Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/9CAFFE72B58F11ECBCF10934C4F9AE02.roa
File:                     9CAFFE72B58F11ECBCF10934C4F9AE02.roa (raw, json)
Hash identifier:          m1lmrBomInv3RwGPR6n2Hax1CjT2qYjyfLp3Bhn9XcA=
Subject key identifier:   6D:E7:B5:3B:91:E9:1B:2F:AE:67:68:C4:EC:9D:10:EA:DC:6B:7C:14
Certificate issuer:       /CN=A917275D/serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B
Certificate serial:       029C
Authority key identifier: 6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/9CAFFE72B58F11ECBCF10934C4F9AE02.roa
Signing time:             Thu 23 May 2024 03:37:37 +0000
ROA not before:           Thu 23 May 2024 03:37:37 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     149771
IP address blocks:        103.185.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl
                          rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 04:46:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 668 (0x29c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917275D/serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B
        Validity
            Not Before: May 23 03:37:37 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=664eba01-cca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:04:4c:b9:87:05:f6:e4:64:c4:6f:67:81:b7:
                    7a:c4:c3:75:8a:0e:46:5c:3b:0d:1a:f0:00:87:12:
                    cf:44:9b:53:02:e7:7b:ee:4a:8c:16:cc:80:e5:4e:
                    4c:12:b7:82:c1:be:63:16:3c:a6:54:59:97:0c:82:
                    6e:55:f7:de:08:6e:6e:29:cd:67:53:c2:4e:86:83:
                    bd:2c:78:f8:00:ca:97:5b:3a:ed:76:a7:56:65:38:
                    ee:38:8a:37:b6:66:8f:f2:01:86:5c:d6:92:e0:9e:
                    be:99:42:67:01:29:f9:c4:a5:6a:ff:24:b0:62:47:
                    53:0e:c1:ce:e2:99:8e:b0:bb:1a:8a:e7:87:25:55:
                    6c:02:ba:30:4d:28:1b:c1:bc:b3:b1:07:9e:64:45:
                    bf:8d:4b:de:a9:a7:09:db:e6:4d:48:47:64:f6:50:
                    b7:cc:fb:09:84:d7:b2:56:1d:cb:60:10:4e:34:20:
                    8f:eb:a0:11:26:1d:28:c8:8e:1d:3f:17:24:5a:2e:
                    c8:da:3a:ff:c3:32:67:96:e5:87:5c:c2:52:54:e2:
                    0e:9e:53:a6:55:5a:b8:11:2b:e0:41:6b:be:5d:17:
                    5b:d0:7b:70:92:88:48:0a:6f:53:c1:6d:2e:3d:e2:
                    b0:96:8d:3f:63:36:84:f2:75:cd:9a:d1:21:37:98:
                    66:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E7:B5:3B:91:E9:1B:2F:AE:67:68:C4:EC:9D:10:EA:DC:6B:7C:14
            X509v3 Authority Key Identifier:
                keyid:6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/9CAFFE72B58F11ECBCF10934C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:cf:be:f1:5b:ed:af:c2:93:e9:3f:6a:25:63:8a:3e:db:ec:
         ab:8a:db:c5:91:15:4b:b7:ab:4b:37:f4:d8:da:1e:a7:e8:99:
         96:d6:82:51:ed:ae:99:6e:20:2e:9c:b8:8b:c0:6e:8c:be:bc:
         7d:ff:4b:7e:65:2e:df:6d:9f:fb:ad:79:5a:cb:22:43:98:6a:
         01:70:3f:4f:d1:f3:0d:a6:e7:85:f9:a7:df:81:bc:fe:5b:66:
         e0:c3:b1:99:54:26:3e:60:5a:c5:bf:20:30:fd:07:4e:ba:2b:
         74:0d:b1:15:74:10:d6:89:3e:ee:3c:a8:9d:87:d4:5f:a5:3d:
         38:b0:5d:f4:96:ae:70:27:e8:d4:f8:de:bc:fb:02:67:95:ee:
         57:58:47:5b:58:71:ea:59:fa:4d:36:f3:ee:f7:cf:5b:dc:da:
         1d:42:33:e5:d7:83:95:3f:a1:cb:1a:e9:60:61:97:4b:59:54:
         5b:8a:e4:79:af:ba:6d:19:37:c9:d4:0f:ed:08:ee:2f:ac:1b:
         74:c8:66:76:66:f4:0f:a6:e4:ad:35:c6:d3:e1:9a:cd:a1:d8:
         8e:5c:e1:84:45:82:48:d9:15:7a:d9:f2:be:48:2e:f3:60:42:
         96:57:f4:95:8a:b3:65:39:4b:87:ed:01:1c:20:c1:7d:f4:3f:
         1e:f1:13:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 05:48:43 2024 by rpki-client on console-fra.rpki-client.org