Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/D2528232D2A011ED86EB1F59C4F9AE02.roa
File:                     D2528232D2A011ED86EB1F59C4F9AE02.roa (raw, json)
Hash identifier:          tNyP3GpxOVlhdC8dzuHPeKXAK1xluCFT4wJaTwr6yJc=
Subject key identifier:   84:9B:82:EB:7D:3C:C2:04:CD:1E:C9:FC:CB:D9:FC:28:69:6B:06:21
Certificate issuer:       /CN=A9135604/serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E
Certificate serial:       A1
Authority key identifier: F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/D2528232D2A011ED86EB1F59C4F9AE02.roa
Signing time:             Sat 03 Feb 2024 05:37:20 +0000
ROA not before:           Sat 03 Feb 2024 05:37:20 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     45352
IP address blocks:        103.83.168.0/22 maxlen: 24
                          203.89.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl
                          rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 May 2024 04:40:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135604/serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E
        Validity
            Not Before: Feb  3 05:37:20 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65bdd10f-7351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c1:10:cb:ba:05:c3:6f:e4:68:a1:e1:b2:28:
                    21:4a:de:4c:29:3d:b7:48:e4:10:ef:59:08:62:40:
                    9f:62:15:99:ab:02:ab:ab:a6:e7:63:44:48:03:00:
                    89:05:19:96:d6:94:06:78:bf:55:7d:69:43:06:5c:
                    48:d5:12:7f:3c:7a:a8:f4:55:49:78:9e:f4:1c:f8:
                    2c:f7:34:8b:98:70:26:60:a2:db:2a:5a:9d:a4:0b:
                    a2:1a:10:4f:9d:ba:e9:d0:27:d1:4d:0b:4c:4a:3e:
                    ce:bc:1a:a5:bd:c2:d7:5d:90:8d:e4:9d:60:9b:49:
                    7b:2c:c6:c9:60:ec:4a:19:57:cd:14:7d:a5:2a:81:
                    4e:63:aa:41:1a:6e:67:51:1c:b3:af:76:63:b5:78:
                    ce:76:09:e9:19:12:b0:3a:92:47:e6:0a:4a:0d:67:
                    93:c1:93:96:d8:80:c7:65:8e:1a:6a:92:69:e1:cc:
                    4d:a2:e2:9f:3d:84:58:44:5f:de:ac:38:b5:82:cb:
                    67:ca:29:b6:aa:9f:03:b3:3c:0c:99:c5:e8:59:fa:
                    f4:8a:68:0f:92:6f:7a:d9:3c:28:99:50:b8:df:4c:
                    91:71:82:24:80:84:65:b2:81:73:94:48:c9:e4:3d:
                    a3:f3:d6:f2:c3:9b:70:f8:f2:57:18:2a:00:e0:1a:
                    11:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9B:82:EB:7D:3C:C2:04:CD:1E:C9:FC:CB:D9:FC:28:69:6B:06:21
            X509v3 Authority Key Identifier:
                keyid:F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/D2528232D2A011ED86EB1F59C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.168.0/22
                  203.89.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:31:e4:78:4d:f9:04:71:c0:1b:0d:91:4c:34:e1:3a:27:46:
         03:c5:bf:78:6b:f4:6a:29:02:09:41:80:8c:0e:cc:61:d5:16:
         47:7d:6a:bf:31:d1:92:c5:80:f6:da:0d:cc:fe:7b:a1:6a:51:
         48:87:3e:67:fa:54:3f:c4:81:18:2b:0a:60:2a:88:35:33:47:
         10:fb:6b:12:70:f6:24:b1:fb:67:cc:b3:5e:97:ed:75:71:78:
         86:fb:09:4f:9f:a8:d0:92:03:35:5b:1f:e7:fe:87:cb:f5:d2:
         e6:a9:4a:15:b8:0e:9e:2d:a0:14:1e:82:8a:04:2c:44:6a:f1:
         41:d1:51:05:6b:2a:9a:68:46:7e:fe:81:15:62:cb:a8:05:27:
         ab:e2:17:d2:c3:d8:00:e5:13:0b:ba:9d:72:0b:63:89:24:28:
         f6:21:bd:33:6e:06:ad:27:2e:ae:78:3d:73:82:c3:90:d3:ae:
         36:cf:0c:f1:83:e5:c0:29:ee:11:2a:4e:4f:25:fe:db:a0:1c:
         84:1f:06:77:dc:e0:7d:92:8f:5b:07:a8:02:10:e6:9e:98:9d:
         9a:8e:f8:6e:f8:e5:99:5e:0b:37:49:a1:84:6a:a8:a1:fa:ae:
         ac:7a:6e:dd:c1:5a:7d:57:25:cd:20:9b:cd:9f:44:eb:52:28:
         91:28:1b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 06:36:45 2024 by rpki-client on console-ams.rpki-client.org