Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/A7F88866489611EFA3CACC09C4F9AE02.roa
File:                     A7F88866489611EFA3CACC09C4F9AE02.roa (raw, json)
Hash identifier:          K+W6rT3tNiWzS6zxZo8wMVS4noOj7tuApl6Pzt9kSYU=
Subject key identifier:   46:FA:EB:30:89:26:9D:F4:97:4C:B2:F4:27:A2:33:3C:4F:BF:14:BF
Certificate issuer:       /CN=A9184F2D/serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2
Certificate serial:       04EB
Authority key identifier: 70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/A7F88866489611EFA3CACC09C4F9AE02.roa
Signing time:             Tue 23 Jul 2024 01:55:37 +0000
ROA not before:           Tue 23 Jul 2024 01:55:37 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     8075
IP address blocks:        103.166.60.0/24 maxlen: 24
                          103.166.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl
                          rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1259 (0x4eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184F2D/serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2
        Validity
            Not Before: Jul 23 01:55:37 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=669f0d99-e417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e9:65:56:48:e7:b7:7b:58:90:de:2b:09:de:
                    a0:ff:ce:fa:b8:f0:cf:de:f9:ee:93:cf:85:11:20:
                    93:25:e3:e8:5d:bf:6c:0c:b2:e2:60:be:fc:c0:d2:
                    53:f6:90:d5:9e:dc:8f:97:83:5d:cd:91:3c:98:6f:
                    a1:95:29:30:c3:58:fb:5f:51:2b:06:28:d1:a0:f2:
                    ad:46:ca:8e:4f:dd:ee:d4:00:97:87:4e:eb:14:61:
                    23:96:d3:67:6f:d2:6e:83:e7:28:04:f9:fd:34:0e:
                    9c:00:a0:69:c9:be:87:f1:f8:41:1a:d2:47:50:f0:
                    ca:5b:9c:13:35:e6:34:0c:7d:0f:28:f1:5e:2f:71:
                    44:42:53:ee:9a:38:16:5a:e1:4f:0d:27:35:41:60:
                    93:e1:1b:68:52:2e:06:70:d1:81:6c:f9:22:79:f7:
                    24:e6:40:5a:07:75:d4:d2:d9:cf:dc:93:d1:01:6d:
                    7a:a4:84:64:c3:62:68:b2:c3:12:2f:d9:cf:34:35:
                    f4:59:31:7f:ac:bb:04:8b:21:e4:82:c4:25:68:7b:
                    62:3c:0b:10:d7:4d:42:62:70:ab:50:1d:43:2f:00:
                    3a:85:13:10:ca:7b:8c:4e:13:c9:4b:b5:93:87:85:
                    10:dd:d7:63:37:e1:8f:07:1b:3b:58:62:9b:00:5c:
                    b0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FA:EB:30:89:26:9D:F4:97:4C:B2:F4:27:A2:33:3C:4F:BF:14:BF
            X509v3 Authority Key Identifier:
                keyid:70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/A7F88866489611EFA3CACC09C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:bf:18:d9:bd:f3:7a:1d:ca:84:4d:37:cd:6b:fe:22:14:f0:
         25:2d:a0:64:71:75:7e:d2:09:61:7e:fc:d7:af:85:5e:72:41:
         7f:65:f6:97:af:96:c0:b5:17:76:c8:7d:e8:59:63:e9:d8:ce:
         f5:d0:cb:14:4f:df:d3:12:6b:f7:ec:32:29:1d:32:b5:00:83:
         b9:18:6f:ae:45:fd:2f:c3:fa:70:8f:a7:4e:3c:d9:ba:f4:59:
         60:e7:29:06:f7:28:63:68:ec:72:18:7d:ee:1f:2b:ba:b6:34:
         63:52:b9:18:d3:4c:08:f9:5b:cb:8e:03:f7:17:06:45:87:4e:
         4e:dc:8d:66:9b:92:12:ae:72:c7:fd:99:99:f7:db:2c:be:f2:
         7b:94:b5:cd:fc:7c:75:26:f1:ca:da:0f:af:b5:2e:55:8d:b3:
         ab:7a:50:2f:cd:67:5b:e8:b3:f4:bd:c1:e0:11:d1:d2:1e:7e:
         1d:b6:cc:65:bf:bc:ae:ea:ad:63:56:1f:ed:dd:79:e3:fc:0b:
         18:0e:fe:b3:5d:05:df:ab:71:1c:c9:c4:38:25:43:d1:92:b8:
         6c:e1:ee:8c:9a:11:9d:92:12:9b:aa:c6:a9:b9:d3:dd:78:a7:
         75:8f:3f:09:d8:2e:8f:4d:24:12:5c:4d:d4:29:c6:02:6c:98:
         83:8d:f0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:21:21 2024 by rpki-client on console-fra.rpki-client.org