Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/73F5DB88BC9C11EB9AC8E073C4F9AE02.roa
File:                     73F5DB88BC9C11EB9AC8E073C4F9AE02.roa (raw, json)
Hash identifier:          o2zEoY22pk3whF08IqjADBlvA+FXNXH03ZTCdev15kc=
Subject key identifier:   77:89:15:3D:CF:13:8C:D7:6A:C3:F3:40:C3:84:31:54:4B:9A:04:60
Certificate issuer:       /CN=A912EFA6/serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E
Certificate serial:       0467
Authority key identifier: 39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/73F5DB88BC9C11EB9AC8E073C4F9AE02.roa
Signing time:             Wed 21 Jun 2023 01:08:50 +0000
ROA not before:           Wed 21 Jun 2023 01:08:50 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     132220
IP address blocks:        103.219.148.0/22 maxlen: 22
                          103.219.148.0/24 maxlen: 24
                          103.219.149.0/24 maxlen: 24
                          103.219.150.0/24 maxlen: 24
                          103.219.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl
                          rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 01:40:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1127 (0x467)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912EFA6/serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E
        Validity
            Not Before: Jun 21 01:08:50 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64924da2-0ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cf:87:78:10:7c:84:6a:3b:ab:3e:02:e4:c7:
                    57:52:40:31:19:d8:ec:4a:a3:39:ea:17:dc:bb:6c:
                    e1:18:b8:52:46:b6:85:da:cd:29:04:b2:39:de:03:
                    22:30:6d:8a:6d:7d:59:e4:dc:d5:4d:e5:a9:41:29:
                    3c:56:14:97:f1:11:9d:a6:9c:b9:91:80:42:35:27:
                    d4:d3:07:d5:0a:69:10:c5:a1:ba:09:26:f3:e8:f0:
                    b0:6b:33:cd:22:60:39:d2:31:8c:dc:d8:84:2f:04:
                    89:2f:54:87:f8:2c:b2:4d:6d:e7:2b:e5:79:7b:2a:
                    c7:9d:02:83:ba:ac:36:a1:58:31:6a:19:53:5a:46:
                    4a:cc:d3:bb:bc:d4:32:8e:26:2c:4c:04:ec:d2:f8:
                    63:dc:6e:4a:0a:4c:37:7c:80:84:ae:cc:82:d8:3f:
                    b5:85:8f:ee:ac:c5:66:d3:14:68:68:30:da:b0:11:
                    51:63:36:5f:fa:f0:58:87:29:71:b3:29:32:73:26:
                    e8:e6:91:f0:85:52:a3:4f:e9:a0:0e:e8:4b:13:b6:
                    82:05:03:ba:c9:73:8a:9e:85:5e:06:68:73:14:e9:
                    13:2f:7d:fa:f8:77:47:df:30:ce:44:3b:24:cb:a3:
                    2d:c3:a4:9b:df:6a:0f:19:00:c8:3c:9a:b0:3d:ec:
                    7e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:89:15:3D:CF:13:8C:D7:6A:C3:F3:40:C3:84:31:54:4B:9A:04:60
            X509v3 Authority Key Identifier:
                keyid:39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/73F5DB88BC9C11EB9AC8E073C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:81:88:c8:bb:f8:67:84:d2:db:0b:dc:c2:1c:4e:7c:df:f2:
         61:87:7c:72:79:39:f5:5a:3d:df:3c:2d:69:49:ce:53:db:47:
         61:37:8f:33:7f:25:fc:4a:7d:33:22:d7:ac:46:54:f8:38:66:
         3f:af:d0:a6:1b:83:ce:a6:a6:16:cb:3a:9d:67:2a:ca:4d:73:
         85:d1:c8:3a:53:89:e8:dc:25:b1:91:58:9b:39:1a:e3:8a:a5:
         d1:2d:b5:d7:fa:4d:73:06:1c:d7:96:94:e5:01:6e:de:b7:dc:
         26:95:6d:8d:6c:2a:2a:c4:61:6c:13:c6:40:27:3b:72:6a:0b:
         fb:7c:de:eb:3a:c0:56:46:df:be:8c:f0:9c:36:c1:78:ad:09:
         55:1e:4a:48:4d:38:d0:27:0a:77:e2:6d:e9:77:56:ab:35:c0:
         48:8f:e0:8a:8e:f3:9e:9c:cf:eb:b8:66:41:f8:0d:3f:15:52:
         f2:f2:3c:05:a5:a3:d1:fb:4b:8c:50:da:bf:03:91:c9:f5:2a:
         74:69:ba:ae:f2:ef:ff:e2:43:61:c3:a2:6b:27:51:f3:f0:6e:
         f0:2d:05:2f:ea:a9:7f:63:c4:28:de:65:eb:9a:13:bb:b7:39:
         20:1d:4f:b3:b4:2c:6a:bd:8a:ca:39:dd:36:39:60:db:a0:b7:
         38:f7:08:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 03:18:09 2024 by rpki-client on console-ams.rpki-client.org