Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/483ED5BA0A1C11EEA415BE0CC4F9AE02.roa
File:                     483ED5BA0A1C11EEA415BE0CC4F9AE02.roa (raw, json)
Hash identifier:          D/3crIyU8HjWAFwEMFpIqSzaKamRrK84YSy2F/Qym+c=
Subject key identifier:   32:DB:6D:E8:51:CF:96:9C:F6:7E:9A:A7:27:9E:38:04:7C:02:10:AA
Certificate issuer:       /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial:       0F67
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/483ED5BA0A1C11EEA415BE0CC4F9AE02.roa
Signing time:             Wed 16 Aug 2023 18:16:33 +0000
ROA not before:           Wed 16 Aug 2023 18:16:33 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     40065
IP address blocks:        103.140.8.0/24 maxlen: 24
                          103.140.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
                          rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 18:32:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3943 (0xf67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
        Validity
            Not Before: Aug 16 18:16:33 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64dd1281-6fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:77:13:5d:3c:30:ff:c3:09:49:5d:0b:5d:c3:
                    8c:7f:eb:47:23:ab:b1:97:29:24:fe:b1:29:13:f7:
                    50:45:93:3a:b6:cd:44:95:4e:5d:f8:56:fb:36:aa:
                    bc:c2:e4:38:94:3f:ec:c4:9d:c2:32:5b:a2:2b:8f:
                    26:24:1f:fe:be:53:be:2f:82:bb:21:b3:27:28:44:
                    58:fb:94:f8:17:2d:51:c7:90:54:f2:7d:21:32:7a:
                    e8:6f:0d:16:59:de:38:12:3e:13:4f:bc:e3:1d:d2:
                    65:84:00:41:46:08:9b:26:cd:05:35:4c:8e:4a:06:
                    42:88:7e:81:fb:d6:b3:15:d4:9e:b9:cc:b2:0d:1e:
                    16:35:28:32:f3:87:14:36:b1:39:c4:39:71:d9:8f:
                    fd:9e:e3:f2:26:b1:27:ef:30:1e:43:e3:94:e7:89:
                    0c:11:ae:5b:ab:01:60:12:0b:86:81:da:46:48:84:
                    a1:56:b8:dd:f9:b2:24:65:29:0a:83:5d:a8:40:88:
                    92:09:64:b8:ad:19:7f:1d:20:64:52:e2:73:cd:9d:
                    5f:5e:23:0e:5c:f7:1a:87:bb:b2:fd:fb:57:0e:25:
                    c9:a2:ec:b3:49:4f:7c:5c:f6:7f:c7:0f:c7:51:00:
                    32:35:93:ca:7b:e1:bf:89:97:b8:d7:56:cb:77:06:
                    a0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:DB:6D:E8:51:CF:96:9C:F6:7E:9A:A7:27:9E:38:04:7C:02:10:AA
            X509v3 Authority Key Identifier:
                keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/483ED5BA0A1C11EEA415BE0CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:4a:8c:28:3e:7e:b4:60:f5:9b:ea:21:47:3a:68:6d:b5:37:
         94:69:f4:3f:6a:68:54:4a:c2:3f:33:80:2b:37:1d:06:38:3d:
         17:f2:16:eb:52:ba:5d:ab:b2:e3:5c:6e:77:83:a4:e9:1f:3e:
         cf:66:03:73:41:5f:a1:72:58:07:02:e7:02:d8:02:bc:dd:08:
         00:b3:36:0a:21:f3:42:90:5c:03:6e:61:1f:de:5e:32:b3:45:
         0d:5a:fe:4d:a7:5f:b6:80:26:15:c0:67:15:dc:e9:2c:77:98:
         f4:0c:f0:07:05:ff:06:56:cb:4b:2b:23:07:c7:c5:89:ad:37:
         d3:28:fa:56:5a:2d:65:ae:4a:9a:1f:83:7c:cf:11:78:28:e8:
         8c:c2:12:42:42:e7:91:ed:1f:9c:fb:a5:a7:a4:8e:9c:d5:96:
         bc:bf:d0:4d:b5:9c:ef:f8:80:2d:3d:4e:0f:09:f5:0a:59:e5:
         96:12:8b:a5:a1:23:38:0f:57:a5:b3:81:b6:9e:c6:0a:35:cf:
         e0:92:34:d1:36:2c:c1:a0:76:61:25:f1:c9:12:7f:3b:3f:1b:
         76:94:55:10:e0:4b:db:71:83:d3:a3:11:85:a4:bc:f8:eb:b2:
         06:9a:8b:fe:8c:16:fc:f5:ce:26:ec:7d:49:13:7a:1a:43:2e:
         d6:00:c8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:50:28 2024 by rpki-client on console-fra.rpki-client.org