Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D31B3092F40911EA8A5C9E70C4F9AE02.roa
File:                     D31B3092F40911EA8A5C9E70C4F9AE02.roa (raw, json)
Hash identifier:          JFhYsMMnyex24FGUJR1yANnkLrSFJUOiAE+xycKHDJ0=
Subject key identifier:   C1:36:F8:F1:F7:DB:EF:7D:2D:8D:BE:5F:10:D4:99:75:9B:AA:95:AC
Certificate issuer:       /CN=A914ED2B/serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE
Certificate serial:       0685
Authority key identifier: 0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D31B3092F40911EA8A5C9E70C4F9AE02.roa
Signing time:             Tue 08 Aug 2023 22:19:14 +0000
ROA not before:           Tue 08 Aug 2023 22:19:14 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     63969
IP address blocks:        103.155.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl
                          rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 20:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1669 (0x685)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914ED2B/serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE
        Validity
            Not Before: Aug  8 22:19:14 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=64d2bf61-ee2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:34:49:5e:d9:49:24:52:89:8e:f1:e5:68:e6:
                    46:55:d9:47:87:1d:28:3c:36:a0:4a:04:75:32:5c:
                    28:aa:7c:57:f5:ea:16:49:dc:1e:70:3f:e9:b5:07:
                    ed:5e:56:32:ce:d3:6f:59:fa:0b:a3:15:6c:a2:47:
                    ac:25:f1:b2:8e:26:d1:8c:0c:a6:ae:0a:c3:88:ee:
                    45:59:05:58:8a:53:67:39:23:db:d0:9a:eb:73:ec:
                    56:0a:19:78:ca:ba:0a:1b:85:f2:c7:ce:da:66:a0:
                    de:6f:e5:5d:66:ec:fc:73:51:e3:56:12:6d:db:33:
                    4d:a5:9e:42:41:77:91:6f:4d:ad:a5:39:c3:4e:08:
                    a9:22:9a:3b:76:d3:e6:20:99:0a:70:c1:a5:64:ac:
                    6e:9e:9f:11:50:6e:cb:61:8c:0e:d7:91:84:97:81:
                    31:9c:1c:21:5a:00:f7:69:ba:59:7a:1d:5d:1d:36:
                    d2:2b:b7:97:27:98:fb:00:89:65:98:39:5d:bf:8f:
                    df:95:54:37:b1:ee:0f:cb:a5:15:8d:8a:06:b0:cf:
                    77:ad:db:72:3c:8e:46:03:e7:1e:fe:5b:37:84:52:
                    aa:18:5f:be:44:de:61:04:d8:22:fd:dd:b9:fc:60:
                    17:0e:a4:76:87:aa:97:ff:79:0f:e3:45:6b:51:32:
                    08:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:36:F8:F1:F7:DB:EF:7D:2D:8D:BE:5F:10:D4:99:75:9B:AA:95:AC
            X509v3 Authority Key Identifier:
                keyid:0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D31B3092F40911EA8A5C9E70C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:a6:92:be:05:84:c5:0f:7e:f9:9e:97:4a:9a:bb:1c:6d:e4:
         3e:f1:68:c2:01:91:dd:7b:d1:90:8e:6e:25:5e:16:95:a0:98:
         7a:a6:b0:cf:30:66:cc:9b:31:53:97:54:8b:2b:e7:e4:d9:03:
         9f:38:6c:13:82:e9:78:2a:2b:4e:aa:9c:3f:21:0e:ec:74:7b:
         79:0c:85:38:7c:5a:f8:af:26:cd:b2:a4:d3:4b:e7:91:ae:bf:
         2c:ea:b0:b7:f2:16:65:0c:ea:e9:b7:cb:ae:2a:2a:79:d7:ec:
         34:f6:fa:94:1b:fa:27:29:c6:ed:2d:a6:7f:94:d1:9c:7f:ee:
         fa:e9:a7:b9:5d:42:cc:30:2b:5d:88:dd:0a:b6:37:27:95:2a:
         ad:3d:89:aa:ec:4a:59:41:ce:a6:22:80:72:0d:c3:78:aa:21:
         0e:13:b1:d8:c9:9a:ce:37:26:64:aa:5b:91:17:6b:b0:fe:2d:
         1a:da:02:8d:f6:96:f5:dd:90:7e:4c:e1:45:82:60:91:b1:67:
         67:09:1c:4c:f3:4c:93:6b:02:e0:4e:1e:fc:8e:c8:f1:f5:bf:
         22:25:ea:dc:0f:a1:f3:30:9c:39:4f:d1:5f:b2:56:15:51:d3:
         b1:a1:c3:e0:de:84:bd:ce:10:e7:89:3e:ab:52:26:d4:71:d4:
         89:96:d0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 23:48:40 2024 by rpki-client on console-fra.rpki-client.org