Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/8E806136117D11ECB7B68E43C4F9AE02.roa
File:                     8E806136117D11ECB7B68E43C4F9AE02.roa (raw, json)
Hash identifier:          b6uj6dwxXCsv8J7j8qp5OXl/r0h0l4b73MZ/xHXhJf0=
Subject key identifier:   0D:52:D9:97:53:CB:E1:3D:63:FB:49:C2:F1:93:AB:8B:45:8B:3F:E0
Certificate issuer:       /CN=A912D9BE/serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1
Certificate serial:       03AE
Authority key identifier: 8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/8E806136117D11ECB7B68E43C4F9AE02.roa
Signing time:             Wed 23 Aug 2023 01:02:08 +0000
ROA not before:           Wed 23 Aug 2023 01:02:08 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     55707
IP address blocks:        103.168.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl
                          rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 01:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 942 (0x3ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D9BE/serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1
        Validity
            Not Before: Aug 23 01:02:08 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64e55a8f-bb8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1b:37:6d:73:e9:71:dc:2b:ef:3c:42:81:18:
                    65:e3:69:1e:65:59:ba:dc:a2:a6:38:b9:64:b4:b4:
                    d0:e6:21:2c:3d:7c:00:c5:dc:52:ae:4d:da:8d:66:
                    8f:61:b0:72:c1:82:02:b8:4b:37:72:39:6a:28:b4:
                    68:79:61:fa:fc:39:28:32:c9:95:7d:0a:d8:97:72:
                    1c:f5:f9:fc:d1:10:71:4c:bd:06:ab:eb:2b:2e:99:
                    89:0d:b6:77:b8:a4:46:cb:44:3d:77:49:51:20:e3:
                    cf:b2:98:4d:ca:45:ea:52:5b:b3:df:93:d7:8c:ae:
                    07:1b:0c:a3:87:78:c6:91:f5:1f:70:80:e3:e6:c2:
                    2f:40:39:c3:28:3e:cf:e5:b4:3f:b5:da:75:6e:54:
                    63:34:9e:a9:ac:13:5a:28:f6:21:ae:dd:df:bf:40:
                    5f:ef:47:12:22:99:54:85:06:f6:24:77:f9:0f:09:
                    58:dd:4b:e7:75:6e:e6:f9:64:63:fd:f6:d7:4b:2f:
                    f4:e6:26:cb:13:d0:f9:37:0b:10:ed:fa:c3:33:5f:
                    aa:78:5a:60:f0:c8:0f:f3:3c:89:ec:d8:76:48:66:
                    9b:15:5b:39:2c:e9:5e:f4:38:c3:91:4d:e1:53:91:
                    9c:c1:38:50:06:ba:11:61:e2:56:8e:10:e8:ac:ee:
                    46:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:52:D9:97:53:CB:E1:3D:63:FB:49:C2:F1:93:AB:8B:45:8B:3F:E0
            X509v3 Authority Key Identifier:
                keyid:8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/8E806136117D11ECB7B68E43C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:2c:e2:b0:d7:26:cc:bb:8a:0a:da:89:b1:c9:7a:f7:f3:d5:
         41:1d:e7:65:3f:94:d8:19:57:f5:67:1b:7b:1b:13:4b:7b:f2:
         68:f1:c7:00:47:61:53:50:ad:8e:6a:64:96:31:54:b0:47:30:
         7b:e7:96:ff:05:9c:2c:a8:89:b2:a4:ce:f0:db:b3:72:e9:cf:
         81:84:fc:c5:fd:e1:a2:3d:90:81:5a:a0:3f:6b:30:6a:7f:02:
         b9:f9:d0:2a:64:56:38:66:84:0c:de:86:a8:14:56:53:7b:36:
         30:9a:b7:53:0a:9c:01:a8:ea:b9:6b:b0:1b:20:9e:cd:d5:94:
         95:b7:e6:27:12:e8:92:24:da:36:38:6a:3b:fd:52:75:2c:07:
         3d:a0:94:94:11:d0:ad:88:e9:3e:cc:8d:89:9f:a3:36:8a:0a:
         ce:b7:41:ee:e4:ef:91:23:e8:b1:85:ba:91:76:c3:eb:79:ad:
         31:a2:fa:cd:21:0c:7a:c7:ae:bf:af:df:b6:94:df:5d:8c:d1:
         c6:15:6b:2f:b2:ef:8b:d7:a5:29:31:b7:23:07:30:75:d1:aa:
         25:af:06:0f:4a:c4:c1:27:68:c7:2d:e4:9b:94:36:d9:f4:ca:
         c7:9c:89:06:9c:ef:33:b9:80:01:89:7e:cc:72:eb:99:1e:8d:
         01:39:85:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:59:06 2024 by rpki-client on console-ams.rpki-client.org