Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BFC00D26D18011EEB673FD69C4F9AE02.roa
File:                     BFC00D26D18011EEB673FD69C4F9AE02.roa (raw, json)
Hash identifier:          ELxrCbBabSJfW+G3QBYOpNJTrZZisSnUasf4C1JE848=
Subject key identifier:   FD:68:F5:E2:28:50:28:AA:74:4D:EE:90:37:C2:2F:AE:D5:C4:F9:9C
Certificate issuer:       /CN=A9184279/serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE
Certificate serial:       057C
Authority key identifier: 06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BFC00D26D18011EEB673FD69C4F9AE02.roa
Signing time:             Fri 05 Apr 2024 01:04:20 +0000
ROA not before:           Fri 05 Apr 2024 01:04:20 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     141743
IP address blocks:        103.163.94.0/24 maxlen: 24
                          103.167.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl
                          rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 01:39:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1404 (0x57c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184279/serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE
        Validity
            Not Before: Apr  5 01:04:20 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=660f4e14-7fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:01:92:6b:e1:e7:5f:4f:4e:23:8b:f0:16:5e:
                    1d:2a:2b:f9:a1:59:71:70:89:d4:06:1d:f3:b3:ec:
                    ae:63:08:ba:4d:63:61:ca:54:49:0a:cd:76:01:97:
                    31:9b:ab:d1:e1:b1:00:ad:72:44:8c:8b:c0:67:59:
                    9c:f0:69:7d:bf:f3:a4:9c:29:d3:f9:d9:25:60:df:
                    6b:82:b3:ab:b6:d2:b8:ca:47:36:3b:79:aa:d4:49:
                    7c:b1:48:9d:fd:0b:27:1f:1d:35:55:50:d4:05:67:
                    b9:07:26:3b:48:c8:b5:97:72:15:56:9c:04:13:f5:
                    f6:ca:33:d9:79:81:73:97:86:54:ee:fe:fd:bd:b6:
                    c8:a7:77:14:20:6c:83:73:8d:17:a9:cc:69:84:d2:
                    56:60:7b:49:83:ce:de:df:df:d8:a2:4e:96:32:92:
                    55:30:c7:f0:0f:bf:80:ae:69:0a:70:99:3e:4c:de:
                    b5:25:d2:2c:e5:93:4c:dd:89:14:eb:a5:be:c3:4b:
                    27:f2:60:4c:d0:e2:56:15:11:24:d4:f6:6b:6f:8d:
                    3a:82:fa:79:5a:ec:55:ce:3e:aa:05:ff:4f:ea:72:
                    32:4d:73:5d:63:9f:51:0e:92:3c:e1:90:62:68:1b:
                    d8:83:33:e3:64:ee:26:57:5f:0e:52:79:c8:c3:6f:
                    b9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:68:F5:E2:28:50:28:AA:74:4D:EE:90:37:C2:2F:AE:D5:C4:F9:9C
            X509v3 Authority Key Identifier:
                keyid:06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BFC00D26D18011EEB673FD69C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.94.0/24
                  103.167.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:01:bd:b9:3b:07:14:89:df:58:1c:da:42:52:42:34:18:08:
         76:4e:a7:8b:2d:38:ce:75:2b:7b:17:6b:65:e2:2f:64:e6:36:
         4e:9d:9d:62:59:ac:43:2f:9e:02:28:ad:50:3d:d8:17:61:34:
         f5:bb:08:f9:68:c3:32:b6:5e:fd:0c:fc:65:97:78:6f:91:9f:
         38:e1:61:8f:45:b9:c5:a6:71:5a:8c:b2:10:73:49:f7:60:8a:
         68:eb:a9:73:44:27:96:25:3c:b8:ea:03:0a:c6:f6:81:11:5d:
         82:45:6c:2b:05:df:c5:ca:26:4a:af:71:1f:54:f0:25:be:fb:
         65:ae:de:2c:24:c8:91:95:d5:4e:e4:1e:4a:e7:12:99:e6:1e:
         2f:c0:56:c2:1b:56:2c:9c:aa:55:48:75:3b:bc:5e:da:6f:b7:
         4d:91:6b:5c:03:c0:d0:32:6c:4a:08:28:76:ff:0e:89:ea:c3:
         ca:36:af:89:da:00:98:f9:f6:d3:c1:cc:ea:fd:71:56:0a:84:
         2c:1c:fb:a2:19:2e:fc:34:cf:7f:74:ce:55:e4:c6:b0:fd:6c:
         a8:e1:db:fc:7f:14:4c:1e:9a:07:f5:fe:7f:94:63:4a:b7:ed:
         63:23:f3:d4:e3:18:14:f0:b2:4f:e9:83:ad:71:75:33:ee:4f:
         3f:81:5b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:07:28 2024 by rpki-client on console-ams.rpki-client.org