Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/0484BF6EF76311EC93951455C4F9AE02.roa
File:                     0484BF6EF76311EC93951455C4F9AE02.roa (raw, json)
Hash identifier:          yfcp/+vcXd92Y/eY7SRY/CR1e0r/AdIrFespQFyYzR8=
Subject key identifier:   52:5E:1C:97:91:FF:21:6C:50:27:A5:D3:9A:A0:1D:B2:AC:F2:43:0A
Certificate issuer:       /CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D
Certificate serial:       02A8
Authority key identifier: C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/0484BF6EF76311EC93951455C4F9AE02.roa
Signing time:             Tue 05 Mar 2024 03:25:11 +0000
ROA not before:           Tue 05 Mar 2024 03:25:11 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     139855
IP address blocks:        103.163.120.0/24 maxlen: 24
                          103.163.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl
                          rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 680 (0x2a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D
        Validity
            Not Before: Mar  5 03:25:11 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65e69096-1a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b8:e8:a2:38:d2:df:d1:1c:d6:59:73:da:5f:
                    48:98:b5:98:2b:a1:11:da:03:3c:8d:a5:5c:e0:20:
                    d7:d4:dc:af:09:65:84:60:fe:97:e7:4d:47:0e:ef:
                    8a:91:f8:11:27:b3:9e:4c:31:a6:12:9a:b9:54:d9:
                    a6:8f:1c:99:c3:f4:ae:ff:a2:cd:fd:ff:cd:cb:e3:
                    38:c1:88:ac:84:f4:c3:2f:a6:0f:c8:54:c3:61:6f:
                    7e:fe:8d:88:75:6d:00:be:e6:8c:a5:17:5a:23:19:
                    b4:6e:24:8f:d8:f0:bc:6b:70:40:0b:e8:8d:12:6d:
                    82:28:b6:54:b5:23:b4:66:9a:c6:41:11:90:bf:5d:
                    93:bf:92:49:f9:18:15:4d:f5:e5:1a:22:79:0f:43:
                    f6:1c:c9:c2:fa:05:89:e5:3f:10:56:6e:09:31:66:
                    2a:49:77:54:7a:14:c1:a8:f4:a9:7e:53:ca:5f:66:
                    26:41:70:7e:4c:88:4b:01:2d:34:2f:4d:db:28:84:
                    35:bf:be:49:b0:71:17:2f:a8:e5:6f:63:69:e0:75:
                    9c:8b:25:e0:f7:28:f4:05:15:11:80:2d:3f:64:bf:
                    5d:5f:b1:ca:c4:d1:89:ea:9f:31:3e:de:21:3f:2e:
                    47:29:92:6f:c7:64:6e:21:93:fb:cc:12:49:91:f9:
                    c9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:5E:1C:97:91:FF:21:6C:50:27:A5:D3:9A:A0:1D:B2:AC:F2:43:0A
            X509v3 Authority Key Identifier:
                keyid:C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/0484BF6EF76311EC93951455C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:f4:db:97:82:36:fa:04:2a:df:02:02:3d:05:ca:9b:43:46:
         48:30:10:0b:fb:30:f5:b9:12:5f:47:c8:de:f8:f6:c7:9c:f9:
         65:91:8e:4b:14:32:f7:12:41:f7:8b:d3:38:67:33:bc:1d:4a:
         da:01:91:29:01:48:3f:1b:dd:60:95:78:65:a9:5c:5a:54:86:
         1a:4e:2d:ee:7a:90:33:f0:5e:61:b3:b8:30:f2:49:a3:ce:e5:
         4e:6c:0a:6b:b8:cf:43:33:10:23:da:f7:17:b3:28:96:ef:c5:
         4d:08:88:27:48:67:b0:55:29:7e:b7:cf:8e:46:26:fb:29:ef:
         9f:02:f4:d1:91:20:d0:5a:ce:6e:8a:1e:de:d3:33:ce:46:37:
         b7:26:34:bb:ef:0c:d4:4e:1a:22:eb:07:a2:24:a3:7b:d8:62:
         1e:30:b6:3e:54:84:02:95:86:43:61:71:5b:b9:51:a8:65:a8:
         f6:0f:4c:c2:fe:db:ca:8e:7c:35:78:ad:c0:97:2e:c6:5a:c6:
         cc:43:1a:db:02:86:3c:c9:a8:46:46:ce:07:98:cc:a7:78:45:
         86:cf:e1:5b:9b:16:a2:e8:f1:ee:f9:9c:c2:c3:7e:bb:07:1d:
         3a:6e:aa:d5:46:6a:6d:fe:cb:31:15:81:99:49:ca:63:57:df:
         4f:18:c0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 04:21:39 2024 by rpki-client on console-fra.rpki-client.org