Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/7142EF7E30F511ED91FE0B2CC4F9AE02.roa
File:                     7142EF7E30F511ED91FE0B2CC4F9AE02.roa (raw, json)
Hash identifier:          fh/nPQv/nYQcKywo8IbkfJ3ertJ4PhkZqi8lqFawXaM=
Subject key identifier:   56:7D:04:50:F6:97:4D:59:66:D2:65:32:6A:41:F7:8F:DC:0C:F1:6E
Certificate issuer:       /CN=A912DB83/serialNumber=5499CE363DF05C949322348829799B10EFF1D392
Certificate serial:       0220
Authority key identifier: 54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/7142EF7E30F511ED91FE0B2CC4F9AE02.roa
Signing time:             Wed 21 Aug 2024 03:16:08 +0000
ROA not before:           Wed 21 Aug 2024 03:16:08 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     150004
IP address blocks:        103.190.128.0/23 maxlen: 24
                          2400:9060::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl
                          rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 544 (0x220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DB83/serialNumber=5499CE363DF05C949322348829799B10EFF1D392
        Validity
            Not Before: Aug 21 03:16:08 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66c55bf8-3499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:32:6b:de:3d:e7:94:a2:67:58:be:fa:89:22:
                    24:a6:e0:cc:5e:46:53:37:f5:7b:4a:c7:7d:28:07:
                    3a:1c:66:60:9a:24:ee:6f:28:a4:14:21:7a:22:79:
                    46:73:1e:cc:08:87:5f:51:55:5b:a8:a3:b0:12:8a:
                    6a:db:ad:99:79:e4:c4:ff:a5:02:fc:7b:d2:05:d9:
                    d4:3e:2d:b7:00:90:5f:79:12:4c:63:db:88:8e:7f:
                    bf:3a:77:1d:5f:bb:ca:92:e0:c8:bf:bc:bf:12:b0:
                    e5:8c:a5:ab:75:e1:01:80:cf:2a:1f:df:50:14:66:
                    c1:f1:18:12:95:8f:36:29:b3:70:d2:0a:25:e5:9b:
                    21:24:9d:f0:8d:b9:53:ff:f7:0e:b4:9a:af:74:52:
                    d3:1b:9a:a3:d9:b6:5b:72:1e:eb:4a:0b:15:1f:ef:
                    53:af:fa:b9:5d:b1:46:2a:f2:3e:56:32:83:b2:60:
                    4c:5b:fe:6c:2e:49:5c:8f:d3:c3:0a:ae:46:d9:e8:
                    3d:c1:b5:fb:27:eb:ee:4b:af:41:ec:82:03:81:f1:
                    63:0b:1e:95:f4:ab:33:70:a2:4c:bf:c5:6d:27:b4:
                    77:f1:3a:37:41:fd:64:80:53:88:9d:a8:20:eb:19:
                    27:20:fe:77:8c:bb:f3:79:61:c4:46:38:f8:82:e5:
                    fb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7D:04:50:F6:97:4D:59:66:D2:65:32:6A:41:F7:8F:DC:0C:F1:6E
            X509v3 Authority Key Identifier:
                keyid:54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/7142EF7E30F511ED91FE0B2CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.128.0/23
                IPv6:
                  2400:9060::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:b6:1e:e0:3e:4e:f9:e6:c3:9b:3d:1c:a9:a8:e3:f3:59:49:
         33:ad:fb:ee:3d:18:c1:34:19:ec:38:94:18:29:bd:22:b5:bd:
         ae:83:8c:e4:62:f6:78:eb:2d:f6:f2:a6:29:9f:b3:32:48:47:
         2d:1e:b5:4a:4c:79:67:32:e4:32:5a:db:05:e1:ee:db:7e:ce:
         60:0c:8b:a9:67:a9:75:8c:84:03:cc:bc:f1:c9:b8:8c:80:50:
         0d:30:fe:e4:b8:60:f1:64:2c:a2:b2:a8:f6:c6:3f:b0:2a:09:
         96:89:b9:22:c1:0c:bc:47:24:95:be:67:66:9e:6f:c7:ce:94:
         f3:45:60:ca:f8:95:31:dd:b8:fa:c9:2f:9f:d6:28:13:e4:8a:
         19:3d:1f:a7:b0:cf:2e:39:fd:82:5a:95:ed:62:e2:1c:02:07:
         53:83:d2:ab:3f:f7:b0:26:6a:15:4f:76:d7:f7:6c:14:2e:94:
         9b:21:f6:b6:76:80:3f:f8:f9:07:84:32:b3:2d:18:aa:34:fe:
         d3:c6:81:cc:64:7e:6c:83:81:df:21:f0:d3:43:bd:bb:db:18:
         33:c6:21:76:24:af:18:c0:87:62:eb:c5:a3:50:62:eb:3a:66:
         64:64:f3:d5:c7:26:d7:ee:01:07:b6:15:9f:45:f6:98:89:2e:
         59:1d:9e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:33 2024 by rpki-client on console-fra.rpki-client.org