Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/80C1D8C25A1311EF9C290A0FC4F9AE02.roa
File:                     80C1D8C25A1311EF9C290A0FC4F9AE02.roa (raw, json)
Hash identifier:          YNHU5lYg+9a3NTugfNq/GHOOta7DEvwWWMRZFSxilZE=
Subject key identifier:   F6:70:19:F1:E8:2B:D4:0E:44:A8:5B:A7:F5:B7:B2:CC:96:0C:E4:FC
Certificate issuer:       /CN=A9140D69/serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
Certificate serial:       021C
Authority key identifier: 10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/80C1D8C25A1311EF9C290A0FC4F9AE02.roa
Signing time:             Wed 14 Aug 2024 08:02:08 +0000
ROA not before:           Wed 14 Aug 2024 08:02:08 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     62610
IP address blocks:        103.237.102.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl
                          rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 540 (0x21c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140D69/serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
        Validity
            Not Before: Aug 14 08:02:08 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66bc6480-4d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:97:32:eb:b2:c3:72:70:cc:d1:49:cd:72:ce:
                    16:5f:0c:57:0f:e8:4c:f0:6b:6d:a8:aa:26:2f:22:
                    4f:d3:13:cc:a2:8c:36:96:34:96:31:36:93:88:5d:
                    36:dc:de:3d:88:c9:18:0a:1a:9c:e4:2d:87:eb:e1:
                    97:22:db:6e:2d:d9:84:7e:ad:c0:ad:b4:e9:df:da:
                    88:e7:a2:0c:b9:83:c9:17:33:e8:53:61:1e:35:b6:
                    33:2f:e5:cc:52:78:3e:57:8e:ee:72:ae:37:fc:30:
                    36:70:aa:05:aa:e9:83:2c:97:6b:6d:a1:5d:fc:1b:
                    6f:4f:7c:26:b4:2b:57:83:22:0a:3c:3a:15:65:a8:
                    c9:c5:1b:d5:19:20:02:64:6e:f3:a6:40:93:87:65:
                    bd:7b:4e:23:ff:d6:17:45:ab:91:3a:31:26:37:78:
                    d3:05:e9:a1:42:1b:fb:ee:dd:86:09:bf:0e:53:e5:
                    41:eb:45:c3:77:11:8c:48:ff:9e:74:5c:bc:5c:b0:
                    80:39:3f:64:c0:04:bd:7d:6c:da:e3:2d:94:ed:77:
                    9b:d9:cc:ee:cf:1b:dc:d9:43:c1:28:d9:16:21:c7:
                    97:7c:48:28:75:be:a4:4d:07:37:1e:e3:38:f2:2e:
                    c2:ac:79:30:b0:67:df:94:90:03:0a:0e:68:53:ee:
                    d8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:70:19:F1:E8:2B:D4:0E:44:A8:5B:A7:F5:B7:B2:CC:96:0C:E4:FC
            X509v3 Authority Key Identifier:
                keyid:10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/80C1D8C25A1311EF9C290A0FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.237.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:4b:22:e3:2d:cd:81:78:19:2f:b3:a4:08:ec:09:66:cf:ef:
         5d:6c:5b:68:13:29:92:ba:ee:71:e1:fd:af:1b:df:98:f9:d1:
         b4:6e:fa:54:e5:41:74:4f:a2:da:bf:40:40:46:26:9e:28:2d:
         fa:f3:d0:ac:2e:d0:86:96:f4:31:6a:31:60:d4:4c:14:2c:92:
         e9:39:22:b0:f7:4d:9a:c9:6b:34:b5:f3:9e:16:c8:b3:5c:aa:
         e1:5c:c6:76:3f:47:c8:97:d9:11:5c:d6:5f:2e:66:4f:7b:4e:
         49:eb:9d:8b:0a:69:b7:bc:eb:18:cf:24:0b:35:44:76:6e:63:
         03:bd:98:15:b1:45:1a:4a:fa:f7:d1:30:26:8c:43:c9:d6:ad:
         c8:db:89:9d:ac:a6:77:ea:0f:56:87:12:a8:0f:cb:03:fc:da:
         a7:43:ac:59:d8:d4:d7:b7:21:3b:f8:21:b7:dc:a7:77:31:45:
         7c:11:86:f2:3f:db:89:65:9e:92:5d:e7:d4:d6:43:38:a6:67:
         27:6c:e1:84:de:b6:4c:82:96:38:65:0c:f2:79:77:c5:29:5b:
         ec:8c:1e:b2:6d:87:20:cf:79:6c:7c:09:d3:01:fc:1a:5f:34:
         3d:d8:8f:eb:56:52:b8:2c:f1:b8:06:d1:8d:ec:c8:c7:2a:5a:
         98:c9:2b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:35 2024 by rpki-client on console-ams.rpki-client.org