Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/DEF977A6E53611EB81682769C4F9AE02.roa
File:                     DEF977A6E53611EB81682769C4F9AE02.roa (raw, json)
Hash identifier:          LaDqbGaPXWK+VJYdbDtzyVpCCEVXkTxkFjG3EBObXnw=
Subject key identifier:   99:A9:95:CA:01:A5:55:40:95:24:BB:B0:C2:76:AE:09:0B:3E:7D:D2
Certificate issuer:       /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Certificate serial:       11AE
Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/DEF977A6E53611EB81682769C4F9AE02.roa
Signing time:             Wed 02 Aug 2023 17:35:04 +0000
ROA not before:           Wed 02 Aug 2023 17:35:04 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     141886
IP address blocks:        203.12.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
                          rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 17:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4526 (0x11ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
        Validity
            Not Before: Aug  2 17:35:04 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64ca93c8-12a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1b:18:85:82:c5:98:78:c3:98:b7:88:1d:18:
                    69:94:a7:d7:92:b4:00:97:a0:e2:c5:b2:a6:da:cf:
                    61:31:6d:d5:e7:b5:88:69:b9:eb:d1:13:db:da:e3:
                    fc:e3:61:d0:e1:79:ef:ab:12:2f:ac:99:21:ee:cf:
                    c9:ee:d8:79:31:59:14:f1:bc:c3:4f:a9:ed:20:eb:
                    55:93:a0:09:66:59:1c:91:a3:3d:67:9c:37:e4:22:
                    e1:f6:48:16:62:e7:75:21:03:9c:0a:ce:b9:b1:32:
                    96:a3:5e:85:20:6c:d9:d1:90:6e:9d:55:32:62:a9:
                    3a:14:9b:27:ad:62:48:9d:6c:0f:e8:4d:8c:87:70:
                    9d:39:23:fa:03:0e:af:1b:27:d2:d8:f9:13:c8:92:
                    a0:f2:9a:f1:6e:ce:96:77:36:5f:1b:75:b6:8c:1c:
                    f4:36:3b:d9:1e:fa:23:8c:b7:6a:1f:2c:61:4b:2e:
                    8b:35:57:ef:53:1a:83:4e:b3:db:07:51:03:57:ae:
                    e7:4b:8a:7b:a9:c0:50:d2:9d:94:fb:2a:1f:cf:49:
                    77:73:ee:1d:f6:45:1b:be:a0:22:12:fd:a3:80:8e:
                    eb:82:e7:12:83:5b:73:67:83:ed:e4:89:10:1f:6d:
                    56:17:89:d9:e3:5e:b5:9a:48:70:de:15:5e:82:d7:
                    73:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A9:95:CA:01:A5:55:40:95:24:BB:B0:C2:76:AE:09:0B:3E:7D:D2
            X509v3 Authority Key Identifier:
                keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/DEF977A6E53611EB81682769C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.12.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:8b:80:4a:c7:6f:9e:7a:3a:10:eb:33:13:98:62:ba:8e:08:
         86:ce:f5:59:34:d1:cf:c4:ad:cd:df:de:29:24:1d:92:2f:8c:
         1c:34:52:92:c4:0f:b4:bc:45:3a:08:dd:c5:c2:10:d3:92:f7:
         11:b3:c9:cd:d8:30:ce:e0:a8:79:5b:43:3b:3e:ba:5e:25:93:
         7d:97:fd:25:c4:f7:66:d1:62:9d:1b:a1:2d:a4:28:c1:3d:35:
         fc:c9:56:bf:de:72:e2:64:85:24:b1:f1:d8:08:4a:ad:49:92:
         d8:f6:12:77:8f:5e:d8:bb:0b:e7:c8:a2:48:de:22:ee:2e:9f:
         f9:57:10:e7:a3:6f:bd:c0:b3:9e:44:d1:cf:94:e3:bf:09:aa:
         b4:ad:97:ba:6e:7c:e0:58:15:66:80:8e:5f:57:9d:28:be:ca:
         f5:b1:c4:29:7d:70:9e:56:c7:78:27:ae:72:38:b8:fc:4c:ad:
         f1:f6:e4:44:2a:0e:4c:51:6f:5e:28:3f:c9:f2:3e:7b:d3:ce:
         82:b9:eb:93:2e:3d:19:a1:59:88:f6:f5:03:f8:4f:db:06:78:
         9f:99:6b:1d:18:c3:01:61:45:39:0c:1c:6b:d2:82:5e:85:d4:
         84:82:47:33:07:26:00:68:75:5d:82:8b:f3:e4:0c:77:22:b1:
         bb:1a:1d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 20:25:42 2024 by rpki-client on console-ams.rpki-client.org