Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/62B6389287C211EE949BAE7BC4F9AE02.roa
File:                     62B6389287C211EE949BAE7BC4F9AE02.roa (raw, json)
Hash identifier:          c1tJLbT/YKXyI5o1X3yD8hpZgiGqKGK3GK6w6x9uMs0=
Subject key identifier:   A1:A4:18:74:38:7E:7A:C5:E6:F2:E6:4F:36:18:72:18:C0:AB:39:D3
Certificate issuer:       /CN=A912F9FB/serialNumber=BFFDB7EBF45D7C61BF9D23908A9F38C332985970
Certificate serial:       17EB
Authority key identifier: BF:FD:B7:EB:F4:5D:7C:61:BF:9D:23:90:8A:9F:38:C3:32:98:59:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/62B6389287C211EE949BAE7BC4F9AE02.roa
Signing time:             Wed 22 Nov 2023 17:04:17 +0000
ROA not before:           Wed 22 Nov 2023 17:04:17 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     55803
IP address blocks:        103.20.200.0/22 maxlen: 24
                          103.28.48.0/22 maxlen: 24
                          122.201.64.0/19 maxlen: 24
                          122.201.96.0/19 maxlen: 24
                          202.146.208.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.crl
                          rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 17:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6123 (0x17eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F9FB/serialNumber=BFFDB7EBF45D7C61BF9D23908A9F38C332985970
        Validity
            Not Before: Nov 22 17:04:17 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=655e3491-e246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7a:7d:5f:a4:f3:82:24:2a:bf:60:fb:c4:95:
                    dc:d9:c5:c3:e2:47:07:c8:c7:26:8b:e7:85:1c:f6:
                    53:87:00:5c:80:f5:5c:80:fb:8d:74:1e:3c:52:cb:
                    ec:6b:27:9b:fb:92:9a:69:ca:36:0e:76:bc:89:d0:
                    25:73:e0:20:c7:6a:55:b0:3b:9a:aa:85:55:01:ca:
                    0d:dd:1d:d7:ca:2a:f3:12:7d:41:d8:25:28:cd:e5:
                    b9:0c:ca:20:63:e0:92:d1:ec:27:15:08:29:93:bc:
                    32:ec:60:8b:24:1c:19:90:9c:98:0c:1c:1a:2c:f8:
                    15:41:25:c5:10:2e:ce:63:4a:e9:01:96:13:2e:25:
                    01:40:4e:fc:2d:00:a3:59:de:67:de:c6:c1:06:dc:
                    90:2f:f2:7b:73:17:e7:f7:73:79:1d:61:ce:08:69:
                    a9:01:31:50:69:a5:b3:72:a0:09:da:35:2f:61:96:
                    ca:db:6f:56:7e:81:f8:57:35:61:56:ac:3e:5e:d7:
                    4e:0b:aa:b6:79:ea:99:d1:07:dd:b4:cb:2a:3a:f7:
                    d6:12:c2:62:c0:80:80:9d:db:28:c2:a3:04:4f:f3:
                    46:15:d2:cd:cb:26:f0:2e:f9:10:2c:93:3e:64:4e:
                    e5:71:46:3e:c2:19:a5:19:6f:ca:32:d3:92:05:9b:
                    76:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A4:18:74:38:7E:7A:C5:E6:F2:E6:4F:36:18:72:18:C0:AB:39:D3
            X509v3 Authority Key Identifier:
                keyid:BF:FD:B7:EB:F4:5D:7C:61:BF:9D:23:90:8A:9F:38:C3:32:98:59:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/62B6389287C211EE949BAE7BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.20.200.0/22
                  103.28.48.0/22
                  122.201.64.0/18
                  202.146.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         59:aa:97:06:04:2c:03:ea:19:f8:63:2e:3c:f5:44:ed:d9:c9:
         ab:f0:26:7f:77:ac:50:b2:f2:4b:cd:4d:6f:bc:4c:e4:26:13:
         59:e1:d2:79:3f:9d:2e:25:01:be:ce:85:35:44:3f:2b:cc:48:
         5d:9b:22:05:9a:39:d2:87:7f:ab:52:c5:f4:de:55:03:4f:d8:
         59:83:12:62:a9:c9:c9:34:30:45:c3:88:6d:09:1a:ae:29:d2:
         15:04:65:4a:1c:5b:4b:c3:c3:8f:7a:c1:87:5e:7e:4c:cc:93:
         8d:f5:27:89:b9:08:7a:cb:03:d7:13:32:a2:17:19:c2:97:d8:
         82:d3:5b:88:c7:83:89:60:e4:e0:4a:a0:14:84:92:55:1d:e9:
         2d:c3:7d:77:67:4c:cc:d8:6c:14:73:c9:31:2e:3f:c1:f5:2a:
         81:25:b7:f5:e4:2d:1b:e2:17:8d:fa:b3:6d:70:11:df:be:9f:
         dc:77:d2:47:e1:97:0e:71:70:5e:e7:89:92:f7:23:30:00:51:
         3a:51:00:19:55:86:f4:6b:ee:da:63:7e:a2:79:b1:e5:23:b5:
         35:89:1f:e0:71:e1:a9:66:9b:bb:1e:a7:0b:2e:e6:cc:68:34:
         06:73:9d:42:f5:a3:6a:8f:a6:bf:47:4b:c6:34:4d:1f:6d:ef:
         85:52:0a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 18:26:03 2024 by rpki-client on console-fra.rpki-client.org