Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/D467E7363D9211EDBF4D9F7DC4F9AE02.roa
File:                     D467E7363D9211EDBF4D9F7DC4F9AE02.roa (raw, json)
Hash identifier:          Q1A//xJAenDCX+OfnpV5599B7Fna6P7+W/m6bu+16I0=
Subject key identifier:   75:61:5D:1D:2C:51:CE:42:0A:8D:AE:62:76:45:63:65:68:85:4B:6F
Certificate issuer:       /CN=A91FDFB7/serialNumber=EA51CE20A59E42B8C71D26AA6B886690CD152984
Certificate serial:       0648
Authority key identifier: EA:51:CE:20:A5:9E:42:B8:C7:1D:26:AA:6B:88:66:90:CD:15:29:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/D467E7363D9211EDBF4D9F7DC4F9AE02.roa
Signing time:             Fri 04 Aug 2023 22:39:59 +0000
ROA not before:           Fri 04 Aug 2023 22:39:59 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     139597
IP address blocks:        103.72.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 21:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1608 (0x648)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDFB7/serialNumber=EA51CE20A59E42B8C71D26AA6B886690CD152984
        Validity
            Not Before: Aug  4 22:39:59 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64cd7e3f-8d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:97:e3:77:7f:dc:21:10:72:1d:33:ac:af:78:
                    3a:9e:2e:9b:48:2b:ed:d0:93:0c:b1:94:ab:50:4b:
                    0f:0e:fa:44:92:44:9a:93:14:5d:c2:07:ed:d4:df:
                    2d:d4:93:9b:75:97:94:bf:2b:ba:e3:c9:89:79:49:
                    e9:c6:a9:12:d2:11:66:ef:87:67:12:16:dc:23:ff:
                    b8:39:16:1a:7e:a8:15:2f:b1:d1:d1:f3:6f:ff:8c:
                    e4:23:a0:d7:07:f3:f6:aa:8a:8d:29:f6:93:1e:df:
                    91:79:68:07:ee:cc:95:2c:f5:76:2d:93:ff:c2:33:
                    ab:70:96:1d:95:73:37:97:78:cc:51:d1:c8:13:83:
                    dd:cd:1d:f5:07:99:5d:a4:fd:3f:f5:e7:03:a7:2c:
                    ef:de:cb:1c:9f:df:41:c7:37:29:a7:25:0b:50:23:
                    99:17:cc:5e:0c:8b:05:71:da:1f:69:26:c2:e2:0d:
                    bf:13:78:cd:84:8d:2a:4a:c5:26:a5:7c:ce:a8:ce:
                    c8:d1:5b:09:e7:91:a1:b0:06:2b:77:04:85:7e:71:
                    63:bb:40:28:d1:19:91:77:6a:bf:0b:14:4d:ab:10:
                    41:92:fe:ef:06:72:4d:d5:32:26:c6:eb:37:5d:4c:
                    d7:26:1e:2d:a4:4a:8a:17:33:d9:92:24:1a:62:15:
                    b2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:61:5D:1D:2C:51:CE:42:0A:8D:AE:62:76:45:63:65:68:85:4B:6F
            X509v3 Authority Key Identifier:
                keyid:EA:51:CE:20:A5:9E:42:B8:C7:1D:26:AA:6B:88:66:90:CD:15:29:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/D467E7363D9211EDBF4D9F7DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:c3:57:dd:81:84:55:a0:ef:6e:14:48:93:a3:df:13:81:e5:
         ed:ad:33:30:ea:9e:ee:c2:b2:57:ca:38:a3:45:e3:a9:85:57:
         9d:c7:50:0a:b4:d3:dc:44:e7:d1:29:c9:29:0b:7d:4a:eb:4a:
         76:46:47:87:61:e9:43:01:fa:dc:9d:e0:99:71:af:d3:96:87:
         3b:7d:cb:e0:c7:2d:43:e9:88:04:e7:50:cb:88:66:78:7e:ec:
         10:f9:5c:77:af:6c:e2:f4:08:03:f8:ae:b7:96:2c:56:cf:60:
         28:d2:00:86:93:80:cc:12:b0:07:c0:eb:21:51:08:20:b3:b7:
         29:e4:29:68:1d:c0:3f:47:5e:f2:01:5d:4b:43:7f:ca:f7:cf:
         cf:4e:6c:0c:db:aa:c0:c3:27:af:cb:8b:9e:96:97:4c:df:d4:
         ea:2d:95:3a:13:88:92:bd:44:a6:08:f2:04:1e:29:55:90:a9:
         01:bc:65:42:51:94:84:ef:69:0f:ab:8d:5c:f1:60:4b:21:cd:
         d1:f7:f2:d5:09:d6:fc:a0:6a:34:92:73:02:f1:e4:45:70:2d:
         66:42:10:79:15:de:49:09:97:8a:70:9b:75:05:3e:61:5b:8a:
         06:b3:87:4a:2a:bf:b5:71:ef:f5:fa:1b:bf:5a:60:9e:9d:e4:
         c1:3b:8e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:14:48 2024 by rpki-client on console-ams.rpki-client.org