Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/87625FC0812011E9890A4533C4F9AE02.roa
File:                     87625FC0812011E9890A4533C4F9AE02.roa (raw, json)
Hash identifier:          +5h350Entxop10VDTkTCS9JuaJOuqYNRDCA3VkMIaEo=
Subject key identifier:   80:F8:52:86:06:BD:5F:3D:5B:28:83:AD:25:AC:1C:B4:F2:4E:2C:B3
Certificate issuer:       /CN=A911424D/serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433
Certificate serial:       0E28
Authority key identifier: AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/87625FC0812011E9890A4533C4F9AE02.roa
Signing time:             Tue 14 May 2024 18:57:08 +0000
ROA not before:           Tue 14 May 2024 18:57:08 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     138957
IP address blocks:        103.137.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.crl
                          rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:41:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3624 (0xe28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911424D/serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433
        Validity
            Not Before: May 14 18:57:08 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6643b403-060c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cb:b3:e6:53:93:1e:1e:5f:4b:d5:7c:eb:58:
                    f1:9f:0a:7b:2d:4f:ea:51:61:0a:ec:c1:39:02:cc:
                    76:0c:a8:f9:bb:3d:47:3a:13:09:77:da:99:11:68:
                    76:88:a9:da:22:32:0f:cb:be:3f:ac:08:14:a2:31:
                    c4:2a:71:4b:79:29:55:69:d5:ce:7c:87:bd:80:6e:
                    9a:a2:b4:02:46:86:71:65:40:31:94:99:cd:51:4a:
                    7b:10:39:e6:b8:05:6a:ef:3e:a8:36:33:53:27:34:
                    25:7e:8b:ec:fd:c8:23:e4:e7:e9:4a:1e:c8:75:ec:
                    0f:4f:cd:e8:40:52:08:9c:d2:0b:ea:90:32:3e:35:
                    ff:1e:48:a2:4b:7d:b4:51:2f:2e:4e:05:74:90:c1:
                    04:4d:56:33:56:60:30:1c:92:05:74:88:ff:cd:c2:
                    db:56:bb:e9:83:70:1b:13:5c:a0:0d:3f:5e:70:c8:
                    83:9a:8b:17:0d:9c:b1:65:7e:15:13:14:15:9e:52:
                    5e:44:2e:40:fa:f3:ec:a6:1f:ba:04:27:53:9a:ba:
                    02:b0:38:72:9f:e9:b1:a0:c3:26:b1:92:a5:1e:53:
                    7b:6a:78:d8:ff:42:29:79:66:e9:a6:40:c9:5b:01:
                    c2:b4:d1:04:4f:a7:a3:34:e9:50:21:f3:b8:a3:be:
                    e5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F8:52:86:06:BD:5F:3D:5B:28:83:AD:25:AC:1C:B4:F2:4E:2C:B3
            X509v3 Authority Key Identifier:
                keyid:AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/87625FC0812011E9890A4533C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:01:15:f4:ac:27:10:4f:b1:1b:ce:2c:0f:08:58:5d:57:fe:
         9b:91:5b:73:d7:52:6e:60:a1:d6:41:96:38:0f:75:04:8d:3c:
         a8:1e:55:8f:ff:d1:cf:36:fd:36:76:d2:c1:06:31:e4:67:27:
         ed:75:fc:97:b3:ff:41:aa:15:61:40:01:f9:06:0a:70:23:96:
         c4:ea:1c:be:90:97:78:c3:4c:4d:78:32:c7:c2:55:02:8b:f6:
         b8:00:22:45:71:23:97:89:8d:58:a6:8c:41:f1:21:8c:2d:6b:
         c5:32:94:88:4f:1a:ca:9c:7f:de:d7:57:9a:a3:3d:bd:ae:06:
         0f:d2:16:5f:ab:54:24:14:cc:0d:d2:7e:6c:7e:4c:da:cf:25:
         77:69:f1:7d:27:d2:ac:9f:7d:e0:d3:6c:94:8d:f3:b0:95:47:
         4d:df:98:3d:d5:d4:cf:9b:3c:e6:4f:32:46:2b:8f:64:ce:47:
         bc:89:8b:fd:4c:19:fb:9a:a6:a7:b5:e7:d8:7b:27:ba:a5:a1:
         58:9a:d0:40:c6:38:61:e8:05:08:b4:b2:5f:33:09:b1:c1:aa:
         20:0c:3b:af:d0:d2:2a:e2:9d:36:b5:38:2f:60:f4:be:74:bd:
         21:c8:6c:e8:58:c3:1a:48:76:9b:ef:c8:db:fb:73:10:bd:a3:
         1d:09:46:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:49:56 2024 by rpki-client on console-ams.rpki-client.org