Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/60DF983AD54F11EE93ED1E3BC4F9AE02.roa
File:                     60DF983AD54F11EE93ED1E3BC4F9AE02.roa (raw, json)
Hash identifier:          qer/jvQLuDWQeiqhtv22JqWSNVi6TRuPW71Y4gEp5sM=
Subject key identifier:   A8:DB:1C:02:BD:16:D3:9A:DE:18:9C:2A:47:4A:6A:5A:C3:2C:31:7C
Certificate issuer:       /CN=A918B61E/serialNumber=CD7B86956BED9DD6215BE485F0C715B920C9A770
Certificate serial:       03
Authority key identifier: CD:7B:86:95:6B:ED:9D:D6:21:5B:E4:85:F0:C7:15:B9:20:C9:A7:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/60DF983AD54F11EE93ED1E3BC4F9AE02.roa
Signing time:             Tue 27 Feb 2024 09:05:40 +0000
ROA not before:           Tue 27 Feb 2024 09:05:40 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     150419
IP address blocks:        103.252.15.0/24 maxlen: 24
                          2001:df6:5000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.crl
                          rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 08:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B61E/serialNumber=CD7B86956BED9DD6215BE485F0C715B920C9A770
        Validity
            Not Before: Feb 27 09:05:40 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=65dda5e4-412b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e5:be:f4:1b:8d:db:49:bb:11:a6:87:96:52:
                    aa:17:aa:a1:fa:08:7b:a4:68:4c:e3:60:51:af:75:
                    b7:b3:bc:91:18:8c:fd:e2:8e:e9:b9:c8:93:b1:66:
                    5e:8e:55:98:ed:bc:9f:58:ee:c7:9d:6d:8f:8a:fb:
                    39:fc:a8:3f:eb:16:33:46:96:70:ba:7a:70:32:be:
                    52:98:a8:94:7c:55:42:dc:8b:b1:43:ea:02:d6:b5:
                    3e:fd:22:4a:8e:f6:5a:3d:37:08:b3:fb:a7:fd:27:
                    71:27:67:63:31:b9:50:fa:5c:4c:09:f8:ba:0a:76:
                    aa:5b:d0:bb:4b:41:9f:a9:af:28:f4:fb:65:47:98:
                    2d:62:a2:7e:0f:41:7e:98:94:b6:51:46:28:1b:42:
                    95:cb:83:28:51:6b:3b:7f:6d:47:66:d9:23:87:cb:
                    62:35:24:00:d6:90:37:e8:70:da:11:cc:6c:64:f5:
                    69:08:21:15:fb:2e:80:50:75:44:e2:88:c7:9c:9d:
                    2e:e2:14:2d:57:0f:6e:c3:01:1e:b8:5e:6e:ee:0f:
                    ed:d5:4a:45:85:2b:78:12:a9:f6:e4:dc:df:93:98:
                    b1:67:6a:8f:cd:1f:51:ed:d8:df:01:7c:af:f4:cf:
                    6e:3a:78:55:1c:a2:1a:c0:35:b8:eb:8d:56:cf:5d:
                    d5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DB:1C:02:BD:16:D3:9A:DE:18:9C:2A:47:4A:6A:5A:C3:2C:31:7C
            X509v3 Authority Key Identifier:
                keyid:CD:7B:86:95:6B:ED:9D:D6:21:5B:E4:85:F0:C7:15:B9:20:C9:A7:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/60DF983AD54F11EE93ED1E3BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.252.15.0/24
                IPv6:
                  2001:df6:5000::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:5c:10:50:12:53:f4:aa:b1:a6:47:de:0b:15:27:a2:b8:d2:
         c4:21:40:c2:56:68:21:bd:8c:f8:ef:d2:37:6f:02:3e:51:91:
         e9:7c:30:fa:0a:83:75:65:95:de:a6:ab:20:b6:d6:d9:c4:1e:
         e1:a1:3a:e1:49:ef:19:fc:df:94:aa:2c:cb:50:77:ca:f0:c4:
         cf:e5:0c:96:6a:54:1e:23:8c:b1:0a:ed:70:c9:47:cc:6b:2c:
         ba:2a:c4:19:66:12:d0:25:d1:57:e7:d1:6e:e5:ee:01:b0:4c:
         04:89:5c:49:ea:e6:6b:3c:77:a0:1e:47:8e:bd:01:5f:5c:7c:
         48:3c:83:a4:92:22:33:f6:24:85:3f:f5:f8:91:af:7e:f5:56:
         78:34:3e:8d:d2:84:2a:5f:58:ed:02:13:ba:1b:8b:e8:cb:c2:
         bc:59:1a:40:12:a5:5b:69:6d:d6:77:f0:ba:3f:e2:00:b0:88:
         6d:68:c5:75:f2:58:ca:5b:a9:2e:ea:b1:ea:db:63:53:38:15:
         b3:95:16:be:31:1b:5d:e8:c5:a5:14:e5:a9:59:5a:69:f8:70:
         16:c9:c3:70:dc:e0:83:c6:b3:1f:70:3f:00:21:f3:2a:9f:5c:
         e9:4c:22:09:e1:e5:1d:d6:e4:77:ff:ff:a7:be:3c:3f:25:c6:
         af:fd:a2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:14:29 2024 by rpki-client on console-fra.rpki-client.org