Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/691CFE18184B11EA85906435C4F9AE02.roa
File:                     691CFE18184B11EA85906435C4F9AE02.roa (raw, json)
Hash identifier:          EBzBc5n7HwK4pw1sKzjBl6bKWRAQgxndyRnGOh0QDEU=
Subject key identifier:   7D:98:D8:6F:80:8B:AC:52:43:B1:96:FB:8D:98:87:D8:EC:2C:A5:75
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       335F
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/691CFE18184B11EA85906435C4F9AE02.roa
Signing time:             Tue 30 Jan 2024 16:12:48 +0000
ROA not before:           Tue 30 Jan 2024 16:12:48 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     38516
IP address blocks:        103.54.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 15:54:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13151 (0x335f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Jan 30 16:12:48 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=65b92000-6a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3b:50:09:0f:45:48:21:f3:76:f4:bf:e6:15:
                    6f:ea:de:ef:3d:0b:da:b9:c8:1d:62:3f:cb:f3:c3:
                    f0:62:84:51:39:fe:93:53:c0:c2:4c:95:fa:dc:76:
                    1b:5a:ca:a1:00:19:b9:28:6b:2c:30:f9:5e:5c:99:
                    e9:fd:6f:74:6d:6c:63:ca:9b:c8:9d:55:a3:3c:56:
                    0c:ed:22:6c:ab:d3:60:33:0b:dc:2d:e3:52:62:18:
                    b1:d8:42:16:79:48:96:ba:da:9a:0b:6b:23:47:9f:
                    f9:53:d9:e5:cb:c7:26:37:54:aa:36:07:a8:a5:e4:
                    a5:13:1b:ac:cc:bf:c4:4a:ac:76:3d:32:84:f9:45:
                    4b:1a:13:b8:9d:d2:dc:4f:4f:25:db:05:f2:1e:1e:
                    1a:3e:c7:4f:f9:1d:91:7a:00:d8:dd:03:1c:87:f5:
                    d7:b3:6d:48:64:4e:4a:67:57:cb:41:4b:0b:47:7e:
                    cf:eb:1c:04:57:2d:4f:d5:81:45:58:a5:91:4c:5b:
                    9c:a4:2a:2a:6d:a2:3e:0d:1d:d1:00:ea:d6:b8:f4:
                    d5:b7:10:66:18:29:0c:63:8f:23:3e:51:63:c8:37:
                    ac:8f:cf:36:18:72:a7:b5:60:95:d4:9d:d4:df:19:
                    8d:0a:f6:90:17:04:e6:8a:de:fd:f2:6c:30:bd:67:
                    fd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:98:D8:6F:80:8B:AC:52:43:B1:96:FB:8D:98:87:D8:EC:2C:A5:75
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/691CFE18184B11EA85906435C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:f8:28:55:bb:2e:1b:6c:35:70:30:21:a8:05:a8:2f:06:67:
         9b:af:10:5a:2f:78:23:c7:f0:f0:6e:ce:d6:f6:f7:22:9a:02:
         82:41:48:ea:61:ba:2d:33:d9:c8:f1:1d:ae:13:58:e7:1a:b6:
         69:f6:32:76:4e:1f:e0:bd:1d:1b:5c:30:ab:d7:e3:c7:f6:b9:
         a3:2c:62:91:8f:1c:11:d5:e1:af:a7:a7:3d:50:b9:b5:a0:97:
         7f:3c:b5:db:4e:a0:1d:bf:20:58:66:db:00:c1:e6:45:6a:d6:
         43:c8:e7:4d:c5:65:10:24:49:58:a9:fc:c3:f2:f2:36:42:79:
         e8:9e:61:7b:4c:6e:98:eb:33:88:dd:11:a0:2a:5a:33:08:a8:
         53:ca:de:b1:5f:11:7b:1c:23:ef:54:19:e2:44:85:33:79:74:
         61:c6:08:e3:f9:6a:11:6e:40:36:46:4d:87:ce:c5:e4:10:6f:
         96:1d:a1:b7:d1:2f:ff:c7:06:c5:44:e9:6e:da:d3:d2:26:dc:
         78:1e:ed:e8:5f:6c:b2:e2:38:e2:70:dd:dd:3e:ba:cd:a9:7e:
         dd:88:69:14:10:cd:60:30:8e:e5:70:fe:33:5e:79:9c:d8:d4:
         85:9c:86:c8:93:d8:76:2a:40:08:da:cf:1a:5a:5f:30:f3:ae:
         c4:0e:12:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 16:48:40 2024 by rpki-client on console-ams.rpki-client.org