Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/6E5D9F026AD211EF84B5841FC4F9AE02.roa
File:                     6E5D9F026AD211EF84B5841FC4F9AE02.roa (raw, json)
Hash identifier:          uIIpxVXCOyvO8jazrJGDvH891KwC7Q6E4YLXGxrpkeQ=
Subject key identifier:   FC:01:F4:1F:59:4E:37:A3:D7:F0:EF:53:53:6E:C7:D0:EF:58:95:D5
Certificate issuer:       /CN=A912E990/serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1
Certificate serial:       03BA
Authority key identifier: CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/6E5D9F026AD211EF84B5841FC4F9AE02.roa
Signing time:             Wed 04 Sep 2024 15:33:48 +0000
ROA not before:           Wed 04 Sep 2024 15:33:48 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     141465
IP address blocks:        103.161.214.0/24 maxlen: 24
                          103.161.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl
                          rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 954 (0x3ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E990/serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1
        Validity
            Not Before: Sep  4 15:33:48 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=66d87ddc-09f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d3:95:bb:1e:a9:2c:c3:de:26:eb:bf:5c:b7:
                    e9:65:df:75:f9:92:a2:51:a7:40:aa:da:63:42:1b:
                    fa:53:c0:86:84:71:bd:8b:2f:24:6d:cd:61:8c:c5:
                    af:e7:52:dc:80:a9:69:d1:14:79:ad:b3:8e:1d:7d:
                    6e:7d:d3:38:e4:53:8f:39:6f:4b:e6:e7:6f:4c:57:
                    49:c3:98:22:b5:bf:3d:36:fa:b8:1a:1f:d2:dd:96:
                    68:e9:91:05:ce:d4:4c:04:fa:53:e2:e0:e5:f0:ea:
                    c6:46:87:92:69:42:99:63:3d:b4:9b:bb:3b:31:28:
                    9c:2d:dd:ce:f1:03:23:7a:07:65:54:51:6e:96:3f:
                    ad:7a:82:d1:3e:d6:38:6e:c0:81:dd:23:a2:2b:21:
                    4e:94:9b:93:a2:21:9c:9f:73:15:84:c8:70:c0:a8:
                    de:89:85:15:5a:8c:09:00:d8:eb:7b:9a:5b:6c:e9:
                    54:80:8c:5d:25:4f:87:7d:9b:10:20:46:59:ba:2a:
                    68:ef:d3:ac:63:42:d1:8f:73:d5:36:df:f7:b0:5a:
                    2f:61:1c:d4:47:c7:eb:9c:e8:f3:e9:21:73:e6:4b:
                    11:80:7e:84:e0:11:19:e6:8a:ae:3d:94:2d:07:d7:
                    75:c4:02:07:ea:3f:ec:ce:28:f6:83:ec:cb:17:e6:
                    38:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:01:F4:1F:59:4E:37:A3:D7:F0:EF:53:53:6E:C7:D0:EF:58:95:D5
            X509v3 Authority Key Identifier:
                keyid:CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/6E5D9F026AD211EF84B5841FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:eb:5c:08:27:01:42:73:c3:d7:82:ff:48:19:9c:59:69:62:
         44:c6:2b:37:be:79:2f:ed:6a:2b:21:17:a8:f3:fa:d9:29:37:
         51:b3:49:ef:90:c3:d6:62:9f:ef:98:ae:ad:a8:25:21:f3:08:
         c4:4d:02:27:9c:65:92:5c:94:dd:dd:86:5a:6a:7f:fe:ec:53:
         9b:13:fb:e7:71:2f:51:ca:73:6c:b9:a0:58:3a:f9:64:fe:8d:
         b4:c5:86:b7:7b:48:c7:ec:60:60:07:5c:66:39:4e:99:ff:1b:
         e7:07:e6:70:2c:28:b1:95:76:f5:36:f1:bd:2c:81:03:36:c4:
         0f:5a:5d:e2:c0:2c:0f:63:4b:25:9c:38:63:f6:fa:1c:c9:d1:
         6a:68:6c:f9:d5:b1:fc:1f:bb:cd:25:a2:d9:3a:ef:1b:94:a5:
         43:7c:cc:c1:a3:fe:f9:df:94:19:3d:ff:37:1f:10:2b:c5:9e:
         22:f9:52:05:58:82:ac:51:e4:1d:83:56:e0:2b:c1:9a:49:e4:
         90:3b:c9:a7:76:02:75:28:ef:44:06:0c:28:e4:06:e1:fd:c5:
         d5:9a:68:0d:7a:60:8d:aa:06:d0:14:a7:77:cd:86:7c:e5:b5:
         8d:41:92:27:db:92:fe:8e:ff:15:b9:21:73:97:3c:05:56:6d:
         48:58:95:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:20 2024 by rpki-client on console-ams.rpki-client.org