Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/86F9BD94674311EA8AB4D96BC4F9AE02.roa
File:                     86F9BD94674311EA8AB4D96BC4F9AE02.roa (raw, json)
Hash identifier:          00c1bphYKtqZbl/TfGxBoosN44LZMdQGJktDgNbF5qc=
Subject key identifier:   88:3D:26:9B:4F:EE:39:92:96:AD:01:EA:20:E8:FE:65:4F:87:EE:F3
Certificate issuer:       /CN=A914BAE3/serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A
Certificate serial:       08DC
Authority key identifier: 8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/86F9BD94674311EA8AB4D96BC4F9AE02.roa
Signing time:             Fri 02 Jun 2023 22:03:30 +0000
ROA not before:           Fri 02 Jun 2023 22:03:30 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     135336
IP address blocks:        103.114.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl
                          rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2268 (0x8dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BAE3/serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A
        Validity
            Not Before: Jun  2 22:03:30 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=647a6732-65c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:01:20:ea:2d:98:a9:78:9c:61:73:9f:a0:8b:
                    e4:41:56:95:eb:3c:25:b4:7f:96:fd:69:4e:2c:ef:
                    c7:5c:b7:13:66:4b:47:6b:c6:22:cf:52:6c:3f:ba:
                    f4:ed:41:44:f3:f6:58:5c:77:10:15:20:93:c4:42:
                    29:34:81:ec:db:9b:ac:c0:a5:9f:0e:d6:2b:e7:2f:
                    e9:a4:2f:18:34:d8:c9:22:93:4f:6f:69:89:ea:7a:
                    49:4d:57:81:05:c1:8b:92:20:3d:9a:f3:69:60:e3:
                    d0:e5:0e:65:8e:b9:32:89:10:76:c5:50:4c:ed:a7:
                    39:af:9d:81:27:f7:ea:75:73:1d:1c:a8:79:03:51:
                    0f:21:d1:6d:01:f7:1f:21:da:b4:22:04:c9:c1:f5:
                    87:c6:75:0a:20:1a:ed:17:13:ec:86:07:f3:97:e6:
                    ca:64:75:eb:db:1c:9a:fe:ee:c9:46:4f:ec:3c:4e:
                    e2:a8:79:bd:74:94:f2:a7:fd:3d:df:da:49:11:de:
                    cd:7f:51:b0:f8:63:1d:81:e9:51:73:d7:b5:9c:47:
                    a3:c2:32:75:b3:9c:db:5d:99:89:5c:41:5e:7c:bc:
                    07:30:96:fc:b1:06:89:d8:89:47:96:50:ec:4e:3e:
                    b8:84:19:26:bf:56:bb:a2:0c:b1:f0:2d:b8:42:48:
                    6a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3D:26:9B:4F:EE:39:92:96:AD:01:EA:20:E8:FE:65:4F:87:EE:F3
            X509v3 Authority Key Identifier:
                keyid:8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/86F9BD94674311EA8AB4D96BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:e9:5f:bc:4d:dd:b6:3c:10:43:be:db:ad:7a:27:e4:de:95:
         5e:b0:32:83:22:72:62:d8:4b:69:6d:c6:00:4f:04:b9:cc:9a:
         9b:b3:14:07:62:85:8e:8e:d9:ad:10:be:56:6b:4b:b0:0e:02:
         aa:1c:3a:05:2e:48:d2:d6:c1:fb:f2:1d:cd:f7:71:3a:e0:17:
         8e:43:84:94:e8:c1:62:40:49:ef:c9:f1:ab:71:22:35:c1:5d:
         b9:05:c8:c3:65:08:10:14:17:1a:95:41:77:69:40:87:ab:a1:
         a2:5d:af:f0:c5:76:cf:12:ba:de:b4:c0:ae:c1:18:26:e4:9c:
         d6:87:42:0e:f8:6f:76:d9:f7:ee:82:83:8c:a5:56:48:c3:54:
         0d:0f:ac:67:b6:e5:33:59:00:3b:28:b1:b2:08:d1:bd:90:68:
         67:6a:18:ba:9b:37:64:2c:55:78:aa:f1:1c:52:09:45:4d:15:
         ca:ac:0c:9d:58:21:1f:af:ac:b2:9d:1a:2d:b0:c2:1b:00:1a:
         f5:01:2d:17:45:7c:f8:7d:17:4a:06:49:a4:c3:af:a2:ac:d1:
         dc:05:cd:0f:82:e0:bd:ee:be:14:ce:64:e8:5d:fa:83:28:06:
         9e:c6:a7:fe:1d:b1:c2:13:41:f6:64:23:08:a4:6b:46:c1:d7:
         7d:ae:97:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 21:24:21 2024 by rpki-client on console-fra.rpki-client.org