Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/DC512D0473CD11EA8BE69127C4F9AE02.roa
File:                     DC512D0473CD11EA8BE69127C4F9AE02.roa (raw, json)
Hash identifier:          87bbjmigpdWAoAH/3Dyv4qwXksoI6JwqK+M1QF9hs/E=
Subject key identifier:   9A:11:F6:7A:06:12:81:F5:84:11:1C:A6:E3:55:92:AE:85:CE:46:A6
Certificate issuer:       /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Certificate serial:       0927
Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/DC512D0473CD11EA8BE69127C4F9AE02.roa
Signing time:             Wed 02 Aug 2023 20:38:06 +0000
ROA not before:           Wed 02 Aug 2023 20:38:06 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     59214
IP address blocks:        103.98.14.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
                          rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 20:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2343 (0x927)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
        Validity
            Not Before: Aug  2 20:38:06 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64cabead-aed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a7:74:8a:da:1a:71:da:b9:ab:d6:05:f0:dc:
                    55:c7:9f:f8:8c:32:b2:e9:16:50:f6:1e:b7:e0:78:
                    10:bb:f9:eb:86:b6:e7:ed:32:e6:9e:fc:37:8c:5a:
                    a6:42:2e:e2:25:6e:c4:4e:3c:18:fa:02:be:40:c2:
                    1e:b9:6f:65:62:b1:10:1c:aa:8a:80:ed:6a:52:b5:
                    ee:4b:be:e4:71:8b:ad:08:41:1e:75:4d:09:9a:ce:
                    fc:1c:87:54:20:ad:d0:0c:42:19:b3:36:f1:9b:ff:
                    ea:8e:52:28:2d:1b:0f:71:9e:67:e9:7a:c6:f5:38:
                    81:cc:55:9d:9c:92:48:9b:27:73:13:99:9f:4f:8b:
                    27:5a:b3:a6:32:32:29:f6:a8:f4:e3:56:04:95:a7:
                    c0:4e:d8:d6:7b:76:4d:9c:c9:15:46:08:8b:93:8e:
                    48:5f:9b:ba:d6:86:4f:a0:84:1c:54:e0:4d:cc:54:
                    31:72:96:36:9d:ed:43:68:d5:32:45:7a:50:16:7c:
                    2c:d4:48:4a:a3:75:d5:d7:04:b6:21:b9:eb:58:49:
                    1d:22:5d:d0:77:2c:6d:c7:9b:b7:f6:fb:fe:22:19:
                    72:79:d0:22:34:20:03:0d:60:f7:d7:c3:71:ac:89:
                    53:66:1f:90:57:d5:66:bf:2e:6d:6c:d6:5f:4b:b1:
                    08:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:11:F6:7A:06:12:81:F5:84:11:1C:A6:E3:55:92:AE:85:CE:46:A6
            X509v3 Authority Key Identifier:
                keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/DC512D0473CD11EA8BE69127C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:80:7c:80:00:3b:30:28:bd:f1:23:65:8a:d0:81:79:f5:fb:
         7a:c8:0d:5a:ae:75:af:90:c6:80:e0:bc:5b:b7:2a:ed:22:c4:
         1d:3f:5e:7e:26:e2:95:0f:42:55:f8:ad:56:ba:fd:b6:a8:49:
         15:27:99:6c:7b:49:a5:0a:cb:af:d9:99:8f:2e:8a:0a:30:4e:
         84:b5:cc:52:15:91:d2:43:ae:55:0d:96:2d:71:80:c8:f6:03:
         cb:68:b9:9c:1f:7c:28:64:9b:42:b2:dd:51:93:57:97:b6:9e:
         bc:56:78:c3:e7:a1:37:c8:37:01:04:86:39:bb:a6:80:9e:ce:
         6b:93:19:c7:a0:be:3a:8a:00:24:d8:c9:dd:b8:df:d4:33:bb:
         57:4f:fe:de:c6:7a:38:7e:ea:20:21:e2:4c:39:1b:9f:11:19:
         65:be:cc:18:e8:6c:82:69:2e:ae:94:17:2f:3e:0b:82:23:0a:
         5d:44:0e:a7:41:33:d5:47:76:db:03:07:c4:51:73:4a:37:01:
         03:6b:2b:df:12:ee:43:20:2a:69:2e:9e:27:c4:fd:dc:93:3f:
         75:72:4a:ba:a5:bb:ea:58:a6:d9:96:a9:89:a4:23:86:d0:69:
         c4:f6:2a:fe:1d:05:8a:76:0d:cd:27:b2:80:ca:67:62:d5:9d:
         75:a7:bf:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 21:52:41 2024 by rpki-client on console-fra.rpki-client.org