Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/8BA7C90C87D311EFA398304BC4F9AE02.roa
File:                     8BA7C90C87D311EFA398304BC4F9AE02.roa (raw, json)
Hash identifier:          aacwCBnTuFAr9XF5qMZHAeoOuXmSZiD1yBXRIbgQv4k=
Subject key identifier:   D4:B5:F0:44:6F:12:7B:71:A3:AC:53:51:CD:59:EF:27:D7:91:5F:5F
Certificate issuer:       /CN=A918664E/serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9
Certificate serial:       013A
Authority key identifier: 4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/8BA7C90C87D311EFA398304BC4F9AE02.roa
Signing time:             Fri 11 Oct 2024 13:20:13 +0000
ROA not before:           Fri 11 Oct 2024 13:20:13 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     150108
IP address blocks:        103.122.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl
                          rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918664E/serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9
        Validity
            Not Before: Oct 11 13:20:13 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6709260c-4540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a4:a5:13:f5:ba:2a:01:5d:fd:09:72:b9:10:
                    71:ee:d1:71:9e:64:2b:a2:68:98:d0:e8:c2:df:b5:
                    5e:77:96:3d:62:6b:49:f9:90:5a:36:4a:45:4f:8d:
                    4b:8d:a7:87:53:5a:06:e4:f6:04:8d:90:4c:ea:df:
                    a6:0e:f1:a0:26:78:4c:6a:49:a6:dc:99:a7:51:65:
                    93:29:be:df:2a:af:93:47:29:f0:5e:83:40:50:12:
                    23:c3:f6:0b:83:9f:d4:f5:b8:fc:9c:31:d3:df:74:
                    75:9d:a8:df:8a:76:82:b5:86:7a:6f:47:05:93:83:
                    66:18:4a:f1:66:72:74:33:8b:44:e7:78:39:a1:3b:
                    13:8b:39:e4:18:33:5c:7f:4e:2c:71:14:45:96:13:
                    fd:89:ea:9d:c4:27:34:f3:a2:07:93:58:70:2f:35:
                    86:7e:cc:1d:20:5a:f0:20:e3:62:40:10:3c:89:d5:
                    6c:6b:73:88:02:f3:3e:99:51:d9:2e:08:ce:af:8c:
                    cc:f9:3d:69:27:bd:f2:7d:74:05:ce:f5:f7:c5:cc:
                    68:a7:b8:78:31:6b:05:1f:81:c2:d2:2d:c0:e8:27:
                    d5:0d:51:3c:14:9b:db:d4:01:4a:7f:58:84:fb:e3:
                    47:2b:30:73:fb:34:f8:e4:fa:5d:ff:04:5b:26:1e:
                    c9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B5:F0:44:6F:12:7B:71:A3:AC:53:51:CD:59:EF:27:D7:91:5F:5F
            X509v3 Authority Key Identifier:
                keyid:4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/8BA7C90C87D311EFA398304BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:7d:0a:47:c1:11:a7:59:93:75:0a:46:2d:87:ee:65:2c:8a:
         8b:5b:59:85:b4:5b:80:d4:e1:39:9e:35:46:e0:3e:a5:7f:1f:
         af:91:48:7d:f9:ce:fe:5c:1f:db:2c:be:f0:ed:43:3e:14:0f:
         9e:0a:70:94:7d:23:3a:a4:e8:fc:a2:48:79:96:22:e4:d1:79:
         00:04:8e:5d:c6:86:79:a4:8c:ca:eb:4b:08:1a:28:c8:ae:91:
         2f:30:3b:98:89:ac:66:da:c0:f7:30:5b:4c:a0:f3:34:98:05:
         81:0a:38:5c:d6:f8:a1:00:9b:e6:12:66:7e:69:99:4c:b8:65:
         c0:bd:3d:4f:64:a7:7e:b6:44:fb:e8:c7:4c:35:fa:7b:b0:d1:
         71:73:5a:b0:a1:c0:e3:c9:d9:e4:74:24:29:42:33:69:61:94:
         30:0c:60:1e:8a:a0:4c:83:b2:fb:1d:d7:e5:20:26:b4:b6:22:
         e7:a8:12:0a:d1:67:2b:52:8a:b1:c5:17:2e:c1:5d:a2:89:15:
         17:6c:19:99:51:1c:f6:84:73:97:62:4b:d6:e3:a3:c2:bf:3e:
         57:74:c6:cb:e8:f7:9f:f0:8b:6b:65:c8:9d:c5:3d:76:92:6c:
         20:1b:39:27:2e:61:64:ec:68:90:8d:80:e0:6f:dc:2e:d9:d8:
         1e:1f:95:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:44 2024 by rpki-client on console-ams.rpki-client.org