Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/92A66D260C6D11EFBF1F4756C4F9AE02.roa
File:                     92A66D260C6D11EFBF1F4756C4F9AE02.roa (raw, json)
Hash identifier:          +6eVE6HLY7v+NvK5q+0bfhfDC5s/93MsdT7mdf26hI0=
Subject key identifier:   0A:89:18:61:84:92:BC:DB:66:E4:04:2B:1E:13:2A:AD:A1:51:8E:40
Certificate issuer:       /CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Certificate serial:       D1
Authority key identifier: A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/92A66D260C6D11EFBF1F4756C4F9AE02.roa
Signing time:             Tue 07 May 2024 12:30:22 +0000
ROA not before:           Tue 07 May 2024 12:30:22 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     212609
IP address blocks:        103.92.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl
                          rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 07:51:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
        Validity
            Not Before: May  7 12:30:22 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=663a1ede-3927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9e:6e:c2:85:0c:95:e2:2d:d8:07:f7:92:20:
                    34:f5:92:5d:b2:22:99:aa:6f:07:17:03:37:9d:6f:
                    d6:7a:64:7c:3e:3f:6a:d2:66:ec:a3:eb:ee:44:bb:
                    8a:44:79:01:60:ef:96:97:66:ec:77:11:cf:bf:f2:
                    b3:94:51:90:03:73:1e:f1:07:ee:38:21:7c:18:04:
                    6b:28:19:19:3e:7f:60:fc:3b:8b:0e:31:27:65:6b:
                    3c:31:b6:00:ef:b8:18:b6:12:25:6b:3e:ae:39:76:
                    8f:9d:88:03:84:64:56:e1:03:f3:d2:b4:64:8d:7e:
                    7f:68:f3:ae:9e:f1:a2:5c:55:a8:61:e0:6e:52:d8:
                    ed:4e:e5:b8:2d:67:ec:23:9f:21:d6:91:be:5d:34:
                    ce:3c:cb:5b:c0:b3:59:bd:18:74:f4:8d:cd:9b:81:
                    87:32:94:07:bf:0c:5a:82:16:4a:57:78:03:65:7a:
                    3f:92:e9:78:d5:bd:45:6d:4f:cc:f2:f8:06:74:00:
                    5d:b5:43:09:87:be:7c:f3:ec:35:7e:90:d7:5c:3a:
                    1f:39:83:36:16:40:22:f9:d1:c6:55:af:d6:ad:a9:
                    ed:ad:2f:40:d3:9f:53:35:c8:fa:a7:82:36:39:e4:
                    b1:01:62:fe:b4:6a:c0:52:8c:42:db:14:b9:f2:b0:
                    4c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:89:18:61:84:92:BC:DB:66:E4:04:2B:1E:13:2A:AD:A1:51:8E:40
            X509v3 Authority Key Identifier:
                keyid:A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/92A66D260C6D11EFBF1F4756C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:00:f6:58:3d:27:87:91:11:38:f9:70:42:f8:24:0b:c9:27:
         c6:63:c6:5f:4d:ff:b9:39:74:5d:dd:95:ff:4b:cd:e9:6b:96:
         3a:27:7b:58:91:82:a0:0b:26:2b:8f:a7:7d:f4:a3:64:dc:0a:
         5b:c1:f8:c8:cb:92:ee:06:ad:54:77:8d:56:ea:ba:a4:dd:56:
         b5:26:bc:d3:d2:33:45:d0:96:20:94:54:0c:3e:37:f1:bf:0e:
         00:c4:8f:ed:22:04:74:0e:f8:01:74:21:ab:88:f9:b2:39:58:
         09:66:79:a7:14:ea:c0:d2:c4:f5:f4:7e:5e:5c:a6:f1:40:17:
         a0:6f:ce:e1:db:04:3c:44:3c:2c:db:72:3b:93:cf:ab:ff:d2:
         8f:40:8d:9d:d1:ce:20:31:28:48:05:b7:02:0f:f6:99:7d:8e:
         6f:55:8a:65:87:95:9b:25:2c:8f:ec:46:40:87:38:69:72:4d:
         fd:0a:7d:04:48:f1:fb:aa:71:db:b5:b1:0e:a5:30:ed:a4:f8:
         ff:78:76:59:03:5d:e8:d9:a9:7e:4d:2d:62:50:59:eb:8b:6e:
         71:33:76:06:41:02:76:32:dd:4d:ed:6b:57:26:e2:e0:8c:c4:
         30:f3:89:18:39:ea:ac:ad:f4:e2:31:85:c2:f7:52:ea:6a:8e:
         15:3f:0a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:47:13 2024 by rpki-client on console-ams.rpki-client.org