Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/FC589960568411EDAE93DA7FC4F9AE02.roa
File:                     FC589960568411EDAE93DA7FC4F9AE02.roa (raw, json)
Hash identifier:          CnZFdnUYkRr1r1D6iUYUF7dcdA1ihaNtl+PTNkD87JI=
Subject key identifier:   7A:3C:43:0A:C4:E1:AB:EB:7B:1F:A7:A1:C2:36:87:80:F6:82:B1:65
Certificate issuer:       /CN=A914ECD7/serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7
Certificate serial:       B5
Authority key identifier: 8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/FC589960568411EDAE93DA7FC4F9AE02.roa
Signing time:             Sat 07 Oct 2023 04:04:40 +0000
ROA not before:           Sat 07 Oct 2023 04:04:40 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     135574
IP address blocks:        103.66.170.0/24 maxlen: 30

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl
                          rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 04:58:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914ECD7/serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7
        Validity
            Not Before: Oct  7 04:04:40 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6520d8d8-77d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:28:da:a6:4b:30:10:04:9b:85:56:d4:80:69:
                    35:40:ed:10:c1:c0:9f:d3:7f:ed:25:a3:eb:ee:a8:
                    16:15:03:2d:58:1a:5f:bf:90:54:bc:4d:c2:b2:54:
                    2e:40:ef:21:4d:07:c5:b5:b5:d5:a7:6f:55:65:07:
                    f0:46:14:73:39:7e:f2:7e:63:b6:97:92:3e:2d:be:
                    ef:ce:cd:c0:7f:48:78:b3:4b:53:ed:a0:86:fc:ef:
                    b8:03:3a:a5:26:12:83:b4:fe:1e:cb:f0:bf:bf:26:
                    6c:08:de:9a:c1:51:a8:87:28:8e:06:16:1b:f5:74:
                    0b:4c:e9:cf:1a:57:4f:b1:f4:09:c7:19:4b:73:08:
                    ce:52:b5:2f:ab:59:81:a5:d1:be:9d:3f:84:61:29:
                    65:f5:66:60:b6:59:13:96:3c:6c:eb:f7:23:be:20:
                    19:de:32:c3:c1:ed:7b:a9:94:b1:42:8c:b7:ea:bd:
                    6a:65:76:3f:94:a7:a8:b9:72:5e:3b:a7:b7:db:19:
                    3a:df:da:cc:de:21:07:70:61:df:ee:3e:87:b5:4f:
                    82:0b:5f:9e:d9:35:db:71:96:39:ad:22:d3:7e:cf:
                    81:e1:e7:48:67:ce:95:a4:05:3d:c6:64:92:3f:51:
                    ee:94:af:51:88:ff:83:7b:97:7a:8e:53:ab:cc:3c:
                    2f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3C:43:0A:C4:E1:AB:EB:7B:1F:A7:A1:C2:36:87:80:F6:82:B1:65
            X509v3 Authority Key Identifier:
                keyid:8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/FC589960568411EDAE93DA7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:d0:85:52:34:de:67:32:88:25:0b:96:51:87:b0:27:87:da:
         06:c8:d5:e3:78:aa:6d:db:ca:3b:8a:77:77:38:58:a8:43:c6:
         be:fa:91:f3:8a:0e:c5:c9:45:24:45:22:37:da:ff:a4:78:0b:
         a0:4e:a8:81:85:93:4f:82:3f:4a:07:1b:62:2c:44:bb:c9:f0:
         96:b0:f6:94:02:1c:4d:41:f2:0e:1b:45:ea:87:ad:75:f1:d4:
         fe:79:62:f8:b3:41:9c:31:db:3f:1f:e8:90:0b:af:aa:42:52:
         ba:ed:4d:fd:27:8d:db:5b:5e:2a:b9:5a:85:c5:7c:82:f2:ff:
         4d:88:3e:73:cd:b3:80:39:67:9e:dc:c9:0a:53:70:05:f3:29:
         c3:b8:5d:f3:16:4b:d2:34:b0:09:e7:83:4c:4d:ed:15:d6:55:
         ab:09:c4:b3:da:46:a2:38:84:bc:ff:04:15:06:97:db:73:e5:
         ed:7b:90:76:be:b4:c5:68:7d:05:d8:0e:0a:c6:f1:e0:9c:8e:
         a5:a5:85:85:f8:ab:b8:ee:cd:ac:7f:86:86:6f:32:96:06:ad:
         d1:b3:fd:e3:82:d2:05:b1:fb:b9:67:f1:1c:8c:81:90:14:e1:
         41:98:3b:a0:dc:26:c5:22:5d:70:47:72:50:ef:7d:5d:ad:4b:
         89:9e:f5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 08:01:40 2024 by rpki-client on console-ams.rpki-client.org