Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/C01674A86BF011EA87B33D25C4F9AE02.roa
File:                     C01674A86BF011EA87B33D25C4F9AE02.roa (raw, json)
Hash identifier:          41vzsNFWtlDB3OOheuZb6doD/XkheVi/JY4sN43fJrk=
Subject key identifier:   DC:74:FE:8F:60:F9:B7:A8:5B:AF:6F:4A:68:84:24:1D:03:96:9F:34
Certificate issuer:       /CN=A9110DEC/serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B
Certificate serial:       08D8
Authority key identifier: B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/C01674A86BF011EA87B33D25C4F9AE02.roa
Signing time:             Sun 16 Jul 2023 20:37:15 +0000
ROA not before:           Sun 16 Jul 2023 20:37:15 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     135590
IP address blocks:        103.95.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl
                          rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 May 2024 20:59:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2264 (0x8d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110DEC/serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B
        Validity
            Not Before: Jul 16 20:37:15 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64b454fb-6e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:09:5f:16:6d:27:cd:32:19:30:02:f0:64:48:
                    74:e4:92:99:c7:c4:4d:06:08:fe:a8:fd:b9:4f:84:
                    f4:5b:69:b1:8d:44:0f:38:61:c0:e0:c0:cd:56:a8:
                    71:92:21:f3:fa:8f:1e:6f:87:6c:e8:f7:65:05:2e:
                    3d:96:70:cd:53:db:0d:1c:78:37:94:e5:dd:f2:aa:
                    4e:a0:21:bf:81:14:09:56:90:71:a4:c9:a8:84:77:
                    65:3c:79:96:4f:03:ff:70:c1:7a:03:cf:c9:d0:08:
                    3b:a5:be:ac:75:fe:c0:de:02:02:99:d4:bd:7b:d6:
                    0f:ff:5c:ae:08:ef:e5:af:30:b3:5a:36:b6:dc:47:
                    fc:44:82:49:5b:27:56:82:d9:16:01:44:fd:95:fe:
                    59:45:01:2f:30:23:25:e8:57:d8:f3:f5:b3:7c:f8:
                    20:4e:a5:4d:64:a4:07:72:e0:12:21:3a:11:4e:f4:
                    e6:91:62:1b:ed:99:93:5b:9f:93:31:09:8c:5c:e8:
                    55:1e:c1:34:dd:48:d3:d9:53:5d:34:9d:62:2d:93:
                    20:be:f2:6a:95:dd:e2:07:9e:13:fe:ac:f1:67:49:
                    09:19:35:6c:77:99:6a:44:0d:68:28:7b:3f:97:10:
                    89:a0:1a:cc:9c:65:05:3e:e8:38:a1:71:90:a0:d4:
                    ea:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:74:FE:8F:60:F9:B7:A8:5B:AF:6F:4A:68:84:24:1D:03:96:9F:34
            X509v3 Authority Key Identifier:
                keyid:B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/C01674A86BF011EA87B33D25C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:89:e8:8d:b6:56:59:a4:f4:6a:ba:9a:2a:48:1b:f0:be:c8:
         5c:b4:91:bb:c4:aa:c0:94:88:50:d1:0d:4f:94:6d:88:76:20:
         e2:98:af:de:1f:c9:2d:b2:ca:5b:c7:84:3f:35:3e:eb:ca:dd:
         7e:cb:0c:b6:47:d3:3a:82:8e:53:b8:28:3b:b0:91:dd:c1:e5:
         2d:5c:9c:d3:2f:cc:2c:f5:8e:90:9c:17:ca:cb:04:3b:1d:f1:
         d1:d6:07:6b:af:86:e2:b6:3e:c8:70:25:44:2f:4c:cc:5d:15:
         6d:ae:c1:a1:e6:e5:03:2f:a4:88:21:6f:03:f2:da:2b:a3:6e:
         c6:08:51:9e:10:7c:3b:46:8b:54:7b:49:f9:01:a0:2d:c9:ca:
         7f:44:c3:f1:66:cf:9b:e2:c3:af:e5:80:e1:64:4c:29:95:05:
         49:40:8c:05:80:e5:46:b3:02:9f:da:0d:b6:64:3a:14:86:a1:
         1e:62:ef:3e:5b:ab:c3:fb:c8:fd:1a:6b:53:90:80:46:34:bd:
         e0:e5:45:c8:35:ba:dd:3f:c5:cb:9c:33:5c:6c:16:f1:b3:20:
         27:f2:32:b5:5b:ca:9a:56:7f:9f:34:eb:91:87:09:2c:49:24:
         a1:85:e4:8d:53:89:5e:36:d8:5a:c0:72:a2:9e:5a:2e:23:e1:
         f0:66:ac:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 22:41:46 2024 by rpki-client on console-fra.rpki-client.org