Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/971C513C022111EFBBBD7C47C4F9AE02.roa
File:                     971C513C022111EFBBBD7C47C4F9AE02.roa (raw, json)
Hash identifier:          QuMBlcTc7QujQ/SOoXxGFQuUtssnMEkGa1IbX48EXaw=
Subject key identifier:   0D:B9:BF:08:C1:41:92:6A:B6:F2:2D:CE:50:C3:31:65:7B:51:84:0D
Certificate issuer:       /CN=A912BE9D/serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C
Certificate serial:       0615
Authority key identifier: BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/971C513C022111EFBBBD7C47C4F9AE02.roa
Signing time:             Sat 10 Aug 2024 23:31:06 +0000
ROA not before:           Sat 10 Aug 2024 23:31:06 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     137076
IP address blocks:        103.8.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl
                          rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1557 (0x615)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BE9D/serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C
        Validity
            Not Before: Aug 10 23:31:06 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66b7f83a-6e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b3:37:0c:8e:54:a4:c3:db:b0:bb:d4:2b:0d:
                    54:23:16:cd:2e:74:51:7a:bd:48:5f:15:14:90:09:
                    ac:4c:05:78:d0:e8:35:dc:6e:da:af:e3:ed:51:b1:
                    c2:23:54:73:e0:41:00:ef:31:db:a9:3f:26:ba:54:
                    ed:09:03:4a:f4:d1:d8:b0:6f:be:e7:ef:f8:1b:7c:
                    6e:b7:13:8a:59:a5:e6:93:56:1d:37:0f:02:a1:d6:
                    4e:81:9c:6e:3f:20:d2:12:4b:58:05:b0:c0:34:d1:
                    ca:e1:9d:97:d7:60:bd:74:e3:77:5f:36:72:3b:6c:
                    a4:9c:41:e3:ea:a5:7b:5d:32:4f:3b:e6:a0:7e:01:
                    85:5c:95:d2:82:bb:61:cd:4c:b6:1c:39:61:ea:20:
                    92:8e:c7:7f:52:e5:93:88:12:82:19:0a:ca:14:5c:
                    f0:75:ea:af:34:d5:72:88:2d:df:92:b6:23:9e:2f:
                    87:d9:0a:ed:d9:23:2f:6b:05:db:34:01:e8:6e:1f:
                    c4:ab:ee:7d:1d:8c:96:76:5c:39:5a:df:c5:85:1b:
                    b7:cf:fa:f2:a4:72:de:a6:9a:16:9e:1a:10:a8:aa:
                    5c:cf:6f:8a:e3:59:75:48:dd:7e:68:ef:05:81:31:
                    b9:b6:c4:73:a7:de:14:46:80:a4:11:9a:1f:c5:53:
                    99:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B9:BF:08:C1:41:92:6A:B6:F2:2D:CE:50:C3:31:65:7B:51:84:0D
            X509v3 Authority Key Identifier:
                keyid:BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/971C513C022111EFBBBD7C47C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.8.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:1a:63:cf:51:dc:74:5f:52:91:14:63:a1:a8:45:52:45:8f:
         f9:40:63:ae:02:58:a5:8a:f2:a7:07:5c:16:7c:30:b6:60:d0:
         ad:ef:10:fe:bb:82:eb:51:e3:6c:bf:b9:66:60:23:cd:fc:e4:
         55:42:c7:0b:0b:4a:a1:b3:96:59:89:e0:10:41:8e:38:86:4e:
         a9:53:64:01:99:b0:e4:77:33:e3:a4:b3:33:fc:3d:d7:03:ed:
         cd:05:ae:1e:2f:3c:3e:63:eb:87:d4:fb:7c:49:da:d6:5f:1e:
         c2:2a:dc:5a:78:64:ba:3a:2f:ae:39:4f:7a:da:c3:70:df:03:
         7a:fe:2f:20:04:be:93:13:8e:53:6c:68:1b:20:8f:4a:8c:d9:
         4f:a7:1f:a5:df:55:50:d7:dc:43:bb:10:5e:b2:29:a3:80:00:
         10:7c:05:e1:39:fc:0c:bb:7b:5f:85:c7:fc:96:60:98:cc:3a:
         21:9b:8e:56:3e:84:57:c9:41:82:b4:11:91:2e:9e:a1:6c:3d:
         d4:ae:aa:98:03:82:61:76:f5:f8:f4:90:1e:0b:1c:11:37:94:
         54:27:78:6e:20:34:8c:2d:12:6f:f3:2b:0b:ee:79:46:47:a5:
         13:b0:1d:3d:0c:98:da:10:0f:02:e9:0e:68:b1:23:80:3a:db:
         e4:54:a1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:36 2024 by rpki-client on console-ams.rpki-client.org