Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/8B626F5487C911EC908CE327C4F9AE02.roa
File:                     8B626F5487C911EC908CE327C4F9AE02.roa (raw, json)
Hash identifier:          DMjc7YHOd4HbtoNtunrW+QIJNydNWPoTGiKSwQ+/yhE=
Subject key identifier:   1F:D5:AD:EB:9F:6B:F6:5B:DF:7B:D6:EA:0E:91:A5:3B:FC:79:2E:88
Certificate issuer:       /CN=A915D655/serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56
Certificate serial:       030F
Authority key identifier: 62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/8B626F5487C911EC908CE327C4F9AE02.roa
Signing time:             Wed 15 May 2024 03:37:19 +0000
ROA not before:           Wed 15 May 2024 03:37:19 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     149497
IP address blocks:        103.181.72.0/23 maxlen: 23
                          103.181.72.0/24 maxlen: 24
                          103.181.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl
                          rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 783 (0x30f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D655/serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56
        Validity
            Not Before: May 15 03:37:19 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=66442def-4fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8e:57:eb:5a:4d:68:6c:a9:ea:a3:f4:76:f8:
                    eb:61:38:3c:12:88:22:e7:b7:5a:66:b8:ee:48:b6:
                    1e:c1:c7:03:13:a5:d0:8e:47:00:e4:a2:fb:da:f8:
                    39:32:60:b9:fc:74:ea:ad:8e:3c:a7:29:bb:80:39:
                    32:b4:0a:0b:6d:23:f1:6e:09:15:4f:da:c8:2a:91:
                    a6:73:c9:9a:f1:8c:26:43:6c:95:4d:e7:74:5c:58:
                    94:b8:f8:a7:e7:19:49:4a:a1:0e:94:e9:d7:32:94:
                    6c:4d:5f:d4:c3:07:75:4d:28:d1:22:f2:e4:f2:c2:
                    a1:76:9e:06:e4:99:e2:07:7f:6d:34:cc:bc:98:18:
                    5a:11:ed:04:c4:be:b7:e5:92:e4:91:d5:14:cf:1e:
                    fa:9f:69:ab:6b:1b:97:95:03:81:da:2e:7f:b8:83:
                    5b:f4:cd:80:0a:57:9c:06:22:18:80:f1:04:0d:c4:
                    b2:be:44:82:56:2f:78:5c:11:9c:09:71:4e:b5:26:
                    cb:bb:80:9d:e1:49:ce:2f:a7:ae:b1:66:10:71:b4:
                    df:ff:21:70:ef:9b:9b:63:c6:5a:f9:f5:f1:6e:f6:
                    21:16:ae:54:a1:02:58:6a:39:43:85:23:7a:fe:f3:
                    ba:f8:45:98:a4:bc:5e:2e:bd:58:9c:fc:f0:48:f5:
                    78:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D5:AD:EB:9F:6B:F6:5B:DF:7B:D6:EA:0E:91:A5:3B:FC:79:2E:88
            X509v3 Authority Key Identifier:
                keyid:62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/8B626F5487C911EC908CE327C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:b8:00:44:f7:f4:50:f1:81:f2:00:4f:4e:04:b7:0c:ac:ed:
         c0:7f:84:f4:a3:5c:9c:57:ff:5e:be:89:ee:6b:9b:c1:83:1a:
         06:4d:b5:2b:61:39:98:1a:68:58:86:28:a5:0e:8b:1e:fe:d6:
         83:24:1d:41:c2:12:6a:c0:45:d7:c1:a5:50:b1:98:4c:bf:15:
         56:a6:a8:79:45:38:24:29:52:a6:4d:04:9a:86:da:05:ba:51:
         14:55:4f:d4:0d:6f:1b:9c:6b:82:e9:9b:8b:03:cd:e5:e3:b9:
         cc:f3:36:68:a9:0a:c0:6b:79:77:aa:be:28:9a:07:a7:97:b8:
         9f:5c:12:46:ba:6d:d2:32:29:aa:00:09:c4:2e:6a:29:72:35:
         44:7f:4c:f2:4f:75:8e:f8:d7:62:eb:36:fe:46:bf:e5:9e:ec:
         91:40:30:01:c5:0d:0f:eb:8c:5e:cf:bc:27:8f:4b:93:46:f6:
         f6:94:89:cf:3d:c6:5a:60:94:e8:8f:5a:f2:69:20:2d:4f:bd:
         d6:e0:37:b9:b5:18:cf:27:4c:d8:d1:cb:ac:5a:14:24:39:8c:
         aa:5f:32:d9:27:e2:ff:a3:1a:4d:32:56:cb:7d:3f:62:a7:43:
         da:e0:16:d6:03:c3:d0:75:41:91:a7:a2:5c:0b:81:e2:15:b9:
         ba:f0:92:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:22 2024 by rpki-client on console-ams.rpki-client.org