Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/8811415A689011EEA00A095DC4F9AE02.roa
File:                     8811415A689011EEA00A095DC4F9AE02.roa (raw, json)
Hash identifier:          48IxGJOKYf3ZnCDbFIJG9Nq2PPMVrHXpX9958CHjNPk=
Subject key identifier:   32:39:11:EE:3B:E4:9A:5B:A8:74:FF:85:76:FE:FF:BB:12:0C:F3:18
Certificate issuer:       /CN=A914FA25/serialNumber=00389A8657AE098804472F8E68D705E2EFDBD7C0
Certificate serial:       77
Authority key identifier: 00:38:9A:86:57:AE:09:88:04:47:2F:8E:68:D7:05:E2:EF:DB:D7:C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADiahleuCYgERy-OaNcF4u_b18A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/8811415A689011EEA00A095DC4F9AE02.roa
Signing time:             Tue 30 Apr 2024 20:28:57 +0000
ROA not before:           Tue 30 Apr 2024 20:28:57 +0000
ROA not after:            Thu 29 Aug 2024 00:00:00 +0000
asID:                     147303
IP address blocks:        103.110.162.0/24 maxlen: 24
                          103.110.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.crl
                          rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADiahleuCYgERy-OaNcF4u_b18A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Jun 2024 20:12:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FA25/serialNumber=00389A8657AE098804472F8E68D705E2EFDBD7C0
        Validity
            Not Before: Apr 30 20:28:57 2024 GMT
            Not After : Aug 29 00:00:00 2024 GMT
        Subject: CN=66315488-8c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:60:0f:5c:3d:77:5f:60:b2:8b:01:7c:05:3f:
                    8f:d5:f4:77:cc:23:ac:59:10:17:4c:4c:72:77:cb:
                    29:2f:0c:ec:5e:fe:62:2a:92:bc:47:e9:23:e9:92:
                    f9:2e:11:bc:e5:2b:3e:29:b1:35:38:62:c4:e4:8b:
                    7c:6d:e1:ed:18:a0:55:cb:26:b1:dd:8d:55:ca:2e:
                    a2:29:0a:e0:78:32:c5:37:3c:a8:41:f9:b4:9c:82:
                    bb:6a:bc:ed:55:21:ab:8c:d3:5d:e8:a2:34:98:bc:
                    c4:0d:21:f5:fe:f9:93:c5:50:9e:58:cf:0d:5e:26:
                    7f:ba:27:8f:7b:d4:75:11:96:ee:98:f3:d1:f6:7f:
                    24:37:57:2d:fb:34:e6:27:fd:b1:59:ef:0f:70:18:
                    e6:77:b5:de:14:70:c8:56:f7:69:b1:79:55:16:25:
                    70:1f:35:4e:3a:af:3a:8a:da:58:31:c3:98:82:ed:
                    1a:61:79:b1:5b:01:bb:94:8e:91:2f:f7:06:62:72:
                    8d:19:45:66:c2:87:40:cb:f7:34:4a:38:3b:cc:2b:
                    b7:cf:9c:da:4e:7a:79:5d:4a:9d:a8:1a:b8:06:66:
                    4e:f2:f4:24:75:3f:e9:e3:76:e4:7f:b5:e8:4a:6b:
                    13:fd:17:d1:34:1b:20:2f:c9:e9:f2:51:b3:19:54:
                    3d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:39:11:EE:3B:E4:9A:5B:A8:74:FF:85:76:FE:FF:BB:12:0C:F3:18
            X509v3 Authority Key Identifier:
                keyid:00:38:9A:86:57:AE:09:88:04:47:2F:8E:68:D7:05:E2:EF:DB:D7:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADiahleuCYgERy-OaNcF4u_b18A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/8811415A689011EEA00A095DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:45:a3:fc:4d:78:c5:91:16:8e:99:a2:5f:47:35:3e:4c:82:
         23:d8:3e:49:13:8b:6f:46:3a:c8:41:68:1b:0a:74:bd:97:49:
         b6:6e:86:82:d2:36:72:10:c2:22:2e:7d:9f:fb:c9:41:1f:70:
         de:a4:cd:1d:ef:30:62:3c:cb:78:75:eb:4e:09:f2:47:9b:93:
         97:62:9f:59:35:a6:8f:d6:4d:85:40:00:5f:64:67:5d:b2:50:
         1b:b7:b9:c5:ce:61:a4:81:6b:6f:c2:7b:07:6e:6a:4c:96:10:
         af:15:48:c5:71:a5:ed:93:05:e1:d3:bb:55:e8:4a:0c:53:42:
         a5:91:fb:a3:62:c1:6f:2a:3f:e4:43:b7:f3:e1:1c:12:55:4e:
         85:e3:64:5c:57:6a:4c:69:63:75:da:76:d7:27:9a:f5:92:d6:
         76:06:e9:28:01:cb:72:89:7a:5c:c8:78:c1:1f:e8:a6:c7:06:
         17:83:b4:97:5a:ee:5e:46:11:f8:ba:29:39:9f:ef:17:26:5a:
         85:83:74:9b:0a:6c:a6:b0:07:df:c0:57:14:11:91:3b:88:fb:
         af:3f:1b:69:24:f4:4b:c9:07:04:06:25:24:42:28:a2:c2:31:
         27:fb:67:19:50:8d:71:f8:bf:1b:6a:b6:5c:f3:bb:bf:73:63:
         61:b5:c4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 21:14:20 2024 by rpki-client on console-ams.rpki-client.org