Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/A0B44D9C60E211EFB1283930C4F9AE02.roa
File:                     A0B44D9C60E211EFB1283930C4F9AE02.roa (raw, json)
Hash identifier:          7KS0JUdz+JcF4TmwudYybbwgUgc23JZA1l2TeoYilJA=
Subject key identifier:   36:7F:7A:78:BE:47:21:AF:A2:4B:45:1E:F7:C1:17:8C:D1:4F:F7:D7
Certificate issuer:       /CN=A917F241/serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283
Certificate serial:       40
Authority key identifier: 29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/A0B44D9C60E211EFB1283930C4F9AE02.roa
Signing time:             Thu 22 Aug 2024 23:59:55 +0000
ROA not before:           Thu 22 Aug 2024 23:59:55 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     153306
IP address blocks:        103.111.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl
                          rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Sep 2024 04:46:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F241/serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283
        Validity
            Not Before: Aug 22 23:59:55 2024 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=66c7d0fa-fde8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:80:47:97:58:2f:d8:8a:ba:a3:6c:ef:15:e2:
                    0e:45:be:cd:90:1a:c1:69:ca:43:75:bf:f3:0d:d7:
                    04:f2:b3:ac:25:78:5e:a9:f3:9f:2c:2c:31:3c:2f:
                    1c:1c:fb:a4:58:98:0c:bc:27:3c:af:0f:b8:bf:ba:
                    06:1a:40:f6:1d:7e:a4:9c:cb:f8:7c:60:63:d1:cd:
                    d8:48:cc:5b:83:6b:32:86:87:db:54:a2:d8:34:9c:
                    68:c7:6d:8b:af:e4:b6:f7:e5:74:21:7e:c3:64:69:
                    98:a4:c8:78:e0:79:54:c3:b4:13:78:b3:b9:53:17:
                    a2:8c:9b:da:5a:a4:36:60:e0:0b:59:68:b5:5f:21:
                    cb:27:a5:b1:22:be:ac:d4:16:34:4e:46:58:fd:6b:
                    7f:44:b8:a2:ac:c1:d4:ff:3b:7f:49:66:18:94:61:
                    c9:3b:bc:b6:16:ef:92:e1:44:50:f1:c5:c1:22:f0:
                    02:30:b1:78:9b:50:7b:7f:6d:69:16:ba:cf:a1:ad:
                    fa:fc:14:54:00:a4:50:43:9e:59:21:a0:c7:be:bc:
                    39:f5:1c:47:3e:c2:c3:30:c7:96:fa:0f:ec:f4:3e:
                    12:30:f6:62:18:ba:7e:fb:bc:b9:a0:e4:bb:ea:7a:
                    95:c8:22:9f:5b:9c:06:34:5e:e1:de:a8:b5:65:7d:
                    d8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7F:7A:78:BE:47:21:AF:A2:4B:45:1E:F7:C1:17:8C:D1:4F:F7:D7
            X509v3 Authority Key Identifier:
                keyid:29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/A0B44D9C60E211EFB1283930C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:a9:79:df:81:f8:10:63:59:a7:11:d5:09:3f:b8:9f:60:02:
         f0:f3:e3:2a:65:e2:3a:be:b7:d9:61:ff:5d:97:8b:ec:04:52:
         1d:d1:f6:d0:29:91:7c:0f:1b:91:f8:23:e0:50:e3:8a:29:d0:
         aa:c9:66:e2:11:86:19:e5:2a:3a:ca:fc:dd:90:32:26:ec:8b:
         40:fe:e4:d9:4c:6b:85:d0:af:ea:3e:ec:28:9a:43:c1:f4:6e:
         0e:54:2b:8c:14:99:22:3b:90:da:f1:cc:0e:6e:e1:9f:fd:c4:
         ef:28:ff:7f:b5:b2:2d:3f:b2:1e:b9:ee:91:85:f4:93:5c:1b:
         8b:f0:6a:2d:ec:23:2a:5c:2a:db:27:50:fc:3f:0b:0e:b4:b5:
         1d:ee:5e:78:ee:5b:f5:3a:64:c8:2e:13:dd:1a:ab:cb:82:3d:
         ab:1b:f4:f5:d5:06:25:99:8c:cd:d8:3c:a5:b2:15:98:f3:4b:
         ae:4c:8a:31:80:5d:73:57:ff:a2:15:a4:80:05:2b:0f:58:29:
         2a:f7:4b:f1:21:a4:2a:17:4e:23:97:ae:2c:83:ac:ed:e8:b5:
         65:32:5e:5c:38:a6:d8:a9:f6:f7:5a:99:5c:61:e6:63:08:68:
         ad:0b:1a:c4:ab:3f:b4:e6:f5:70:96:75:85:38:c1:f1:76:3b:
         57:70:86:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 08:11:55 2024 by rpki-client on console-ams.rpki-client.org