Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/7369922E680A11EEA25B1D1FC4F9AE02.roa
File:                     7369922E680A11EEA25B1D1FC4F9AE02.roa (raw, json)
Hash identifier:          fXjP05p8ued4HQ6KJnvZ7btsZDNaHLwlJqya0wuGxPU=
Subject key identifier:   92:AA:F4:EB:02:4D:57:04:0F:E3:9D:21:BB:ED:65:EF:10:8E:97:78
Certificate issuer:       /CN=A911E369/serialNumber=FE1391C0B226C8CEBFA4A2AD6696AE4B82BF7E27
Certificate serial:       DC
Authority key identifier: FE:13:91:C0:B2:26:C8:CE:BF:A4:A2:AD:66:96:AE:4B:82:BF:7E:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hORwLImyM6_pKKtZpauS4K_fic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/7369922E680A11EEA25B1D1FC4F9AE02.roa
Signing time:             Thu 15 Feb 2024 05:16:35 +0000
ROA not before:           Thu 15 Feb 2024 05:16:35 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     141386
IP address blocks:        103.60.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.crl
                          rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hORwLImyM6_pKKtZpauS4K_fic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E369/serialNumber=FE1391C0B226C8CEBFA4A2AD6696AE4B82BF7E27
        Validity
            Not Before: Feb 15 05:16:35 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65cd9e33-9f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c4:37:23:25:98:bf:23:5b:4a:0a:1c:9f:d5:
                    12:50:53:47:b5:43:f5:4d:63:a3:42:f9:6d:b0:ff:
                    a3:81:82:c6:02:e8:1b:b5:3b:87:fa:35:38:05:71:
                    08:7c:87:eb:95:f4:36:80:aa:fd:9e:ab:26:d4:29:
                    80:d3:e1:0e:1d:3a:a5:e1:5a:bb:39:66:28:f8:38:
                    28:4c:d8:82:a1:d2:62:0b:7e:1b:fd:c6:4d:69:29:
                    4f:8a:33:35:8b:3d:d9:c7:a2:8c:71:39:87:3c:09:
                    42:d9:c0:75:19:b8:8e:7d:52:e0:3f:4e:a6:7a:85:
                    d4:b5:17:f3:55:ea:85:fa:b4:b1:4e:a4:e4:25:c9:
                    58:65:8e:69:4a:f0:60:f6:9b:62:17:a8:43:a5:3c:
                    3c:11:d5:fe:0d:34:8d:5a:66:24:6c:d5:5d:bf:b8:
                    d2:f2:b4:bb:0c:78:7e:1f:22:78:ac:d5:b1:75:23:
                    54:c2:84:2e:60:f8:6f:8f:da:f9:bc:ac:88:36:9e:
                    5d:36:5d:ac:97:70:b2:1f:09:99:03:29:5f:89:a2:
                    4e:62:bb:29:4d:2a:8b:8b:9f:1d:64:76:0a:92:75:
                    b1:48:ae:9e:8c:75:18:9a:13:ad:3b:37:d6:7c:95:
                    1a:4a:36:e9:62:e1:38:c3:98:6f:81:11:1b:a6:67:
                    ac:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:AA:F4:EB:02:4D:57:04:0F:E3:9D:21:BB:ED:65:EF:10:8E:97:78
            X509v3 Authority Key Identifier:
                keyid:FE:13:91:C0:B2:26:C8:CE:BF:A4:A2:AD:66:96:AE:4B:82:BF:7E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hORwLImyM6_pKKtZpauS4K_fic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/7369922E680A11EEA25B1D1FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:08:70:99:42:13:0c:f1:43:5c:de:c6:38:84:bd:49:76:c1:
         15:6c:0f:16:2d:e8:37:59:50:11:36:e9:69:94:f9:32:a2:96:
         1a:35:bc:ad:c3:33:e3:d5:9a:d2:ec:38:4f:c0:e9:26:04:28:
         89:93:15:11:d4:1c:e3:6b:52:1b:61:6b:70:3c:f3:b1:52:09:
         e9:d7:8a:c6:d1:a4:cf:e6:7c:6a:60:79:55:2a:67:4b:5a:f2:
         61:9b:ce:1f:76:bd:08:52:0c:b8:25:04:2b:43:99:1f:dd:9b:
         2a:59:0b:ec:8e:14:f0:6b:8d:db:e9:3d:0a:ae:2e:43:5a:3e:
         18:11:7a:fb:da:5d:65:80:a8:6b:78:16:a1:ea:eb:d3:85:6d:
         68:9c:eb:c7:25:c7:5b:25:cf:96:c3:a4:71:64:17:9a:d4:7e:
         63:d9:60:ab:ed:9f:26:6d:3c:b6:ac:a8:38:74:ac:40:03:e6:
         46:bb:97:72:e3:30:5c:71:11:9a:ce:fe:2e:eb:11:1f:a0:b2:
         77:4a:5f:dd:99:cb:e6:43:e5:e0:57:45:53:84:ba:7b:8d:bb:
         4b:48:0a:94:e5:f4:af:90:f9:25:f3:95:17:13:1f:2d:f0:61:
         ec:5e:87:21:90:af:5e:2b:b5:94:61:cf:06:c5:0f:03:e5:e1:
         89:ec:8c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:35 2024 by rpki-client on console-ams.rpki-client.org