Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/6F706208BE0F11EB90239C1AC4F9AE02.roa
File:                     6F706208BE0F11EB90239C1AC4F9AE02.roa (raw, json)
Hash identifier:          3r/XpjPTsdyBZdadWG+NjRcIRHMNeVEfAU5t54XzOrA=
Subject key identifier:   0D:07:05:8F:0B:16:79:ED:7D:8B:13:97:F7:B3:DD:CB:63:0E:50:95
Certificate issuer:       /CN=A9127656/serialNumber=61B0A11BD944BCDA865BB9B1FBF7EE06D573BD71
Certificate serial:       04E9
Authority key identifier: 61:B0:A1:1B:D9:44:BC:DA:86:5B:B9:B1:FB:F7:EE:06:D5:73:BD:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbChG9lEvNqGW7mx-_fuBtVzvXE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/6F706208BE0F11EB90239C1AC4F9AE02.roa
Signing time:             Tue 05 Mar 2024 01:03:53 +0000
ROA not before:           Tue 05 Mar 2024 01:03:53 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     63954
IP address blocks:        103.51.220.0/24 maxlen: 24
                          103.94.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.crl
                          rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbChG9lEvNqGW7mx-_fuBtVzvXE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 01:06:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1257 (0x4e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127656/serialNumber=61B0A11BD944BCDA865BB9B1FBF7EE06D573BD71
        Validity
            Not Before: Mar  5 01:03:53 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65e66f78-06a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d1:de:e2:46:ef:93:c6:91:34:ab:0b:c2:5f:
                    6a:ca:98:d6:42:c0:5d:fb:65:d0:75:a2:74:20:70:
                    66:a3:b9:97:0d:f4:9d:94:aa:63:2f:96:b5:73:d4:
                    3c:5a:b3:bb:64:b1:0f:05:a7:63:f1:bb:fd:ab:41:
                    5f:e3:20:5e:50:30:3f:23:37:5e:28:02:ea:0a:1f:
                    eb:77:31:62:dc:c2:0a:1c:67:04:74:9a:b6:c3:96:
                    fb:05:eb:9b:e5:ad:13:91:39:d5:67:b3:11:84:80:
                    81:d8:44:9a:08:80:64:96:7f:bc:88:f2:b8:36:5a:
                    39:3c:70:24:ed:bd:09:98:62:49:39:87:db:5f:a2:
                    c4:37:12:f4:4d:f6:45:2d:ed:db:db:75:aa:c7:c6:
                    df:2b:44:f5:22:3c:eb:bf:fb:ed:31:40:18:f6:e2:
                    00:10:72:4a:32:e9:4a:ee:22:ad:f3:b0:50:cc:c9:
                    e7:b4:6d:18:b5:9d:07:79:64:14:bb:9b:97:9b:cd:
                    0c:2c:13:78:75:8f:de:ca:7c:50:01:dc:ec:93:4d:
                    37:86:eb:7c:d6:e4:eb:c1:df:0a:6c:b6:82:8f:c8:
                    9a:56:fe:30:12:c1:c8:7d:16:25:17:eb:3f:8b:16:
                    3c:9c:a4:fc:ab:77:db:5a:92:99:fe:09:8c:1c:b7:
                    90:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:07:05:8F:0B:16:79:ED:7D:8B:13:97:F7:B3:DD:CB:63:0E:50:95
            X509v3 Authority Key Identifier:
                keyid:61:B0:A1:1B:D9:44:BC:DA:86:5B:B9:B1:FB:F7:EE:06:D5:73:BD:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbChG9lEvNqGW7mx-_fuBtVzvXE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/6F706208BE0F11EB90239C1AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.220.0/24
                  103.94.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:fa:c8:ff:92:1e:7c:13:41:ba:a0:7f:36:b5:ac:fc:65:a2:
         fc:50:c5:4d:06:dd:2e:db:f4:d5:e5:e0:33:88:21:37:d2:be:
         47:07:9a:c0:27:03:29:f7:91:59:1a:43:f5:68:ab:0b:98:fc:
         f4:62:30:75:d4:17:83:4c:41:9e:a8:92:40:83:98:63:6f:24:
         1b:d3:1a:de:52:be:b4:62:93:2c:89:b5:ec:fa:08:46:aa:d0:
         37:cc:20:aa:45:a4:0d:de:a2:ae:79:d7:a8:59:b4:5a:89:fe:
         43:02:80:c9:75:58:8d:3a:7d:33:20:ed:45:0d:22:cf:c7:38:
         9c:0b:ae:64:69:8d:82:d1:e5:3c:c3:30:f9:70:76:ff:bd:3d:
         b0:f0:66:9a:cc:2c:59:81:42:0a:07:31:23:8f:ab:2f:03:bf:
         31:b4:06:39:de:8c:5a:53:01:c7:9d:68:90:ad:19:63:4b:c7:
         c9:ff:c3:d7:6f:a2:20:bb:b8:b8:13:14:ff:d5:07:61:24:21:
         22:0e:57:7e:f9:b9:85:bf:d9:c8:a0:b4:29:91:bb:5a:f3:26:
         04:01:1e:73:e9:4c:23:b4:16:53:ef:5b:81:a9:00:35:ac:f7:
         1a:ea:8f:f4:7b:db:b7:d3:02:29:dc:1d:c3:4d:05:58:dc:7c:
         fd:30:fc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:58:14 2024 by rpki-client on console-fra.rpki-client.org