Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/A8A932CC894911EE8CA8D26EC4F9AE02.roa
File:                     A8A932CC894911EE8CA8D26EC4F9AE02.roa (raw, json)
Hash identifier:          2TLfJvxE/gpFV9gQ4u0MTMuVJgoGjSm8WYNCLQeCuTc=
Subject key identifier:   A8:1B:35:33:BA:6E:BA:96:AA:6D:0C:6C:B4:FA:77:5C:A1:CE:A8:32
Certificate issuer:       /CN=A912885B/serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9
Certificate serial:       C1
Authority key identifier: BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/A8A932CC894911EE8CA8D26EC4F9AE02.roa
Signing time:             Wed 22 Nov 2023 15:13:15 +0000
ROA not before:           Wed 22 Nov 2023 15:13:15 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     152099
IP address blocks:        103.29.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl
                          rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 06:32:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912885B/serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9
        Validity
            Not Before: Nov 22 15:13:15 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=655e1a8b-d979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9e:25:b1:ff:bd:cb:ba:25:a6:76:da:a2:23:
                    f0:84:54:8f:e5:b6:9f:79:b4:bf:e0:fc:2f:02:89:
                    dd:7f:9e:5e:d5:e5:43:41:bc:f9:dd:78:8e:54:c4:
                    48:88:08:36:58:8c:6c:4d:bd:1c:af:00:4c:80:4a:
                    ba:47:83:4a:01:83:42:ae:0f:6f:3c:4a:f2:d6:52:
                    d4:fb:3b:3d:d6:84:17:67:d0:87:71:19:8f:37:ba:
                    70:9d:d5:f5:96:53:19:dc:b6:f2:72:ef:54:da:16:
                    ae:1c:47:8f:23:14:51:ac:e2:7b:8a:5a:47:24:25:
                    5c:64:34:35:14:9c:8b:b3:00:3a:51:79:1d:23:c6:
                    f5:73:7f:75:ec:45:bb:f6:73:21:88:19:f6:81:af:
                    ec:3f:24:fb:80:b4:9d:ee:5e:e8:cb:fe:88:a8:8d:
                    a1:2f:79:4a:ae:53:7b:f2:87:b8:a5:47:c8:b0:f6:
                    64:d4:3b:89:c3:35:5c:60:77:2b:d3:ca:0c:0f:34:
                    9c:ab:e6:1a:3e:74:bc:a7:59:e2:1b:f7:8a:08:c8:
                    ac:2a:28:f3:99:66:56:e9:bf:55:1b:38:81:fa:63:
                    9a:1e:bb:74:40:f3:e2:c1:a2:54:b0:df:b8:a5:2a:
                    d5:0d:ea:33:24:33:29:e0:ec:76:d4:80:a2:b8:5b:
                    90:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1B:35:33:BA:6E:BA:96:AA:6D:0C:6C:B4:FA:77:5C:A1:CE:A8:32
            X509v3 Authority Key Identifier:
                keyid:BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/A8A932CC894911EE8CA8D26EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.29.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:6d:cd:a3:73:96:5e:0d:92:18:ad:c6:1a:09:0f:d7:2c:c6:
         c7:05:56:54:37:bd:4f:b1:eb:ed:be:41:97:7d:dd:d0:6c:3d:
         98:a6:7d:9d:f4:ea:96:14:7d:e7:d0:f5:bd:d6:f7:26:60:6a:
         0f:05:36:86:0c:64:1f:c3:4a:b8:28:98:25:be:d4:3b:80:35:
         ba:79:8a:f9:8e:a7:30:0b:62:83:db:66:8b:22:07:24:02:d1:
         e2:47:ac:b6:27:6a:74:cd:fd:24:15:17:86:4d:f9:82:79:c2:
         70:22:72:34:f4:9b:9c:3a:f4:84:76:ee:50:85:2e:80:85:7f:
         fc:15:4e:a9:6f:53:33:02:77:1b:b0:9c:13:4a:b0:85:09:08:
         28:0d:6b:cd:6e:49:56:7a:76:ce:81:a6:76:c2:bf:a4:92:88:
         6d:2c:5a:0e:33:db:6c:28:05:55:cf:ba:7d:6c:61:0b:ab:e5:
         10:20:78:28:e5:2d:29:fd:c5:33:c0:db:a0:b0:88:ac:d5:7e:
         b5:69:86:a9:58:52:ea:cb:52:0a:85:f0:cc:13:7c:d1:50:f4:
         d5:7e:ed:c4:f5:e4:26:1b:65:b5:60:fe:e4:cb:d1:32:b2:c2:
         ac:6c:42:67:86:c9:66:1c:d0:55:61:d4:33:57:bb:51:c4:6c:
         99:0b:93:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 08:15:55 2024 by rpki-client on console-ams.rpki-client.org