Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/F597C6BA0C3A11EA8BA9C679C4F9AE02.roa
File:                     F597C6BA0C3A11EA8BA9C679C4F9AE02.roa (raw, json)
Hash identifier:          rfol5thVSN8O2J/3tTWlKpV9hoaEaKM2MfBNtBGO29w=
Subject key identifier:   D7:E8:FC:59:39:CC:B4:9D:C7:CB:F2:F1:7F:B7:8E:C6:4D:08:6C:34
Certificate issuer:       /CN=A9119010/serialNumber=6C05EEAF3F687041D59A49BA1709B83032B74CDC
Certificate serial:       0B62
Authority key identifier: 6C:05:EE:AF:3F:68:70:41:D5:9A:49:BA:17:09:B8:30:32:B7:4C:DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/F597C6BA0C3A11EA8BA9C679C4F9AE02.roa
Signing time:             Sat 20 Apr 2024 19:38:10 +0000
ROA not before:           Sat 20 Apr 2024 19:38:10 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     139806
IP address blocks:        103.145.74.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl
                          rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 20:15:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2914 (0xb62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119010/serialNumber=6C05EEAF3F687041D59A49BA1709B83032B74CDC
        Validity
            Not Before: Apr 20 19:38:10 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=662419a2-63dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3c:13:80:a9:03:e9:0d:0b:19:33:a5:a8:bd:
                    38:06:93:cb:5d:87:ef:0a:71:8d:82:a8:00:10:8f:
                    05:0f:6f:1d:e5:88:be:a4:5b:c6:dd:3b:87:b0:fe:
                    1d:43:ae:59:24:17:ea:07:7e:f5:36:7e:af:57:80:
                    92:9c:82:8e:4e:fa:a4:a8:14:c9:2f:ac:3f:bf:00:
                    31:fe:37:8c:05:61:58:5f:93:74:80:cc:a5:6a:60:
                    b1:2f:81:e3:59:0c:39:23:0b:34:fc:da:87:8f:2e:
                    95:24:0d:1e:ef:e1:34:e2:06:30:29:56:56:05:bf:
                    82:1c:b8:5c:7d:35:c0:3b:92:ca:ae:da:fe:09:aa:
                    7e:9e:7d:5c:14:b2:3c:4e:37:4b:15:72:02:d0:c0:
                    be:63:99:2e:37:30:c4:09:b7:7f:f9:87:3d:95:31:
                    22:14:14:62:19:13:ae:6f:df:45:e0:c1:5e:79:e8:
                    70:97:3b:ca:4d:31:ca:4d:24:b7:a9:ea:e6:5a:a0:
                    50:25:40:b1:3f:44:43:2e:51:83:20:da:b3:a5:f7:
                    6a:9c:2a:03:48:44:4f:4c:35:da:d9:09:28:6d:40:
                    f6:1d:a2:29:e9:41:a2:be:24:8f:61:ca:56:ee:2a:
                    c1:08:e9:07:08:b3:dc:77:b7:19:d3:d0:5d:7c:e0:
                    ce:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E8:FC:59:39:CC:B4:9D:C7:CB:F2:F1:7F:B7:8E:C6:4D:08:6C:34
            X509v3 Authority Key Identifier:
                keyid:6C:05:EE:AF:3F:68:70:41:D5:9A:49:BA:17:09:B8:30:32:B7:4C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/F597C6BA0C3A11EA8BA9C679C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:5f:fa:be:22:72:c2:e9:7d:4a:55:fe:a0:fe:ad:52:2b:23:
         a3:4b:06:18:92:6f:42:35:b5:52:ab:92:45:f6:c5:e3:d7:ab:
         3d:14:af:2b:64:c7:7b:a3:d2:4f:7f:bb:db:60:4d:2c:0b:14:
         73:c8:ea:34:82:fb:5c:0f:c9:5b:90:84:a2:05:22:3c:8c:13:
         6b:46:00:f8:83:c1:7d:91:d5:a5:e1:ce:7b:84:c3:c6:1a:f1:
         67:cb:5d:9d:e9:70:03:11:37:a1:67:81:7a:b2:1f:fb:9e:f2:
         41:2a:ca:a1:d2:a9:17:c3:ea:d3:b2:cf:7a:b2:b8:9b:70:fe:
         38:a5:70:44:ba:e0:99:64:93:3f:f6:0c:83:b6:47:69:2a:ad:
         a1:06:71:cb:ef:66:19:9e:e1:01:19:bf:42:09:70:5b:97:cd:
         a5:52:a1:73:ec:69:bd:32:dc:a2:9c:8b:e5:3f:24:33:61:3e:
         19:de:77:ec:3f:e7:83:52:de:31:38:fd:2b:6e:67:0f:7c:de:
         31:29:63:75:0b:37:fc:33:76:ae:04:d4:59:c2:69:f9:33:90:
         cb:56:50:3f:95:a5:f2:1d:06:1a:1c:29:f6:d7:33:85:23:b7:
         0f:51:98:a2:25:d5:06:28:38:de:a5:ff:fa:49:94:05:5d:ed:
         c0:2b:37:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:13:08 2024 by rpki-client on console-ams.rpki-client.org