Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/8F5B11804EC211EE84582E78C4F9AE02.roa
File:                     8F5B11804EC211EE84582E78C4F9AE02.roa (raw, json)
Hash identifier:          nOgH8wuX1zUstFuOrpiDRtVK5LTCg9jCbDP8mKoWoPk=
Subject key identifier:   4A:42:6C:1B:14:C6:24:BB:8B:1B:19:9A:65:63:C4:F0:63:A4:2B:C8
Certificate issuer:       /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial:       0204
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/8F5B11804EC211EE84582E78C4F9AE02.roa
Signing time:             Sat 09 Sep 2023 03:40:03 +0000
ROA not before:           Sat 09 Sep 2023 03:40:03 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     40065
IP address blocks:        103.215.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
                          rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 03:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516 (0x204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
        Validity
            Not Before: Sep  9 03:40:03 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64fbe913-8d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0f:a1:9c:f6:19:e8:f0:da:b1:34:cd:4b:42:
                    a4:f5:34:c3:c3:38:c7:49:55:1c:86:ce:7d:db:89:
                    aa:b8:89:5f:76:ac:e9:c7:ec:8f:5f:a0:16:87:04:
                    1b:29:89:01:2c:1a:85:2b:16:7a:8a:7f:87:bf:e5:
                    0d:6e:69:7a:1b:07:a0:b9:57:11:9e:6a:2d:5a:56:
                    08:a3:5d:a7:a6:b5:00:89:fb:67:80:a6:b5:74:ac:
                    3e:75:8f:77:a7:8f:cf:38:ba:b4:0b:0d:90:66:bb:
                    f8:3b:f4:0a:26:07:6e:e4:7a:6c:7f:83:68:49:64:
                    1d:ad:73:80:04:07:db:d2:bf:23:77:5d:23:20:30:
                    e8:f3:d8:f3:f4:cf:8e:14:08:ec:a7:89:7d:28:82:
                    77:8d:47:08:61:c0:6d:f0:6a:f8:dc:c0:1f:89:22:
                    ca:25:8b:f3:55:34:0c:eb:63:71:c9:43:b2:6c:52:
                    98:e2:5b:2a:70:1f:e1:42:0f:ec:a8:bb:8a:2f:5d:
                    6e:93:df:56:ba:f8:79:13:88:06:09:5d:5b:44:f5:
                    78:13:96:1a:61:6e:71:5d:f6:d2:ed:93:48:3e:f1:
                    49:ee:dd:66:a6:91:dd:c2:75:e0:20:98:82:7d:e7:
                    fd:ba:27:09:04:d7:b5:30:86:8a:6e:f9:9e:5d:ee:
                    6d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:42:6C:1B:14:C6:24:BB:8B:1B:19:9A:65:63:C4:F0:63:A4:2B:C8
            X509v3 Authority Key Identifier:
                keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/8F5B11804EC211EE84582E78C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:61:8f:79:02:4e:c6:84:17:c3:c1:a2:c1:ed:76:55:7f:b5:
         13:06:2d:2f:ff:9e:39:43:2e:53:3f:d0:41:19:09:29:d8:d9:
         4d:5a:b6:a4:3e:d8:f8:f1:3a:d6:53:79:8e:2f:df:4a:69:a8:
         6b:c4:b6:12:3f:5a:ea:66:82:49:64:7b:93:1a:43:39:ba:b8:
         2c:c2:00:72:dc:55:36:6c:8a:bd:f3:44:ca:70:86:2b:a2:c7:
         cb:d2:cc:25:2f:7e:5f:d2:5b:de:e9:a6:39:fd:fd:89:f6:dd:
         36:f6:df:80:8b:2d:c5:8d:e1:24:35:75:17:ef:9a:cd:d4:37:
         e9:7d:4a:3b:a5:c2:0a:b7:ac:46:c2:fa:c7:c4:02:3e:a2:b4:
         e3:9d:05:64:1a:ae:e9:ed:8f:39:a2:c4:f9:64:b3:3b:fc:b9:
         84:f3:19:12:83:ef:93:71:44:84:3c:6e:52:e4:7d:42:85:86:
         ae:28:40:98:72:b9:f6:f4:d0:45:44:16:e3:11:0d:01:61:f6:
         5d:3c:1c:27:3d:cc:a7:fb:b0:e6:69:0f:d8:d7:b4:73:c8:7c:
         1f:d5:8f:b1:7e:34:38:d8:1a:91:01:35:4c:ec:7d:4e:d2:94:
         b1:7b:ed:fb:90:ac:15:f1:55:a2:e3:7c:0e:ec:05:53:f0:c9:
         db:93:f6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:46 2024 by rpki-client on console-ams.rpki-client.org