Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/32D8E190D0CB11EEAB1CAF34C4F9AE02.roa
File:                     32D8E190D0CB11EEAB1CAF34C4F9AE02.roa (raw, json)
Hash identifier:          XiWcqkDcsvOFFig0n+ygYts/d+AZtwoFOnRQ5BOzYoQ=
Subject key identifier:   AE:20:41:2A:7E:C4:DF:19:3A:81:EE:1D:CD:90:C2:A2:36:78:1A:81
Certificate issuer:       /CN=A911486F/serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51
Certificate serial:       F2
Authority key identifier: E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/32D8E190D0CB11EEAB1CAF34C4F9AE02.roa
Signing time:             Wed 21 Feb 2024 15:09:49 +0000
ROA not before:           Wed 21 Feb 2024 15:09:49 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     150696
IP address blocks:        103.60.204.0/24 maxlen: 24
                          2400:cf60::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl
                          rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911486F/serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51
        Validity
            Not Before: Feb 21 15:09:49 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65d6123d-5562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b0:0a:93:d8:60:3a:1b:00:97:74:23:ac:4f:
                    63:d7:4b:bb:8b:65:3d:2a:d0:75:84:d7:c3:ce:e6:
                    9b:bf:fc:68:25:e3:87:64:f2:4d:fa:64:e0:00:e2:
                    01:57:9c:12:0c:44:cb:43:b3:fd:f1:76:d0:cf:97:
                    bf:30:ef:95:da:b8:47:1b:00:f6:22:68:09:b1:d1:
                    01:26:69:f3:af:a6:b1:61:08:2e:0f:aa:1b:d7:f7:
                    4d:57:ce:6c:4d:28:27:3f:cc:5e:c8:0c:b5:34:07:
                    50:79:09:7d:91:bb:c4:73:03:b7:ca:37:94:b3:b7:
                    b5:d7:9d:a8:d1:42:b2:48:ba:05:79:16:ad:7b:0a:
                    66:6f:ae:44:66:7b:fb:74:37:fb:f1:cf:63:51:ac:
                    4c:58:b0:2e:ad:3e:1b:7e:87:b4:93:9e:d8:8c:e3:
                    83:7e:19:6e:10:26:72:9c:87:71:c2:6c:6b:35:67:
                    30:ef:ce:8c:73:d3:5f:a2:71:b2:b4:6f:66:69:36:
                    30:4c:d0:4f:52:bc:53:13:40:3f:5c:56:8c:12:23:
                    1a:80:8f:17:79:ca:08:97:90:73:b4:f6:9e:99:36:
                    dd:08:9a:5a:5d:4c:92:39:55:f5:75:37:31:76:34:
                    25:f0:97:76:08:04:a2:7f:12:cf:56:ef:39:63:94:
                    cc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:20:41:2A:7E:C4:DF:19:3A:81:EE:1D:CD:90:C2:A2:36:78:1A:81
            X509v3 Authority Key Identifier:
                keyid:E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/32D8E190D0CB11EEAB1CAF34C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.204.0/24
                IPv6:
                  2400:cf60::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:2f:31:b4:68:96:54:1f:17:5b:08:73:aa:94:72:00:3e:1a:
         1d:fb:17:cd:54:11:be:a5:2e:69:03:d4:9c:c5:af:de:9c:9f:
         3d:1d:df:27:93:7d:b3:1b:af:ed:aa:59:e7:1f:71:e0:d6:ee:
         16:b8:85:54:d0:85:10:30:0e:99:02:b1:56:00:40:26:b9:3e:
         e5:19:97:e5:08:ba:f9:85:cb:79:18:e9:9b:df:fd:0d:d9:f0:
         59:4c:28:fd:98:4d:63:08:89:2b:2f:b0:1f:d5:c5:1c:f1:23:
         8e:67:71:0d:4e:8f:ee:7e:c9:37:0d:d3:ef:bc:8f:e6:db:8c:
         45:43:9d:b4:6f:13:bf:3e:49:05:4d:9d:db:fb:a9:84:47:cd:
         9c:ff:3d:8b:80:d7:4a:78:79:3d:ec:34:d6:da:51:a6:27:88:
         12:a2:61:8b:2f:e1:19:50:2a:b9:0d:e3:d0:c5:8c:5d:bd:03:
         ca:19:0c:58:87:b3:ac:29:79:a8:e1:21:62:b4:7b:ad:3b:0b:
         46:ba:3e:5b:0c:e2:92:8b:cb:0b:d9:ed:8c:b4:9a:89:60:87:
         6c:20:1e:fc:4f:fe:c8:03:49:e2:d3:7a:bd:07:e0:b8:06:a2:
         55:a3:7d:7b:66:32:86:5e:d8:ce:3a:f4:02:d0:27:e0:25:bb:
         6a:fb:19:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:32 2024 by rpki-client on console-ams.rpki-client.org