Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/FD4E307AFEA711EDBC673B4BC4F9AE02.roa
File:                     FD4E307AFEA711EDBC673B4BC4F9AE02.roa (raw, json)
Hash identifier:          8fhVAOrBtPoFZLM3BfANhmyQiq3l6EdqiAUT4gYpGG0=
Subject key identifier:   A2:04:55:CE:C1:88:77:4A:84:55:8F:C2:08:17:2B:58:BF:50:A8:6C
Certificate issuer:       /CN=A912B983/serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85
Certificate serial:       7B
Authority key identifier: 9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/FD4E307AFEA711EDBC673B4BC4F9AE02.roa
Signing time:             Tue 09 Jan 2024 06:08:02 +0000
ROA not before:           Tue 09 Jan 2024 06:08:02 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     140869
IP address blocks:        103.42.6.0/24 maxlen: 24
                          103.42.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl
                          rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 06:35:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B983/serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85
        Validity
            Not Before: Jan  9 06:08:02 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=659ce2c1-cc71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d9:ef:f7:52:78:75:aa:e4:5c:5b:9a:ba:7f:
                    c4:13:98:46:e1:79:44:b1:6b:c4:b6:31:70:48:6e:
                    62:b9:e5:34:16:1f:0f:b7:ff:31:98:cb:5e:ff:77:
                    8a:7b:e5:8c:c5:55:2c:09:20:ad:e6:f8:60:25:fc:
                    6b:b5:b3:fa:70:5e:ef:52:40:e7:a7:a4:21:60:a1:
                    84:25:f8:d5:50:ca:36:96:78:bc:79:d3:38:7f:ae:
                    5e:a1:07:e7:7d:f8:da:bf:1e:da:c6:b4:12:5f:21:
                    bd:a5:96:c9:0e:d8:7a:43:4b:31:d0:e5:75:98:3e:
                    72:4a:71:1f:89:93:45:e9:55:62:f6:6c:74:8e:cc:
                    26:ae:e3:68:00:25:2b:56:14:44:1b:d6:4e:40:a7:
                    81:0f:6c:95:d8:da:44:ba:59:9a:5a:98:5c:5c:48:
                    44:d3:51:57:be:47:99:c8:50:f3:0a:74:98:0b:d4:
                    54:ac:78:d0:26:8b:64:f5:89:67:cc:82:49:f0:51:
                    dd:d2:97:0b:72:91:a1:aa:15:c4:61:1d:b3:be:42:
                    24:20:b4:75:d5:e4:74:09:43:2b:46:fb:98:75:8b:
                    bf:72:30:66:1f:9b:3e:19:bc:57:a4:e0:bc:8c:b6:
                    64:95:4c:29:3d:a2:72:81:c8:5e:3f:87:4f:20:67:
                    68:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:04:55:CE:C1:88:77:4A:84:55:8F:C2:08:17:2B:58:BF:50:A8:6C
            X509v3 Authority Key Identifier:
                keyid:9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/FD4E307AFEA711EDBC673B4BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:ce:2a:13:6c:dc:47:fd:89:7d:66:a0:cc:7c:df:2c:48:6f:
         3a:40:cb:d2:35:d4:11:b0:56:5e:b3:37:9c:4d:ab:d0:bb:bb:
         40:0f:f1:6a:51:21:ca:15:15:cb:55:b7:48:a9:65:a9:7f:3b:
         6f:b8:ca:bd:1c:4c:1f:1d:4e:4a:66:fb:5e:25:3c:1a:2c:8a:
         88:c0:29:ec:1d:66:1c:9a:ac:70:a4:aa:ec:c6:2e:d6:ce:4f:
         8c:89:6f:e0:5a:fe:be:8a:44:3b:62:1b:6d:a6:83:ff:bb:8c:
         a1:36:71:34:03:32:2d:56:1b:9d:96:22:5f:e1:cd:b0:08:79:
         f4:f8:8e:2f:c3:e1:c7:55:fb:0d:32:65:5d:3e:bb:39:59:6a:
         c0:81:15:22:bb:90:93:fc:66:55:59:d7:4d:74:b8:82:bd:3c:
         a8:7c:1a:e1:42:72:b1:46:70:0b:cf:6c:f7:95:ef:46:d1:13:
         e1:3e:f8:55:d9:49:66:de:d5:e3:ea:ab:9e:a8:25:e0:7f:61:
         4b:ae:d5:64:b1:66:d6:c0:14:ac:35:0f:9c:d0:c6:20:9b:03:
         d8:3b:05:bb:55:f0:61:24:b8:0e:9d:37:de:d8:a3:1c:17:4c:
         5d:1c:a4:f4:f2:93:12:55:fd:3e:d2:04:4f:e0:e0:a6:44:86:
         19:aa:d1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:52:46 2024 by rpki-client on console-ams.rpki-client.org