Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/6063C75CB6E411EE94471D14C4F9AE02.roa
File:                     6063C75CB6E411EE94471D14C4F9AE02.roa (raw, json)
Hash identifier:          65PqIv1m4E+UMfsdWXw9cpy72PEL3+ztivu5BevV0do=
Subject key identifier:   D2:7A:31:96:5C:0C:A6:B6:94:A1:15:38:16:44:4D:6A:09:AC:8B:4E
Certificate issuer:       /CN=A9157724/serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA
Certificate serial:       1D
Authority key identifier: 05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/6063C75CB6E411EE94471D14C4F9AE02.roa
Signing time:             Fri 19 Jan 2024 16:04:08 +0000
ROA not before:           Fri 19 Jan 2024 16:04:08 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     151406
IP address blocks:        103.224.93.0/24 maxlen: 24
                          115.187.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl
                          rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 07:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157724/serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA
        Validity
            Not Before: Jan 19 16:04:08 2024 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=65aa9d78-61e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c2:d4:d2:ec:92:8c:97:61:0f:08:5e:0e:b2:
                    0d:f2:32:7b:3c:11:10:39:05:b1:27:5b:87:a2:13:
                    a1:45:2a:c5:9b:d6:53:bd:bf:38:8d:e6:e8:fa:66:
                    76:5e:1e:0a:7b:fd:c7:27:85:4a:6b:f9:f0:ba:3b:
                    6a:0e:d8:83:ab:21:92:78:3e:9f:58:7c:dd:0c:4d:
                    1e:ee:0a:07:0b:8e:44:76:13:88:29:77:62:1d:5d:
                    7f:68:24:4a:ca:97:83:44:ea:6d:d4:5a:ce:6a:a0:
                    40:33:42:f8:bf:ca:a1:72:0a:14:7b:e4:06:64:b3:
                    27:5a:72:4a:15:ec:f7:a0:7c:0f:c3:2c:53:df:df:
                    00:2d:c0:be:f0:a4:39:ec:d0:b6:bc:53:7b:c5:6a:
                    38:5f:df:7b:be:bc:6a:06:c1:36:04:ca:58:94:48:
                    29:7e:ec:12:2c:ec:d0:8b:d3:63:b7:74:51:63:31:
                    0f:c9:73:23:38:cc:d4:82:d2:d0:a9:4f:88:c4:91:
                    d3:37:7d:8c:14:4b:b8:c8:c9:32:48:f3:bb:76:4d:
                    72:65:db:85:e8:58:ad:f0:c3:55:e2:96:48:70:6a:
                    60:08:a6:a2:6c:ab:5e:aa:15:a4:97:c7:56:68:69:
                    0e:a7:6f:58:47:2a:24:cd:3a:c5:b8:8d:e8:ee:3c:
                    41:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:7A:31:96:5C:0C:A6:B6:94:A1:15:38:16:44:4D:6A:09:AC:8B:4E
            X509v3 Authority Key Identifier:
                keyid:05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/6063C75CB6E411EE94471D14C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.93.0/24
                  115.187.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:58:7f:16:72:bb:5c:3c:ae:ff:4f:59:c4:64:cc:42:33:a2:
         9d:19:d8:9b:27:1f:28:5c:23:df:89:16:e3:1e:1e:ed:f4:5d:
         22:9a:37:f3:5d:bf:3b:9b:01:32:86:0e:57:f8:21:79:a6:f5:
         15:0c:97:55:64:eb:af:ec:17:09:2f:53:7e:48:6e:41:4f:f6:
         35:59:5e:83:22:ec:7b:e2:dd:49:1a:1b:ea:1a:41:45:db:ce:
         07:d3:65:5d:76:d4:88:1f:0c:69:72:66:24:a8:7b:5d:20:af:
         bb:fb:5b:bd:06:c2:49:1d:fa:1a:60:d1:2f:bb:3f:40:97:f3:
         fa:ab:10:0b:db:41:a3:67:c8:9e:55:a3:6e:10:71:82:e0:b7:
         b6:cd:f8:31:c8:13:e3:24:70:05:04:74:f5:66:57:b8:72:e1:
         5b:f7:7a:4f:0d:03:e2:f2:b5:8a:e4:a3:3b:5e:51:0a:50:a6:
         c6:50:aa:11:d8:a1:7f:cc:27:88:ff:42:5d:22:fe:20:e9:3a:
         3e:18:40:a4:b0:f0:e8:d8:38:74:06:01:dc:51:52:b6:c6:eb:
         6d:fa:6c:76:f8:eb:9b:78:1b:56:00:30:7e:cb:50:40:26:ea:
         ba:09:34:b3:59:6b:69:1f:46:98:3f:4a:55:72:49:f1:dd:72:
         42:ee:de:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 08:42:02 2024 by rpki-client on console-fra.rpki-client.org