Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/FE37F6E0E71711ECA4C60269C4F9AE02.roa
File:                     FE37F6E0E71711ECA4C60269C4F9AE02.roa (raw, json)
Hash identifier:          IIvzz0A/cMs27e+lpxOre2emOQgWpY2xeKIFN2INhWA=
Subject key identifier:   49:3B:3C:A0:05:6A:8B:DD:9A:24:64:96:A3:30:4E:EE:EE:90:A0:0F
Certificate issuer:       /CN=A9112DEF/serialNumber=E3EB954B44721E411AAF0938310CC103EA4C8BB4
Certificate serial:       01F3
Authority key identifier: E3:EB:95:4B:44:72:1E:41:1A:AF:09:38:31:0C:C1:03:EA:4C:8B:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/FE37F6E0E71711ECA4C60269C4F9AE02.roa
Signing time:             Wed 31 May 2023 05:28:30 +0000
ROA not before:           Wed 31 May 2023 05:28:30 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     141452
IP address blocks:        103.185.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl
                          rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 02:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 499 (0x1f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112DEF/serialNumber=E3EB954B44721E411AAF0938310CC103EA4C8BB4
        Validity
            Not Before: May 31 05:28:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6476dafe-542e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cf:7a:89:6a:42:9f:de:6a:47:85:17:01:8f:
                    c4:ef:fc:c0:e2:5a:08:c1:09:7d:3a:ad:47:6e:1f:
                    13:d0:51:50:e1:83:34:1d:b1:6c:b1:95:5e:97:23:
                    3e:6a:8e:1e:33:07:90:6e:02:9f:97:9b:f5:38:33:
                    a6:0d:da:7d:0d:73:81:73:21:02:e7:1f:f3:5a:a1:
                    a0:71:f7:f9:eb:f3:81:0c:b6:85:b6:65:1a:67:4b:
                    3a:2f:c2:97:59:cd:fc:b0:35:13:4c:02:3d:50:a6:
                    23:90:6f:df:f6:dd:40:d7:e8:d0:12:96:69:06:de:
                    c7:7a:3e:e0:78:c0:61:fd:e8:41:a0:41:1e:c2:eb:
                    c6:82:7d:c6:e3:23:cb:c3:bd:0a:18:39:2c:97:88:
                    4a:bb:6b:50:c5:7d:27:73:e0:6c:96:97:f1:e7:86:
                    3f:aa:99:3b:c9:0f:06:03:b2:fd:e6:8d:89:ed:4b:
                    84:ed:aa:ac:b9:f1:7d:d3:41:97:79:c7:50:d4:02:
                    cb:e2:7c:f4:5b:b1:69:21:8b:1f:f3:12:77:eb:1d:
                    b5:94:fe:27:b5:78:bd:7b:1f:fd:02:41:38:68:84:
                    8c:cb:b4:06:b0:50:53:89:94:ed:9a:94:0c:79:e1:
                    5a:f6:24:63:4b:8c:4d:82:af:77:dd:3d:9a:a3:3e:
                    07:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3B:3C:A0:05:6A:8B:DD:9A:24:64:96:A3:30:4E:EE:EE:90:A0:0F
            X509v3 Authority Key Identifier:
                keyid:E3:EB:95:4B:44:72:1E:41:1A:AF:09:38:31:0C:C1:03:EA:4C:8B:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/FE37F6E0E71711ECA4C60269C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:14:f9:50:69:ff:e8:91:15:16:fd:97:fe:db:aa:10:27:87:
         8a:0b:6a:cb:db:fc:05:13:e0:2f:0c:c8:21:eb:db:10:06:03:
         6b:c9:25:f6:86:e8:28:32:9e:6e:c2:6f:f9:c2:dc:60:1d:a5:
         27:73:14:86:4b:84:33:4a:34:85:70:94:04:85:c8:67:5a:02:
         3d:ae:a4:f8:fd:9a:7c:5d:b3:14:45:0f:08:1d:e2:c6:20:a3:
         5c:91:c9:12:0c:aa:77:7a:5b:27:fe:af:c5:e0:ef:a3:0c:12:
         22:b1:61:df:27:e8:79:68:31:b1:0d:d1:b0:62:24:94:5d:3c:
         74:73:eb:59:60:54:53:dd:ff:6b:ee:f5:76:8a:20:f8:5f:eb:
         30:03:c4:24:8a:b9:e8:d3:22:35:42:82:6b:05:d6:b0:9e:a3:
         ce:a9:c0:fe:93:92:0f:28:0d:6b:0c:d6:f3:3e:ff:dd:78:3e:
         c5:0a:e5:87:15:2f:80:ef:ff:8c:83:ef:fb:bd:9f:ca:14:94:
         b0:7f:f8:7b:e4:a1:46:cc:6a:1d:51:ca:84:2a:ce:bc:aa:8f:
         d2:10:c2:b3:48:96:bb:f0:b4:17:f4:60:86:81:4d:59:c3:28:
         da:99:5a:3d:d2:c3:9e:a5:4a:bc:00:27:e9:23:a5:38:31:7c:
         53:d6:02:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 04:26:38 2024 by rpki-client on console-fra.rpki-client.org