Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/8FE6CF86A1FB11EE9773325BC4F9AE02.roa
File:                     8FE6CF86A1FB11EE9773325BC4F9AE02.roa (raw, json)
Hash identifier:          3TQM9ELa80hVtdt9LrT4vgc7x9okKSlCin85/6OAPc8=
Subject key identifier:   C2:7B:5F:6A:2F:C2:3E:15:D5:63:CD:89:20:13:25:54:02:66:57:EB
Certificate issuer:       /CN=A917F352/serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44
Certificate serial:       02
Authority key identifier: 0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/8FE6CF86A1FB11EE9773325BC4F9AE02.roa
Signing time:             Sun 24 Dec 2023 01:27:12 +0000
ROA not before:           Sun 24 Dec 2023 01:27:12 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     136965
IP address blocks:        103.100.184.0/22 maxlen: 22
                          2401:c040::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl
                          rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 07:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F352/serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44
        Validity
            Not Before: Dec 24 01:27:12 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=658788f0-7133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d3:92:cd:e9:0b:14:6e:55:6a:d1:1b:21:b5:
                    14:db:0e:35:dd:d4:35:b7:f1:94:e9:0a:64:bf:68:
                    74:61:cf:a2:31:ef:78:68:8d:72:48:f1:bd:26:8e:
                    b4:81:68:b4:95:72:d0:2b:4d:00:31:c1:78:26:18:
                    48:bc:3c:47:8c:f4:d1:95:31:08:59:92:f1:5c:cd:
                    55:f4:23:ee:31:4b:22:0b:02:30:8b:d0:e8:77:26:
                    fe:85:74:d3:ff:9a:4b:f1:bf:20:b3:ef:ed:cf:56:
                    89:1c:f6:fb:43:1e:6f:0b:aa:33:57:17:88:36:19:
                    c5:d7:e5:c9:6b:9c:d3:4e:da:95:81:ff:04:59:14:
                    d3:8d:ce:13:55:be:a7:4d:74:0f:00:1f:d1:0c:f3:
                    7d:7e:04:99:2e:01:38:e6:3c:96:33:b1:9e:8b:ce:
                    d2:8e:36:9a:9f:75:8e:c0:02:40:6e:f2:cd:c8:1c:
                    65:46:8c:d9:9d:fb:b5:d3:f2:ba:c1:3b:d0:6e:23:
                    dd:df:58:b7:dd:d1:2e:87:7a:8f:9b:15:18:d3:35:
                    58:ce:08:64:32:bc:31:0e:76:c6:a0:dd:64:c0:53:
                    55:91:b4:c9:9c:37:07:b1:4d:62:15:5e:0a:94:9a:
                    fa:cf:0e:9c:18:b2:7e:d1:75:b6:f0:5a:7f:7c:f2:
                    8f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7B:5F:6A:2F:C2:3E:15:D5:63:CD:89:20:13:25:54:02:66:57:EB
            X509v3 Authority Key Identifier:
                keyid:0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/8FE6CF86A1FB11EE9773325BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.184.0/22
                IPv6:
                  2401:c040::/32

    Signature Algorithm: sha256WithRSAEncryption
         ce:5f:db:be:b9:c4:32:2f:90:03:db:92:51:c0:e9:eb:ba:08:
         0c:a9:d2:ce:35:13:9c:0e:34:0d:39:bf:c6:f9:81:bd:a1:72:
         94:d9:de:be:63:ce:eb:9d:da:54:f1:a1:91:37:49:81:4e:a1:
         be:b2:a8:d5:c7:de:2b:16:59:52:f1:2a:a7:0a:bc:1f:9b:19:
         61:17:07:d0:86:c4:55:61:2d:5c:91:27:b1:8d:de:17:e2:08:
         2e:30:49:a6:76:31:48:a7:eb:bf:4c:49:82:d0:74:88:a7:8e:
         5d:41:f5:09:51:53:77:fd:80:c3:84:2e:05:7e:5d:70:cf:fb:
         79:5b:0e:80:40:18:0b:8c:88:34:ac:ce:81:34:ac:8c:d5:2a:
         34:12:03:5b:39:9f:96:b4:c6:aa:ce:e7:72:56:f1:79:03:26:
         e2:56:db:34:02:4a:74:da:5b:2a:81:70:82:aa:58:a7:73:cf:
         d9:9e:47:70:da:77:01:0a:d1:e9:71:74:8e:66:bf:fd:93:82:
         ea:1d:f6:17:bf:16:a9:38:0a:56:90:0b:1c:e0:c8:3f:a7:60:
         fc:6a:56:c6:18:67:be:2e:fe:70:c8:79:b3:03:1b:c5:c3:03:
         b4:c4:65:8f:76:fe:97:25:39:d4:d4:5e:c0:d0:ad:2e:cf:81:
         2c:a8:ad:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 10:01:48 2024 by rpki-client on console-ams.rpki-client.org