Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/28536FDC340111EDB747A054C4F9AE02.roa
File:                     28536FDC340111EDB747A054C4F9AE02.roa (raw, json)
Hash identifier:          K66E2OjMNQ4DObx8A9qLvG2DwJwzcn3km54gG0lAGG8=
Subject key identifier:   AE:BA:6C:EA:64:82:9D:97:E2:EA:9E:2C:F4:18:43:12:F9:8A:CD:85
Certificate issuer:       /CN=A916B1F5/serialNumber=FF3E0E0FA7FF257DBD86E62B129A994D8A49D84E
Certificate serial:       C2
Authority key identifier: FF:3E:0E:0F:A7:FF:25:7D:BD:86:E6:2B:12:9A:99:4D:8A:49:D8:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/28536FDC340111EDB747A054C4F9AE02.roa
Signing time:             Thu 03 Aug 2023 04:03:37 +0000
ROA not before:           Thu 03 Aug 2023 04:03:37 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     63199
IP address blocks:        103.62.156.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.crl
                          rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B1F5/serialNumber=FF3E0E0FA7FF257DBD86E62B129A994D8A49D84E
        Validity
            Not Before: Aug  3 04:03:37 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64cb2719-9d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cb:ca:96:ef:c3:fd:b5:90:73:7a:b5:57:52:
                    f6:a7:cc:6b:ec:f3:f0:5c:13:4a:6b:e4:dc:ca:03:
                    d1:4d:27:6f:b0:bd:e7:e1:9a:74:2b:a5:20:6f:72:
                    c2:79:01:73:96:2e:55:af:9d:1f:11:08:2f:de:53:
                    fb:93:f3:2a:bc:f6:6b:ad:45:c8:51:fd:5e:16:1f:
                    41:15:10:7d:5c:f6:d9:a6:33:df:03:ee:ee:e8:79:
                    5d:a2:d7:d8:31:33:fe:89:3e:80:8c:04:f7:ec:bd:
                    3a:e8:0b:29:1c:33:33:b6:a2:f9:0a:70:82:00:25:
                    f4:e9:38:85:14:ee:00:39:83:21:d4:37:ef:85:19:
                    d2:4d:62:6c:cb:9a:62:d2:a6:4f:07:0d:13:96:4f:
                    0b:be:ef:dc:25:47:bf:c7:9c:87:71:4f:11:ab:48:
                    48:d7:ef:e0:54:91:f1:3d:65:76:4c:6d:79:9b:b5:
                    45:c3:7d:16:d4:ce:4f:52:32:8c:9a:f8:76:d7:ca:
                    b0:12:fb:8a:9f:c6:a5:79:65:17:7f:b7:33:04:41:
                    4d:0c:52:d7:70:37:79:1c:f4:1a:63:e6:be:e0:b3:
                    1b:86:6f:3a:7a:6a:eb:c5:e8:b7:0a:5a:02:55:83:
                    d0:6c:e8:6b:a2:c8:61:82:05:1b:dd:77:ee:81:e6:
                    87:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:BA:6C:EA:64:82:9D:97:E2:EA:9E:2C:F4:18:43:12:F9:8A:CD:85
            X509v3 Authority Key Identifier:
                keyid:FF:3E:0E:0F:A7:FF:25:7D:BD:86:E6:2B:12:9A:99:4D:8A:49:D8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/28536FDC340111EDB747A054C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.62.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:b3:e4:c8:2f:03:8e:e5:50:83:bb:c0:00:ee:4c:24:92:6e:
         73:82:d1:cc:82:56:25:f8:64:69:7f:17:f2:27:f8:4b:65:93:
         2a:a0:fb:90:33:ad:4b:73:cd:f2:34:34:8a:84:2f:5a:3e:49:
         4f:b9:c2:5e:3e:f6:70:20:6b:9e:c1:61:6d:35:9c:5b:39:6b:
         9b:be:45:2c:75:f6:1a:6a:83:c6:89:65:5b:56:a6:c6:e9:78:
         f9:e0:53:3a:b6:67:d3:0b:a2:9a:97:31:1b:36:27:4d:64:35:
         da:9d:5a:27:55:be:61:b0:21:46:a9:08:19:fe:5f:e5:75:e5:
         38:df:45:bd:5e:47:d4:39:e3:3d:7f:63:48:1e:8b:bb:39:63:
         e1:0d:cb:a0:5f:a0:69:6d:68:9d:80:68:26:a3:04:da:81:5b:
         f8:60:b9:2c:72:cf:23:42:1f:e2:e2:25:1a:38:05:e2:86:c7:
         13:56:b2:ce:1e:06:d3:1c:19:75:49:7c:3c:d3:49:72:f7:bb:
         2b:54:60:ca:1c:d9:88:67:02:f4:f1:b2:ac:72:f3:40:d0:1a:
         0a:50:33:71:4a:1d:22:a8:fa:88:1b:52:b4:28:bb:0c:b3:90:
         2d:4b:b5:b1:ce:e8:66:9b:a3:e8:42:e7:45:04:35:9c:e0:5b:
         cc:63:a8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:48:50 2024 by rpki-client on console-fra.rpki-client.org