Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/28536FDC340111EDB747A054C4F9AE02.roa
File:                     28536FDC340111EDB747A054C4F9AE02.roa (raw, json)
Hash identifier:          nwv4OnHIeiaOuT9R5A9U+o0snvNWMEn4+NiK+Y5blsM=
Subject key identifier:   C7:93:E7:4E:29:F4:E3:3C:1E:C3:5B:00:08:F1:FC:9C:68:0A:4B:5B
Certificate issuer:       /CN=A916B1F5/serialNumber=FF3E0E0FA7FF257DBD86E62B129A994D8A49D84E
Certificate serial:       017D
Authority key identifier: FF:3E:0E:0F:A7:FF:25:7D:BD:86:E6:2B:12:9A:99:4D:8A:49:D8:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/28536FDC340111EDB747A054C4F9AE02.roa
Signing time:             Wed 31 Jul 2024 03:55:11 +0000
ROA not before:           Wed 31 Jul 2024 03:55:11 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     63199
IP address blocks:        103.62.156.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.crl
                          rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381 (0x17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B1F5/serialNumber=FF3E0E0FA7FF257DBD86E62B129A994D8A49D84E
        Validity
            Not Before: Jul 31 03:55:11 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a9b59f-267c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:38:c3:36:3a:55:26:4a:f0:32:a5:ba:40:37:
                    e4:54:71:e0:e3:36:74:a0:c5:e8:b5:31:9a:ef:3b:
                    db:61:e0:dd:5d:1e:01:47:cb:be:b1:47:81:7b:f7:
                    61:57:2a:2c:53:df:a8:63:06:14:35:3f:88:2c:dc:
                    13:b1:cf:3b:bc:44:38:38:0d:79:af:6d:b9:ac:ce:
                    7a:af:b1:68:bd:dd:49:b6:6c:aa:18:07:66:bc:3d:
                    91:16:10:37:f6:35:c2:ec:e5:bd:fe:1a:e0:99:85:
                    e1:8c:f3:49:c0:b7:2a:37:55:4e:64:4c:4e:88:65:
                    43:f3:63:4d:ed:6e:a7:c1:78:ad:84:98:bb:23:2c:
                    a1:89:c8:e0:a9:01:dd:83:e6:6a:67:ce:3c:89:ec:
                    de:bd:48:96:0e:cf:65:03:75:97:dc:94:46:85:46:
                    44:b0:54:26:6b:4a:4b:d4:00:52:c4:23:71:fd:86:
                    d8:c2:a9:e4:dc:10:0e:f8:4e:cf:d4:6c:b6:0d:4b:
                    e0:60:be:84:4c:ce:db:24:a0:2d:57:74:42:ef:c0:
                    e3:54:e7:5d:da:e4:b3:06:2c:6f:dd:b2:53:8d:83:
                    60:1e:60:5f:51:2a:1e:4f:fd:b2:a0:9c:a7:12:9b:
                    92:ff:f8:d5:93:c3:c4:14:71:ae:a8:19:6c:9f:e7:
                    ff:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:93:E7:4E:29:F4:E3:3C:1E:C3:5B:00:08:F1:FC:9C:68:0A:4B:5B
            X509v3 Authority Key Identifier:
                keyid:FF:3E:0E:0F:A7:FF:25:7D:BD:86:E6:2B:12:9A:99:4D:8A:49:D8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/28536FDC340111EDB747A054C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.62.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:aa:97:bf:0b:cf:3d:15:97:40:cb:54:4e:7e:6b:2e:b0:8e:
         2c:40:8d:db:e2:18:e4:b6:26:23:55:fb:c7:88:8f:5c:02:42:
         92:8b:45:5a:56:46:d6:c5:d0:36:e0:9c:1a:81:4d:ff:6b:de:
         ba:59:49:1f:02:29:5c:14:1f:70:e1:ea:33:14:59:f0:58:e3:
         7e:d3:37:65:a6:94:93:42:58:fe:98:87:55:26:09:13:c4:ef:
         bc:21:89:52:5b:98:7b:a3:e9:a6:a2:46:d3:92:16:97:d5:03:
         c4:0e:58:42:c3:9e:e2:74:60:df:58:ba:eb:e3:b2:de:14:c4:
         9e:cc:8f:b5:a1:53:74:3d:cd:ff:89:07:77:3d:72:77:bc:06:
         11:66:f2:de:22:b1:c6:b3:8e:0f:ff:eb:35:36:ab:6e:48:f3:
         53:92:c0:71:cf:8f:71:7a:d3:a4:3e:a9:7c:5f:03:19:33:e7:
         f0:32:76:73:08:d5:ce:af:44:48:24:7a:62:ee:2c:cd:67:7a:
         c3:c5:45:c9:a1:79:df:09:15:30:b4:be:7d:3e:78:9d:3e:48:
         6c:f8:33:b4:36:41:dc:b6:28:20:88:10:2a:6e:b8:a1:43:8c:
         61:6b:7e:aa:77:a4:d9:95:18:8b:62:94:ab:04:e1:0a:83:c4:
         12:ce:3d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:39 2024 by rpki-client on console-ams.rpki-client.org