f5:b4:fa:f6:ed:7e:d6:6f:
                    c7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A3:C3:25:0A:28:16:AB:B0:1D:C6:8A:AB:34:12:8A:1F:B7:3F:9F
            X509v3 Authority Key Identifier:
                keyid:E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/7D7F944CE63711EE9235F65AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:88:c9:74:78:50:69:c1:c2:63:7d:68:a4:32:42:15:c1:ec:
         ec:6f:d4:6e:85:38:c4:09:ed:69:5f:8f:5e:07:c4:78:f4:e8:
         5e:5b:7b:2d:3f:08:bb:70:79:55:93:cd:62:d1:25:fc:6a:da:
         af:f6:7f:7b:b4:bf:78:3b:b3:75:6d:6a:91:87:03:60:c9:54:
         d5:8e:52:2d:78:38:b9:e1:90:01:ce:a6:be:26:ad:c8:57:b5:
         54:55:9e:9e:cb:55:8f:ea:99:01:f6:46:ad:ef:51:cf:66:e7:
         78:1a:f9:1b:5b:07:3b:d5:60:d2:b9:cc:85:de:ed:35:49:e7:
         2d:a6:e7:be:67:e7:52:05:29:6a:c6:15:80:42:67:29:60:42:
         90:e1:24:5f:37:c5:ab:53:32:df:2d:e1:97:c6:27:d2:00:08:
         54:bf:8a:af:51:d0:36:5e:4d:09:92:82:a1:8a:75:48:3c:cc:
         17:1a:2a:dc:90:ca:9f:fe:3c:63:be:0a:f5:45:3b:34:1f:16:
         8d:28:52:85:7a:22:65:a0:39:4d:37:be:96:7f:be:9f:ec:0d:
         4e:c2:36:d1:05:de:ee:51:1a:2a:db:92:ae:b8:0a:01:de:2b:
         e5:4a:d7:51:05:79:cd:95:35:52:fb:ab:1e:32:5b:03:73:39:
         81:a8:47:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 09:40:38 2024 by rpki-client on console-fra.rpki-client.org