Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/4C65E804F68911E98EF88758C4F9AE02.roa
File:                     4C65E804F68911E98EF88758C4F9AE02.roa (raw, json)
Hash identifier:          74xhEGoHDL+JXyRu/nG84OGopyDm02oZb8uAiLXbx/Q=
Subject key identifier:   69:80:E4:F9:4D:09:20:AF:4A:51:35:2F:67:68:A3:97:60:9E:B1:F3
Certificate issuer:       /CN=A915C094/serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
Certificate serial:       0BB2
Authority key identifier: 4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/4C65E804F68911E98EF88758C4F9AE02.roa
Signing time:             Tue 06 Feb 2024 19:07:42 +0000
ROA not before:           Tue 06 Feb 2024 19:07:42 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     138509
IP address blocks:        103.127.92.0/24 maxlen: 24
                          103.127.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl
                          rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 19:40:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2994 (0xbb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C094/serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
        Validity
            Not Before: Feb  6 19:07:42 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65c2837e-d3e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d2:a3:95:c4:89:78:1f:6d:a1:c4:d7:cf:38:
                    9b:af:7b:24:c6:d6:43:5a:66:10:e8:77:a5:1f:36:
                    b4:9a:61:f7:ef:66:15:ba:23:b6:ac:e0:60:98:c1:
                    6a:1a:89:69:0b:85:d4:cd:58:fb:fe:5d:ba:2c:11:
                    f5:28:02:29:f4:00:4e:b8:c3:cd:b9:f4:ff:1f:52:
                    2f:9e:e4:b2:d7:1a:42:1f:78:22:ee:8d:61:56:d5:
                    06:f5:10:ce:b6:2c:21:7d:9f:e3:68:94:ce:3b:41:
                    0d:cd:97:d3:c8:09:30:c9:a6:2c:92:c5:12:f8:9f:
                    8c:6a:b3:92:ae:50:d8:e4:67:22:79:15:3e:b4:5c:
                    66:45:a6:a0:99:a2:38:2e:47:8d:80:d2:84:f4:72:
                    5e:58:c9:96:da:cb:13:1b:0d:a2:c4:b1:3d:07:46:
                    81:3c:ba:c0:e2:f5:64:ed:93:90:f6:3d:e2:72:46:
                    47:43:d9:93:03:b8:2f:af:7b:07:d5:09:52:a0:27:
                    45:06:e1:4f:5d:38:4e:63:79:e7:bc:fb:bc:41:28:
                    6e:45:dc:01:89:d2:7d:6f:76:8a:20:c0:d7:6d:3f:
                    c8:ff:63:b4:33:41:1f:83:db:47:75:4c:c3:96:d3:
                    bc:57:65:60:de:2d:33:d6:44:23:20:ab:ee:07:1e:
                    56:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:80:E4:F9:4D:09:20:AF:4A:51:35:2F:67:68:A3:97:60:9E:B1:F3
            X509v3 Authority Key Identifier:
                keyid:4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/4C65E804F68911E98EF88758C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:fb:ca:0c:54:ea:6f:72:5d:81:dc:03:95:dc:a3:21:58:1d:
         ce:0f:dd:04:1d:73:fa:02:69:8a:68:49:8a:6a:fa:6b:f6:3a:
         b7:10:b1:ee:53:ee:f6:76:97:a1:c0:e8:bf:1a:b7:81:53:6d:
         04:c0:e3:42:07:ba:23:52:51:0e:e9:19:5a:fe:4d:e9:1e:07:
         52:83:ed:7d:4e:cf:d7:a9:81:ce:aa:56:af:9e:61:89:a4:a6:
         46:8f:41:12:84:09:4c:70:5b:7e:f7:2d:a1:08:d4:49:b4:f1:
         b6:32:c2:ec:b6:ad:11:94:30:02:15:05:20:b6:c7:50:03:e6:
         59:6b:db:1a:b5:3d:20:4c:f1:f2:4c:9c:6f:54:0d:2d:30:6d:
         1c:16:93:fe:b4:ab:74:19:f5:41:67:ea:4a:44:d6:5b:fb:18:
         6a:18:1e:76:f7:27:85:c9:38:01:93:a6:56:f0:bc:be:c7:a7:
         5f:34:31:31:d2:b3:69:30:6b:e0:e7:cd:f0:b2:89:c5:6d:14:
         44:98:19:4a:49:f1:42:ec:8e:5d:cd:1f:9c:2a:1c:66:4d:6f:
         82:c0:a9:b7:d6:ed:6b:59:1e:06:d9:50:31:23:dc:a1:da:d5:
         d1:df:71:ad:a5:b7:91:b8:38:92:48:87:62:95:48:40:74:70:
         26:9f:cf:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 20:34:04 2024 by rpki-client on console-ams.rpki-client.org