Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/D07411B6661211ECBCD61A65C4F9AE02.roa
File:                     D07411B6661211ECBCD61A65C4F9AE02.roa (raw, json)
Hash identifier:          nL0Z119WnXgRu2rtcMKUBxI4xbIxjYpGKvjnrU4cw64=
Subject key identifier:   0D:FA:56:86:65:22:6B:C1:D1:D5:3E:F1:DD:4B:0A:EC:89:E5:54:73
Certificate issuer:       /CN=A91168FD/serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF
Certificate serial:       2074
Authority key identifier: FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/D07411B6661211ECBCD61A65C4F9AE02.roa
Signing time:             Wed 14 Feb 2024 16:33:15 +0000
ROA not before:           Wed 14 Feb 2024 16:33:15 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     64092
IP address blocks:        103.210.60.0/22 maxlen: 24
                          2404:6280::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl
                          rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Jun 2024 16:18:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8308 (0x2074)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91168FD/serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF
        Validity
            Not Before: Feb 14 16:33:15 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65cceb4b-88bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:85:32:f8:3a:d1:11:1e:b8:5c:35:61:ed:4c:
                    06:99:47:7a:06:64:43:8e:8d:11:8a:53:91:26:11:
                    f8:00:4d:a9:70:b8:11:3c:68:2e:aa:65:ba:2f:6f:
                    a9:d4:fc:93:62:ab:96:f6:15:59:ab:27:cc:d2:86:
                    7b:4b:8f:65:2f:ce:b8:0d:c7:0f:c0:66:7d:98:fc:
                    77:95:e3:43:e9:33:0f:a6:9c:f1:b9:53:0b:cc:99:
                    63:4d:0f:ea:33:f5:82:c8:c9:54:aa:a2:bd:07:a9:
                    ef:35:60:29:df:cb:f5:29:ef:20:cd:18:ab:0d:b5:
                    0c:58:b8:54:c6:1e:91:a7:84:ce:3a:34:86:8a:1e:
                    6b:7c:4a:76:29:33:6f:3f:a4:6e:76:e2:49:3d:37:
                    df:82:15:be:e0:aa:7f:3f:28:f9:43:bf:d0:2d:9d:
                    3e:38:54:ec:5d:c7:91:bf:55:90:32:33:5a:7e:a8:
                    d8:c6:56:0e:5c:eb:5e:1a:3c:12:41:19:78:6d:c5:
                    f8:b8:f0:7c:be:cf:46:47:f9:94:e4:6c:b8:4b:51:
                    34:7d:48:ad:6f:58:6a:f7:5e:3b:e8:04:ba:cf:98:
                    85:5f:a2:d1:47:7b:90:cb:80:a6:b9:99:ab:4e:09:
                    95:8a:16:b4:d0:9b:c4:bb:9f:27:04:76:82:fe:57:
                    ee:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:FA:56:86:65:22:6B:C1:D1:D5:3E:F1:DD:4B:0A:EC:89:E5:54:73
            X509v3 Authority Key Identifier:
                keyid:FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/D07411B6661211ECBCD61A65C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.60.0/22
                IPv6:
                  2404:6280::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:e5:4f:97:2f:09:0d:57:2e:3f:a0:ed:85:ef:42:6c:00:f7:
         2f:dd:ea:c3:44:38:ff:37:6d:5e:6f:91:f0:9f:97:10:ec:f6:
         f4:8d:93:5d:88:0f:7e:2d:59:3e:e5:e9:8b:8b:7f:b7:50:b5:
         ca:67:24:a4:20:9f:0c:22:81:51:cd:ce:23:85:27:30:a4:0b:
         34:3f:ca:1b:87:f6:f1:30:7a:a8:fb:83:28:2a:03:55:24:c4:
         61:65:70:00:65:4b:54:bc:e1:0f:2d:8d:af:ae:22:74:5e:99:
         1a:e1:aa:4c:54:10:b3:40:00:ee:81:65:01:87:18:98:4a:3a:
         c6:3e:cc:d0:c1:9e:d6:79:2d:da:f1:5a:3b:08:b3:b4:4b:c5:
         8d:63:71:45:56:f6:07:e7:bd:9e:be:de:f0:39:e3:b8:2b:1c:
         63:79:09:3b:3d:04:42:9d:5f:a6:a3:bd:23:7c:ae:27:50:7f:
         f6:fa:de:c3:e1:e3:98:e0:fc:76:66:33:ac:3c:84:b5:3e:04:
         bc:03:e9:75:fb:24:02:5e:ae:44:16:c8:8e:e1:5c:c2:0c:4e:
         6c:7d:4f:b5:ed:9f:ef:30:48:3a:ab:22:45:f1:9c:b6:78:25:
         69:d1:86:63:e9:c7:a3:ed:4f:2c:70:da:30:0c:35:3f:02:1c:
         1c:9c:8a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 19:10:21 2024 by rpki-client on console-ams.rpki-client.org