Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/65303DE225D211ECB2CCF633C4F9AE02.roa
File:                     65303DE225D211ECB2CCF633C4F9AE02.roa (raw, json)
Hash identifier:          P9aJahu3U3M4rS1dS/pRTIBjHHxz1UfX4P2yDMw8ksE=
Subject key identifier:   7A:BC:71:C1:B8:65:42:38:0F:01:AA:F2:D6:59:4B:0B:60:E9:EA:E1
Certificate issuer:       /CN=A9163BEF/serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19
Certificate serial:       0363
Authority key identifier: 0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/65303DE225D211ECB2CCF633C4F9AE02.roa
Signing time:             Fri 07 Jul 2023 01:01:03 +0000
ROA not before:           Fri 07 Jul 2023 01:01:03 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     146993
IP address blocks:        103.67.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl
                          rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867 (0x363)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163BEF/serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19
        Validity
            Not Before: Jul  7 01:01:03 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a763ce-bdcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:26:e8:ba:30:ff:81:99:a9:0e:7a:04:3e:91:
                    5d:9e:85:01:46:99:22:29:37:59:cb:ac:09:96:79:
                    ea:e0:76:fa:46:4e:6f:fc:01:c1:47:06:fb:ba:b4:
                    19:07:58:f4:bb:dd:3a:76:92:15:de:fa:f8:9f:98:
                    13:fb:13:41:51:ee:03:50:65:47:cc:22:8c:1a:d3:
                    54:3e:f5:d1:21:77:f0:94:26:53:55:c3:10:c1:f1:
                    0b:29:d3:75:5e:85:3c:ad:b6:bb:4a:6e:64:f4:e1:
                    f8:5a:54:58:c6:66:79:1b:ec:29:4d:47:1c:49:19:
                    cb:56:87:0c:3a:f8:35:7a:f4:b2:61:99:6a:0f:ee:
                    8d:97:aa:06:03:b4:77:36:fd:cc:65:c5:e4:c6:92:
                    86:02:e1:65:be:30:30:39:0f:b2:f1:f6:1e:2a:6b:
                    72:10:00:be:8a:91:a9:52:38:a4:31:29:2f:6b:80:
                    8b:55:ea:59:d5:b4:82:f9:b7:24:99:e7:67:87:58:
                    ac:f7:60:c1:29:60:cf:4b:5a:92:1c:3f:7c:0b:43:
                    aa:c5:4b:0b:f5:4a:2d:f0:0b:92:c2:26:f3:71:de:
                    6d:a8:bc:cb:ae:91:21:2b:cc:b3:bd:33:61:b6:fa:
                    66:5d:99:95:e8:6d:50:00:88:ef:63:6f:ea:14:57:
                    fd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:BC:71:C1:B8:65:42:38:0F:01:AA:F2:D6:59:4B:0B:60:E9:EA:E1
            X509v3 Authority Key Identifier:
                keyid:0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/65303DE225D211ECB2CCF633C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:58:33:35:60:db:53:f9:ef:80:e5:d5:a6:bf:9b:0e:b1:f0:
         42:7b:8f:95:52:d2:66:9d:30:27:ea:7f:8d:a8:cc:e6:62:7a:
         a8:43:5f:5a:4f:e3:cc:c2:a4:6e:62:78:01:f9:d1:51:58:f3:
         39:d8:6a:6c:8e:f1:32:31:12:46:b2:40:da:a4:5d:22:40:df:
         f5:a3:3f:c8:fc:a9:05:63:3a:ed:99:01:aa:0c:34:e5:26:67:
         6f:fd:1b:45:d4:6e:6a:38:05:ce:13:23:12:2f:83:09:83:8d:
         2a:17:98:71:0e:f7:72:05:d4:dd:15:df:79:66:5e:81:39:57:
         4b:b8:64:9d:d4:72:8c:97:d5:fd:89:e9:4b:d3:b9:ba:e3:6c:
         17:f2:8e:7d:47:42:f8:f5:d6:35:a4:ed:18:fd:ff:11:17:f0:
         6c:5c:58:1a:37:13:a1:28:ce:90:77:fd:4e:87:59:22:ec:92:
         df:f7:35:dc:6d:e5:eb:9e:a8:9b:69:11:ac:e8:b6:80:23:37:
         04:de:6e:4d:21:aa:2b:89:e5:cb:84:4c:a9:41:51:a8:63:70:
         69:f4:6e:61:25:b1:e7:c3:63:da:5b:73:de:d3:e1:4a:47:df:
         d3:50:61:c3:7f:68:78:06:5f:2d:b6:9a:11:58:de:d6:d3:f9:
         46:08:a2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 03:51:28 2024 by rpki-client on console-ams.rpki-client.org