Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/69683D8CC64D11EABD8FD32DC4F9AE02.roa
File:                     69683D8CC64D11EABD8FD32DC4F9AE02.roa (raw, json)
Hash identifier:          ndk7WBwAom+jNCFlVWgXYFCEOWN+x873QVE3wv4MHH8=
Subject key identifier:   A0:F7:AD:17:C6:7E:C2:59:58:CB:AC:76:A6:AC:E5:7E:03:CF:F9:FD
Certificate issuer:       /CN=A915C6B7/serialNumber=113EA0FFCD6CBB7B3CF545ABCD2C962D86E1ECB0
Certificate serial:       0B44
Authority key identifier: 11:3E:A0:FF:CD:6C:BB:7B:3C:F5:45:AB:CD:2C:96:2D:86:E1:EC:B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/69683D8CC64D11EABD8FD32DC4F9AE02.roa
Signing time:             Wed 18 Sep 2024 19:08:30 +0000
ROA not before:           Wed 18 Sep 2024 19:08:30 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     139741
IP address blocks:        103.144.106.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.crl
                          rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:50:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2884 (0xb44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C6B7/serialNumber=113EA0FFCD6CBB7B3CF545ABCD2C962D86E1ECB0
        Validity
            Not Before: Sep 18 19:08:30 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66eb252e-4b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:67:06:54:b5:dd:d0:69:52:31:01:b2:db:4d:
                    cd:45:6a:8f:9e:3f:d3:b3:37:3b:41:1f:34:57:47:
                    d6:e4:ff:08:92:bb:f1:ee:38:55:d1:e4:56:e3:80:
                    d9:c8:f4:b8:5a:52:a7:6b:bc:54:c1:c8:3d:51:a1:
                    76:42:bf:e0:9f:01:24:48:11:3e:78:99:13:d0:91:
                    7b:81:d4:01:a7:08:72:70:2b:26:1b:51:c4:14:9e:
                    4c:c9:9f:c9:0a:bf:25:c4:97:ae:8b:b9:04:f5:8b:
                    59:0f:0c:f6:b0:18:67:a5:79:e2:3e:7e:3f:6b:bf:
                    06:7f:d8:0e:07:e2:9c:7d:9f:d2:60:6a:0a:28:4d:
                    53:10:cd:4c:fb:ab:04:8b:4f:68:7c:3b:1e:52:c0:
                    73:4d:b2:02:b9:14:3f:bc:22:53:d3:64:ec:7f:ad:
                    42:c9:38:53:0e:a0:b0:e4:28:38:00:8f:42:ec:a2:
                    00:f1:82:b2:fe:8b:7b:16:ea:83:cf:09:41:cb:e0:
                    91:63:a8:f7:56:7c:c5:68:86:2f:f1:48:64:76:53:
                    2e:a0:ea:f3:b7:c5:37:5a:d7:2e:5d:79:5b:39:33:
                    58:35:2a:d4:54:37:0f:83:21:d1:38:f0:f9:49:75:
                    fa:9f:4f:d5:67:f7:b9:08:9c:08:ef:b0:c5:fa:3f:
                    91:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F7:AD:17:C6:7E:C2:59:58:CB:AC:76:A6:AC:E5:7E:03:CF:F9:FD
            X509v3 Authority Key Identifier:
                keyid:11:3E:A0:FF:CD:6C:BB:7B:3C:F5:45:AB:CD:2C:96:2D:86:E1:EC:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/69683D8CC64D11EABD8FD32DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:d2:c5:4c:bd:95:40:6e:03:3c:c1:d6:7d:28:75:c8:83:02:
         50:17:3c:1d:a4:03:65:d5:d1:7b:92:c7:fd:51:9c:ef:31:50:
         09:e7:8e:6b:dd:0c:91:21:c8:d3:33:cf:80:ce:d6:62:d9:e0:
         df:ff:43:2a:8d:ca:d8:9d:f9:d0:de:b5:01:b2:ac:f3:76:a6:
         1a:ed:c5:ac:5f:17:1f:24:f6:16:b8:92:32:35:48:e4:e3:0a:
         cd:1d:18:ff:fb:78:34:35:40:27:e2:f9:4b:6b:41:2d:57:4c:
         44:7e:22:28:d0:f2:ac:54:fc:f1:3a:91:5b:46:08:10:92:7e:
         02:56:61:53:9b:be:c8:b8:7a:ea:4a:35:a5:cf:e2:8f:db:04:
         e8:4c:5b:db:66:d6:b5:79:20:9b:e3:85:4c:67:c8:27:10:e9:
         db:3e:84:11:e8:94:92:96:9c:83:05:3f:8b:4b:fb:ad:17:fc:
         d0:23:b6:75:76:9c:36:a2:47:49:f6:c5:84:54:39:e3:88:60:
         5b:cb:e4:a5:69:73:27:55:f5:db:a0:32:e0:47:67:74:f9:7a:
         f8:b5:85:7f:8b:0c:88:53:4b:fa:9f:b9:dc:81:04:88:32:e3:
         e1:8a:dd:ef:7a:cc:27:c7:90:d1:e1:4f:1b:11:28:69:c1:5e:
         fe:92:40:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:58 2024 by rpki-client on console-fra.rpki-client.org