Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/14B2A85C3DA611EAAD093F5EC4F9AE02.roa
File:                     14B2A85C3DA611EAAD093F5EC4F9AE02.roa (raw, json)
Hash identifier:          YBDDFTyuQNBpFqBokEWPqRZhpMARMTl/5hq7JGaNUzU=
Subject key identifier:   7B:44:98:0D:9E:60:91:C1:1F:80:D5:46:12:9E:87:1F:61:AE:36:64
Certificate issuer:       /CN=A911D340/serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0
Certificate serial:       0A76
Authority key identifier: 2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/14B2A85C3DA611EAAD093F5EC4F9AE02.roa
Signing time:             Fri 31 May 2024 21:16:18 +0000
ROA not before:           Fri 31 May 2024 21:16:18 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     135038
IP address blocks:        103.92.84.0/23 maxlen: 23
                          103.92.84.0/24 maxlen: 24
                          103.92.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl
                          rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 21:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2678 (0xa76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D340/serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0
        Validity
            Not Before: May 31 21:16:18 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=665a3e22-9f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c8:da:5d:b6:e7:2a:93:97:7b:86:34:9d:c0:
                    7c:b9:dc:a2:09:1e:16:ed:a3:f3:ca:a3:ec:02:c4:
                    29:8e:27:76:bb:30:07:e0:60:96:ab:8a:6a:e8:a6:
                    93:7d:df:7d:31:fd:41:b5:19:e6:b0:73:ff:f5:4e:
                    ee:0e:8c:94:31:b9:dc:3a:78:c1:c3:76:72:97:cd:
                    8f:80:54:8a:68:26:65:66:25:2f:3f:50:44:7d:f2:
                    a8:1b:48:0a:e8:79:09:35:27:cc:58:c0:d7:ae:d6:
                    3b:29:6f:8b:6a:34:0f:78:50:c3:1a:5a:c8:6f:af:
                    d2:51:5e:f3:27:34:ee:2d:75:8d:e7:1a:95:84:78:
                    dc:e0:57:80:cd:b1:49:8d:a0:aa:33:93:cc:38:4b:
                    56:e8:68:53:45:c5:af:09:71:61:10:d4:5f:2d:35:
                    79:aa:69:07:8f:b2:2b:7f:51:ea:97:07:88:a9:21:
                    9c:4f:d5:fe:09:81:ba:12:f4:7e:3b:ae:35:ca:d4:
                    61:86:4d:a0:6d:9e:c6:0d:84:43:11:4a:41:8f:e5:
                    dd:09:3f:60:45:bf:3f:d1:43:1b:8b:d4:af:ce:0c:
                    e9:be:a7:5b:d0:d7:f5:5c:4a:f6:4f:c9:2a:01:6c:
                    23:b9:8e:43:56:aa:d9:d5:24:43:12:b3:64:bf:88:
                    ea:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:44:98:0D:9E:60:91:C1:1F:80:D5:46:12:9E:87:1F:61:AE:36:64
            X509v3 Authority Key Identifier:
                keyid:2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/14B2A85C3DA611EAAD093F5EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:5d:ae:e5:60:36:de:6e:e8:a9:62:df:4b:5f:ee:9c:35:19:
         55:97:ea:49:7d:23:25:5a:fa:55:53:3b:fb:47:43:7e:c1:68:
         8a:5c:1f:3f:73:8b:d6:7b:55:a9:44:05:4e:23:fb:b8:8d:bf:
         84:cd:b8:0c:f7:c2:c4:be:ed:11:bc:3d:43:d4:b6:f4:a5:4a:
         b7:da:78:81:50:78:06:31:80:7e:c1:bf:76:d7:d1:94:aa:67:
         d8:56:48:02:36:4c:cc:cb:8d:a7:84:b2:0a:ae:df:92:10:06:
         9c:0e:95:40:d2:74:4f:3d:73:d2:e9:b6:9e:9b:f3:cd:6c:8c:
         bb:10:f0:bf:c9:47:9b:78:07:c1:67:e6:7c:58:7d:10:40:a3:
         62:54:50:dc:0f:48:64:56:d2:e1:84:15:cd:b4:cd:2e:be:8b:
         b2:1e:39:94:f6:c6:5e:f8:9c:f4:55:7a:fc:ad:23:f9:08:8d:
         9c:01:b1:3d:c9:71:7d:13:dd:0d:74:29:99:99:02:00:d3:49:
         db:47:e5:e0:77:42:2d:df:f6:03:01:50:6c:f7:fc:c3:44:1c:
         f7:f9:37:e3:c9:a6:c3:9d:34:95:10:10:97:14:fa:58:7c:52:
         35:e5:d1:86:78:d9:50:59:70:d4:91:6b:ae:18:c9:44:a2:59:
         47:d9:ca:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 22:13:02 2024 by rpki-client on console-fra.rpki-client.org