Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/5035F194413211EDAAFCC96EC4F9AE02.roa
File:                     5035F194413211EDAAFCC96EC4F9AE02.roa (raw, json)
Hash identifier:          y+f1klILC9YoygccEz1/DmfBbKOgqYXibSy3/dRFFE8=
Subject key identifier:   E9:5F:FA:84:2A:07:87:26:17:2E:CC:57:BC:D4:CE:B8:1F:BF:31:51
Certificate issuer:       /CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750
Certificate serial:       06A9
Authority key identifier: 7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/5035F194413211EDAAFCC96EC4F9AE02.roa
Signing time:             Thu 28 Sep 2023 21:59:31 +0000
ROA not before:           Thu 28 Sep 2023 21:59:31 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     137182
IP address blocks:        103.155.8.0/23 maxlen: 24
                          2406:60c0::/32 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl
                          rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 23:30:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1705 (0x6a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750
        Validity
            Not Before: Sep 28 21:59:31 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=6515f743-b213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a5:39:54:87:1e:f6:d1:8f:b6:4d:91:03:95:
                    55:71:6c:39:4a:9c:8e:2e:e6:73:f5:15:62:a7:3b:
                    4c:d1:f3:70:b2:1d:5d:0c:c1:27:8b:56:e2:38:1d:
                    48:5e:b4:7c:fc:be:fa:21:ef:d2:36:ec:08:13:ae:
                    5c:88:77:6d:e5:3e:72:5f:6e:a6:52:83:ee:bd:29:
                    a6:8a:5d:42:b0:38:2e:25:3a:e2:b9:fc:4e:4c:57:
                    44:19:f4:f3:ae:b4:82:74:0f:1e:91:e6:c6:52:4b:
                    0c:4b:e4:98:71:a7:bf:95:fd:5d:fb:f1:26:d6:13:
                    55:24:24:27:17:75:43:36:b8:0a:4f:6d:3a:93:d3:
                    40:4b:03:34:00:60:5e:9a:fa:ae:60:70:51:42:e5:
                    fb:34:12:db:91:5b:93:81:49:b9:99:c5:c5:7f:95:
                    b2:a6:c6:0e:f5:31:9b:27:96:0e:a4:75:1a:de:d3:
                    34:85:48:bd:ca:14:3d:b7:a0:da:79:cb:3f:a4:b1:
                    4b:1d:e9:56:5f:4e:66:fb:d4:b3:9a:b2:1d:53:b0:
                    f2:4f:17:26:ac:c6:90:da:f8:dc:d0:85:55:b5:53:
                    d8:16:eb:af:77:6b:91:c0:ae:cd:6a:02:0d:ef:90:
                    02:25:aa:f3:9b:4e:a5:d8:af:38:58:41:a0:96:92:
                    e2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5F:FA:84:2A:07:87:26:17:2E:CC:57:BC:D4:CE:B8:1F:BF:31:51
            X509v3 Authority Key Identifier:
                keyid:7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/5035F194413211EDAAFCC96EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.8.0/23
                IPv6:
                  2406:60c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:a9:fe:9f:1c:49:eb:4a:43:15:37:fc:6d:7b:56:3d:21:60:
         6f:be:d2:8f:34:94:c4:20:36:85:5c:74:4b:a6:4c:3d:bf:8f:
         8a:bc:0b:22:34:4c:b0:d7:42:43:13:81:d8:83:e7:d7:ee:1b:
         e9:42:b3:05:13:a6:4b:ec:f7:c6:8a:ed:13:cd:9b:1e:d2:8f:
         2b:29:9f:54:59:7f:8f:c4:bf:3e:e4:60:70:d4:fe:5f:b7:4b:
         5d:70:85:dc:9b:7b:aa:e0:f3:2c:79:36:db:ff:a1:f1:bb:ab:
         1b:f6:a4:26:f7:88:25:e7:2a:c7:29:92:b2:35:0e:bc:b0:9d:
         d2:cf:f4:2f:7d:5e:0a:94:d8:73:94:46:1b:35:44:3c:2d:34:
         c6:c9:cc:cd:c6:92:8b:1e:06:30:31:52:3d:06:c3:49:a3:1b:
         eb:4d:fd:00:16:22:92:7b:bc:68:77:5d:ca:53:30:ad:bd:43:
         80:85:8e:31:f4:22:ea:4b:e8:78:f9:33:2f:0f:7b:ba:01:a3:
         37:d4:98:22:bd:23:f2:c8:4d:88:75:8a:b9:68:cc:73:32:7b:
         58:77:8e:03:73:ec:9d:bf:3f:04:78:bc:40:de:e8:fa:78:9e:
         58:15:fc:27:6a:79:4c:73:a2:3f:c9:a1:5f:ce:27:51:96:35:
         4b:28:3f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:32:58 2024 by rpki-client on console-fra.rpki-client.org