Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/977ED926B7AD11ECA2E94A7EC4F9AE02.roa
File:                     977ED926B7AD11ECA2E94A7EC4F9AE02.roa (raw, json)
Hash identifier:          YRQwXoWlff5FmF3qZ3XEn7/uI1z3f2BtSFCupGXa0R4=
Subject key identifier:   72:B6:72:B3:91:08:2C:83:1D:17:80:A9:50:AA:8B:64:08:2A:EB:9F
Certificate issuer:       /CN=A911F55D/serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC
Certificate serial:       0222
Authority key identifier: 1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/977ED926B7AD11ECA2E94A7EC4F9AE02.roa
Signing time:             Tue 03 Oct 2023 02:43:55 +0000
ROA not before:           Tue 03 Oct 2023 02:43:55 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        103.195.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl
                          rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 03:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 546 (0x222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F55D/serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC
        Validity
            Not Before: Oct  3 02:43:55 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=651b7feb-d44d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:85:f7:f2:4c:cc:d9:9f:1a:f8:19:e1:8b:a1:
                    f0:26:0a:38:0a:1d:79:86:61:3f:82:01:7b:e8:b8:
                    ad:fe:72:a0:db:4c:80:8e:52:b0:1b:73:b9:39:0a:
                    db:49:97:a3:30:25:b4:6b:4b:b9:5e:84:13:d3:79:
                    f5:c4:85:83:e4:fb:19:00:fe:34:de:92:5b:75:d1:
                    5b:85:20:79:5b:5a:77:48:9a:d1:0a:a6:1e:1e:23:
                    c4:c8:71:74:31:1e:25:85:db:74:47:ca:7c:62:0c:
                    06:0c:d5:3f:b1:0f:eb:3f:87:cd:b4:d3:2c:0d:5e:
                    cc:de:49:d7:40:24:8e:90:f3:bd:b0:90:3f:79:75:
                    55:0c:b6:5f:2b:b6:99:8b:72:6c:f8:96:08:88:3d:
                    49:29:96:7d:33:b4:93:e6:70:80:2c:4c:2d:32:ec:
                    be:79:56:fd:2c:1f:13:a0:d7:1f:8c:50:f3:bb:24:
                    b3:e4:f0:be:29:b2:c1:61:c9:84:93:8f:8e:2d:90:
                    eb:97:3e:4e:01:31:e9:e7:04:8e:e9:9e:4d:d4:e3:
                    d8:9f:b4:0c:14:51:99:d4:21:12:57:2e:c0:00:ac:
                    0e:a2:b4:8d:99:61:b9:13:f9:ae:b6:1e:2c:75:14:
                    19:e8:76:36:9e:83:a1:44:1b:e5:86:f1:94:24:6a:
                    32:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B6:72:B3:91:08:2C:83:1D:17:80:A9:50:AA:8B:64:08:2A:EB:9F
            X509v3 Authority Key Identifier:
                keyid:1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/977ED926B7AD11ECA2E94A7EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.195.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:84:ac:6b:91:56:89:ad:81:fa:36:85:04:a9:61:58:b9:a9:
         56:a3:66:43:8a:ab:80:d8:56:4a:22:4d:c8:e9:08:31:4e:d5:
         99:0b:9e:0b:6b:1f:e0:c4:2e:04:2c:74:eb:1e:eb:8b:67:0f:
         0d:21:c7:64:51:75:a3:ad:ba:1d:9e:79:b8:8f:fc:16:b4:68:
         99:cd:4c:e6:0a:b1:12:3c:35:3a:0c:aa:f9:d4:a0:e8:1d:c6:
         18:90:ce:2b:70:8c:ab:c6:e1:ab:3e:15:8a:00:f5:d6:b9:75:
         53:7e:cf:ed:75:1b:ae:e9:92:1c:88:15:3f:6f:0c:ae:0e:52:
         0f:9b:c7:ab:63:98:4a:76:1b:4f:f7:c2:d1:a6:06:47:8a:5a:
         0d:4b:59:80:81:17:9e:79:f7:3d:46:4c:77:9a:86:d8:51:af:
         d2:87:8f:b2:37:84:a4:13:1f:c5:da:89:76:d6:76:b8:b3:9c:
         4a:b5:fd:1f:7c:36:34:16:ac:55:7e:f5:fe:cd:22:ea:e5:af:
         fe:02:a4:c6:50:4f:d9:d5:67:a5:4b:f7:1c:1a:96:72:4e:17:
         ce:a5:49:f9:99:a3:0f:2a:4e:3c:da:c0:7d:af:87:fb:a7:e6:
         03:09:f8:b2:a0:ea:38:2b:dd:cf:ec:08:4a:2a:fa:d9:46:cd:
         fe:4f:1a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:44 2024 by rpki-client on console-ams.rpki-client.org