Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/BE60F6465F9A11EE86E5F045C4F9AE02.roa
File:                     BE60F6465F9A11EE86E5F045C4F9AE02.roa (raw, json)
Hash identifier:          QjBhJ0A3GKGqyqxXpkdWTB/3hCNFFin6blZ2Muczx60=
Subject key identifier:   D5:0B:C1:ED:81:A2:8B:60:43:D9:6F:AB:BE:F7:F4:10:29:B9:46:D1
Certificate issuer:       /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial:       0254
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/BE60F6465F9A11EE86E5F045C4F9AE02.roa
Signing time:             Thu 07 Dec 2023 03:14:08 +0000
ROA not before:           Thu 07 Dec 2023 03:14:08 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     132422
IP address blocks:        103.235.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
                          rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 03:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 596 (0x254)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
        Validity
            Not Before: Dec  7 03:14:08 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65713880-a7d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4f:07:1a:02:e8:d4:77:30:8c:d2:b3:3d:aa:
                    e5:f7:f1:9f:9b:7b:a2:c4:28:27:7e:88:cb:03:f9:
                    09:f4:3d:b6:af:2f:21:b3:96:dc:63:af:f0:45:b7:
                    2d:e8:b0:25:1e:94:eb:26:0d:62:20:18:4d:93:52:
                    38:45:7b:96:1b:f8:c3:6a:3b:36:8d:5e:67:10:d9:
                    a6:28:61:5c:59:43:8c:22:ca:c7:6d:17:d3:3d:b4:
                    86:2c:c5:98:48:6a:b6:36:f8:2a:1b:07:f5:d2:7b:
                    4f:b6:71:5b:6a:e4:c2:e8:59:3e:53:db:98:f3:56:
                    2f:69:75:d3:91:46:14:b5:25:c6:eb:c7:4d:11:4e:
                    0f:6e:5d:cd:b1:db:68:54:bd:8f:27:d5:3c:93:d6:
                    fe:20:7f:e4:9f:be:10:2a:43:37:08:5b:ca:5b:64:
                    70:9d:bf:19:82:85:64:f2:34:d0:0d:d0:d2:3e:80:
                    8e:5a:f9:00:4e:98:62:3d:d1:d9:d7:9a:2f:e3:d7:
                    6c:cc:22:b0:87:f0:f5:e6:de:3d:26:62:a2:5b:ab:
                    5a:32:e4:29:fa:57:a3:f6:34:87:6e:cd:e1:d7:d2:
                    6e:58:0f:e4:72:40:c0:88:3f:c3:a8:52:e8:30:63:
                    56:ca:99:2e:5f:1e:d6:f0:a3:cd:28:a0:1b:95:4f:
                    1f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0B:C1:ED:81:A2:8B:60:43:D9:6F:AB:BE:F7:F4:10:29:B9:46:D1
            X509v3 Authority Key Identifier:
                keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/BE60F6465F9A11EE86E5F045C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:26:be:47:d5:99:03:3c:6e:ba:3d:44:ac:d9:d7:f1:b2:6a:
         70:09:59:f6:79:b4:fe:04:d8:ac:c5:b0:b8:8a:ac:4c:c5:9b:
         63:6c:35:32:6b:47:97:f1:39:c2:67:1e:d7:07:1d:df:d2:70:
         8b:60:c3:13:29:fe:30:11:64:ff:ba:de:fd:1c:7d:f1:1c:5e:
         5e:25:b3:05:51:11:77:1b:c3:47:79:1e:b0:3c:2a:9c:1f:a5:
         c4:78:a4:c7:02:a7:bb:06:5c:53:02:dd:a8:71:f4:10:02:03:
         6c:6e:9f:e0:aa:39:6c:e7:99:d6:aa:d1:67:7d:a0:fa:0d:1d:
         71:f7:50:ab:e9:c9:fd:ed:bf:ad:c3:ec:98:2b:92:89:53:9e:
         49:a8:15:68:f0:a5:a3:d4:80:11:3c:6b:82:03:3f:07:3e:ae:
         b9:6b:cd:fd:f6:07:86:5e:3b:c9:e9:b1:33:05:46:53:df:b0:
         0b:65:95:0d:11:68:92:9f:81:cb:55:a7:1d:74:e2:8d:3e:21:
         18:7b:f6:1a:a6:6d:db:9c:c3:f7:14:ad:27:26:8e:8d:8a:42:
         43:fa:30:ea:f6:97:bc:17:70:76:a7:5d:15:89:d7:b4:5b:f7:
         61:01:3d:48:bf:5b:b5:b7:b0:ab:10:69:69:f6:24:a2:ba:96:
         2a:a0:95:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:04 2024 by rpki-client on console-ams.rpki-client.org