Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911438E/EF612860334F11EDBCD0C93BC4F9AE02/D7CD0314335311EDA051FC40C4F9AE02.roa
File:                     D7CD0314335311EDA051FC40C4F9AE02.roa (raw, json)
Hash identifier:          odQDSCld0ecbtAfBEn5guayGkZcUDEf4fZpSVeZ+Grw=
Subject key identifier:   1B:F2:D5:1B:2A:6D:FD:E1:25:18:3D:F2:A0:E1:F3:ED:F7:E8:3E:6D
Certificate issuer:       /CN=A911438E/serialNumber=F22F48801330B3717725D0120D2FB1BDDCBA6FAA
Certificate serial:       CE
Authority key identifier: F2:2F:48:80:13:30:B3:71:77:25:D0:12:0D:2F:B1:BD:DC:BA:6F:AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8i9IgBMws3F3JdASDS-xvdy6b6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911438E/EF612860334F11EDBCD0C93BC4F9AE02/D7CD0314335311EDA051FC40C4F9AE02.roa
Signing time:             Fri 25 Aug 2023 03:43:57 +0000
ROA not before:           Fri 25 Aug 2023 03:43:57 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     58657
IP address blocks:        103.12.166.0/24 maxlen: 24
                          103.31.108.0/24 maxlen: 24
                          103.234.192.0/23 maxlen: 24
                          150.129.16.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911438E/EF612860334F11EDBCD0C93BC4F9AE02/8i9IgBMws3F3JdASDS-xvdy6b6o.crl
                          rsync://rpki.apnic.net/member_repository/A911438E/EF612860334F11EDBCD0C93BC4F9AE02/8i9IgBMws3F3JdASDS-xvdy6b6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8i9IgBMws3F3JdASDS-xvdy6b6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911438E/serialNumber=F22F48801330B3717725D0120D2FB1BDDCBA6FAA
        Validity
            Not Before: Aug 25 03:43:57 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64e8237d-b25b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7e:ea:e4:44:37:2c:59:49:9f:9d:2f:77:de:
                    66:08:ef:d4:60:82:fb:05:45:4c:cf:ca:09:34:ca:
                    d4:03:fa:b6:a7:06:df:90:a9:2a:e5:2d:83:c1:07:
                    c2:83:bd:65:c1:de:6e:73:ab:80:a9:73:04:61:17:
                    1a:f5:3e:77:b3:d1:82:dc:69:a1:d7:d7:51:91:ca:
                    89:f5:73:14:0d:90:e4:d9:c6:1c:64:b3:6e:d1:e6:
                    2e:ca:96:7d:b1:b5:a5:d9:eb:71:11:cb:cb:60:c3:
                    66:eb:d3:57:b6:37:54:cd:bd:33:58:9e:55:54:42:
                    2b:ad:98:4f:27:69:bb:31:36:2a:ad:aa:68:35:65:
                    30:f9:73:f5:48:2e:50:87:e9:e1:33:8e:24:b3:5b:
                    e1:2e:4f:b4:a2:40:13:75:ba:f8:67:fa:0c:aa:fe:
                    59:cf:72:1c:8e:6f:e1:69:f9:46:ac:25:a3:f2:38:
                    ee:ff:63:f7:03:02:6c:e1:2c:9f:50:e1:64:e0:5b:
                    2a:38:2e:07:df:4d:e7:9c:4b:87:ab:2e:88:c3:47:
                    a9:d6:c8:4b:1c:21:43:ef:14:84:b6:43:f6:fe:57:
                    99:c0:20:0c:ba:b3:bf:24:e2:aa:25:2c:da:ad:e7:
                    9a:fc:e3:ac:d1:ab:e4:ab:31:31:29:4a:6a:c1:8b:
                    87:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F2:D5:1B:2A:6D:FD:E1:25:18:3D:F2:A0:E1:F3:ED:F7:E8:3E:6D
            X509v3 Authority Key Identifier:
                keyid:F2:2F:48:80:13:30:B3:71:77:25:D0:12:0D:2F:B1:BD:DC:BA:6F:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911438E/EF612860334F11EDBCD0C93BC4F9AE02/8i9IgBMws3F3JdASDS-xvdy6b6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8i9IgBMws3F3JdASDS-xvdy6b6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911438E/EF612860334F11EDBCD0C93BC4F9AE02/D7CD0314335311EDA051FC40C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.166.0/24
                  103.31.108.0/24
                  103.234.192.0/23
                  150.129.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:57:c5:a1:3c:b3:57:d4:89:fe:76:ae:ec:63:e0:13:54:52:
         87:e1:6c:64:91:2d:3a:c0:65:7d:81:61:98:3c:74:c5:2f:7d:
         26:f0:f4:1c:9b:9c:59:d9:bb:2b:bb:43:4a:1b:79:84:cd:05:
         7f:5e:13:26:d0:75:d8:45:4f:b0:cf:98:fc:1f:c5:07:da:85:
         59:69:35:4e:34:4f:9d:0a:f9:a6:cc:9c:c8:a1:ad:37:f8:2d:
         12:24:ac:a3:78:af:57:66:d0:38:04:ba:f1:d4:68:c2:77:3e:
         5e:e1:77:ab:98:a0:c0:7a:a8:e1:84:76:a5:fe:fd:b3:0b:cb:
         eb:5d:05:ad:6b:ac:f7:e7:ec:17:a0:12:81:2f:25:b5:50:5b:
         8e:d5:8b:fc:96:40:40:0f:d5:a6:7f:83:e4:78:c8:24:d1:c8:
         0d:a8:1f:87:84:9e:bb:d0:65:1e:fd:68:b8:19:33:e1:93:83:
         f0:f7:61:b3:a1:aa:78:65:a6:f4:8b:60:ed:d1:4c:84:e9:a1:
         56:4c:a6:be:76:79:89:89:ff:1b:f6:94:03:b0:bd:19:6c:c2:
         1d:6f:15:c4:2a:23:16:5e:59:b5:eb:31:a1:a5:e0:0d:34:7f:
         90:ee:c6:bb:21:82:96:72:55:c3:c6:cc:bf:84:3c:70:3d:a0:
         2c:38:35:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 06:58:25 2024 by rpki-client on console-fra.rpki-client.org