Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/6538D178628E11EEBF375134C4F9AE02.roa
File:                     6538D178628E11EEBF375134C4F9AE02.roa (raw, json)
Hash identifier:          Pw/x/vys3i7BCNdlrQIbToItEZqfAmbAqkABXFykZto=
Subject key identifier:   86:23:B8:81:13:CE:1F:02:F4:BA:8A:C2:E8:7C:DD:A3:56:AC:72:B2
Certificate issuer:       /CN=A911393B/serialNumber=21CBAAA044DE1A5664469F418BCD0877B213973A
Certificate serial:       02
Authority key identifier: 21:CB:AA:A0:44:DE:1A:56:64:46:9F:41:8B:CD:08:77:B2:13:97:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/6538D178628E11EEBF375134C4F9AE02.roa
Signing time:             Wed 04 Oct 2023 08:17:02 +0000
ROA not before:           Wed 04 Oct 2023 08:17:02 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     151838
IP address blocks:        103.240.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.crl
                          rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911393B/serialNumber=21CBAAA044DE1A5664469F418BCD0877B213973A
        Validity
            Not Before: Oct  4 08:17:02 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=651d1f7e-c7ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fb:98:17:62:31:c2:77:3f:a1:79:48:2c:c9:
                    88:6b:91:e6:19:3c:35:58:af:e2:13:38:d4:46:d0:
                    54:8e:d3:a4:71:ad:1b:3e:96:53:7a:c5:f9:6e:92:
                    d9:d0:aa:04:bf:0f:aa:88:30:f6:fc:ae:15:4f:83:
                    a5:8c:3b:a4:b0:db:6e:87:80:08:04:50:5c:41:32:
                    dd:37:db:e5:0b:bd:18:b4:d2:b9:b7:b8:99:01:c8:
                    88:fd:96:13:ea:21:63:92:fd:00:eb:42:7e:d2:5e:
                    51:37:5c:ad:93:66:83:3b:00:c3:0c:40:52:e0:f2:
                    86:0a:d4:d5:a2:7b:d3:7e:e0:b9:5a:74:73:6e:be:
                    ff:5c:58:78:2c:25:ee:29:6e:4f:ae:8f:04:c9:fc:
                    ae:31:f4:2e:17:0d:a7:72:b1:ad:f6:67:14:21:51:
                    87:a8:05:28:98:9b:de:54:30:7f:1a:64:a8:52:96:
                    47:55:0e:c0:b0:a7:d3:34:41:90:dd:24:44:7e:f7:
                    09:b3:aa:e4:37:20:98:6b:ce:cb:06:76:79:f3:74:
                    94:86:7e:c9:5a:30:e6:e8:8c:5e:0d:37:ac:cb:31:
                    bf:e0:04:e0:65:b9:e9:6f:8f:bf:38:24:9f:d4:91:
                    fa:81:67:70:73:00:a3:27:6e:a3:a5:d1:a8:fe:b8:
                    bd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:23:B8:81:13:CE:1F:02:F4:BA:8A:C2:E8:7C:DD:A3:56:AC:72:B2
            X509v3 Authority Key Identifier:
                keyid:21:CB:AA:A0:44:DE:1A:56:64:46:9F:41:8B:CD:08:77:B2:13:97:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/6538D178628E11EEBF375134C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.240.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:8a:c6:0f:cd:7a:25:3d:fe:17:62:5b:52:84:38:69:e5:b7:
         66:3d:ca:c3:e6:ec:45:de:3f:53:d4:f1:11:e8:58:6c:47:e0:
         8a:23:28:02:e0:2c:2a:ac:84:cd:1f:b4:21:a3:ab:7e:25:fc:
         7a:07:ea:f5:0b:88:28:96:04:1a:6c:0a:af:b1:d6:95:41:10:
         46:ad:f2:17:53:ee:a9:ee:e9:e2:79:fe:e0:b5:22:cb:7d:9b:
         64:fa:ad:21:48:29:c6:da:83:9f:8f:43:41:51:be:6f:56:69:
         61:fb:1f:23:3d:04:2d:40:c9:2a:8a:43:ec:99:99:43:46:41:
         8f:ee:49:f4:f6:4e:69:70:c3:f1:27:b8:bb:3d:f8:f2:87:3a:
         09:84:78:c5:d0:1f:b7:08:7b:5b:af:55:1d:21:07:36:0e:e1:
         8e:eb:51:d8:39:95:ed:03:17:19:4b:ca:87:c0:a0:14:89:7c:
         ed:35:06:f8:34:a7:58:1c:e0:4d:5c:69:14:9c:98:cc:2c:f6:
         18:7d:81:17:f6:4c:8c:bb:a6:f7:11:83:73:63:08:b2:43:5c:
         5a:9b:f7:f4:0e:68:5f:37:02:1c:e6:46:16:61:de:da:e2:d5:
         50:ef:bd:23:09:dc:b3:9b:5d:af:0b:aa:ce:54:3c:6a:69:99:
         a0:56:53:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:00 2024 by rpki-client on console-ams.rpki-client.org