Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/0F072D383AAE11EAB5D8270EC4F9AE02.roa
File:                     0F072D383AAE11EAB5D8270EC4F9AE02.roa (raw, json)
Hash identifier:          smZ3CNEBdSZvQ78ThJQSEWeNvx/p4Bniyj6JMYUhZv0=
Subject key identifier:   68:25:12:4B:EA:69:C1:EC:59:A1:11:A1:D9:AE:FB:43:9C:9C:8E:48
Certificate issuer:       /CN=A916C38F/serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7
Certificate serial:       09D9
Authority key identifier: 22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/0F072D383AAE11EAB5D8270EC4F9AE02.roa
Signing time:             Thu 20 Jul 2023 19:56:50 +0000
ROA not before:           Thu 20 Jul 2023 19:56:50 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     135527
IP address blocks:        103.222.20.0/22 maxlen: 24
                          2405:bf40::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl
                          rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2521 (0x9d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C38F/serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7
        Validity
            Not Before: Jul 20 19:56:50 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64b99182-e093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:32:56:15:29:3b:8a:af:3a:de:56:f8:73:58:
                    b4:4e:97:d3:25:28:2a:0a:48:62:c1:9d:51:fd:b0:
                    e5:cf:63:9f:7e:3c:64:32:f6:fd:8b:40:9c:62:62:
                    e1:74:19:c8:44:f6:28:a0:9d:d7:62:41:19:60:ee:
                    0d:5c:c0:22:6d:a5:cd:5e:33:29:8b:36:58:d0:e4:
                    f3:7f:17:5c:a4:8a:2c:4a:f5:01:4d:06:58:48:37:
                    a2:8a:6f:bb:5d:1c:8f:37:50:20:c9:21:a7:3c:54:
                    69:6c:75:a4:df:78:84:12:35:13:37:d4:7a:a3:46:
                    0d:7f:70:59:4a:ee:a8:62:24:72:1c:1b:4e:29:2a:
                    2b:9a:34:a1:00:8b:5e:e8:d9:bb:33:63:b3:fd:e4:
                    12:83:d1:55:e6:4a:05:d4:02:9a:f1:14:4e:d3:12:
                    47:ae:99:a3:17:ac:7f:0d:57:9d:af:1e:81:f0:32:
                    62:ad:bc:4b:03:a0:d4:ce:61:7f:f2:5c:a4:e3:39:
                    1b:cf:92:03:9b:f2:d6:f6:0e:46:29:08:6c:0c:0a:
                    ae:8c:43:92:22:aa:ca:4e:96:74:f1:8d:6c:13:19:
                    95:53:af:6a:3e:60:fc:27:2e:a6:fe:09:b9:f2:4b:
                    0d:9d:ef:62:8c:4b:50:75:2f:26:ee:4e:7f:22:b3:
                    26:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:25:12:4B:EA:69:C1:EC:59:A1:11:A1:D9:AE:FB:43:9C:9C:8E:48
            X509v3 Authority Key Identifier:
                keyid:22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/0F072D383AAE11EAB5D8270EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.222.20.0/22
                IPv6:
                  2405:bf40::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:00:b2:f6:80:a1:4c:14:54:53:0a:e0:29:8b:9f:0b:d9:80:
         a1:ea:13:9f:2a:2c:f9:ff:42:34:12:34:65:0b:19:ad:31:df:
         26:ab:d8:b4:e2:b5:cd:b2:cc:5a:38:ec:d1:e6:d3:cc:ab:35:
         4f:3b:d4:6e:6e:6e:e3:6e:71:52:a8:b0:d0:ad:8b:a0:36:4a:
         f0:62:68:a5:c4:4c:1b:e9:72:b7:6b:e6:3b:e9:4a:d5:a9:1b:
         36:6b:59:27:d5:03:df:64:65:56:99:d3:c7:27:46:7d:c9:53:
         b2:68:97:cf:0e:7c:94:93:98:c8:dc:6b:cc:85:4c:bd:d3:f9:
         35:35:30:c2:1f:b4:bc:4f:09:8d:f7:59:8c:84:ae:f4:f8:eb:
         67:1e:d2:68:9a:f7:df:56:1e:ba:e9:c7:61:f1:c8:8f:8b:b8:
         b0:26:52:d0:14:30:cb:59:a6:37:dd:d9:7a:bd:85:83:41:90:
         b2:9a:4b:7a:dc:3f:69:06:f6:2c:93:19:f5:74:d2:83:2c:87:
         71:05:ae:d0:81:9c:35:45:e9:f4:1e:9e:51:90:c0:91:fb:06:
         47:2d:60:5c:77:92:63:7f:e3:02:61:2f:47:06:17:e8:37:45:
         ae:c6:bc:be:1a:41:35:32:3a:ed:36:8f:4a:8e:8b:cb:c3:15:
         03:47:7e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 21:31:29 2024 by rpki-client on console-ams.rpki-client.org