Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/A84F7CEE432711EA87CB0E53C4F9AE02.roa
File:                     A84F7CEE432711EA87CB0E53C4F9AE02.roa (raw, json)
Hash identifier:          MpvzI6CZw61K9EHN7FjBJQlJM7cvj1uvm28ieQf0lOE=
Subject key identifier:   EF:D9:C8:61:00:ED:77:2F:2C:20:07:91:AB:28:A7:2B:46:8F:8B:5A
Certificate issuer:       /CN=A9188D8F/serialNumber=A52F8F9859CAC47D685427234D2616EB9E539634
Certificate serial:       0A14
Authority key identifier: A5:2F:8F:98:59:CA:C4:7D:68:54:27:23:4D:26:16:EB:9E:53:96:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pS-PmFnKxH1oVCcjTSYW655TljQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/A84F7CEE432711EA87CB0E53C4F9AE02.roa
Signing time:             Tue 06 Feb 2024 20:38:22 +0000
ROA not before:           Tue 06 Feb 2024 20:38:22 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     135032
IP address blocks:        103.206.184.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.crl
                          rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pS-PmFnKxH1oVCcjTSYW655TljQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 20:39:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2580 (0xa14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188D8F/serialNumber=A52F8F9859CAC47D685427234D2616EB9E539634
        Validity
            Not Before: Feb  6 20:38:22 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65c298be-1deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:31:05:1f:dd:36:4a:7f:d8:72:bc:16:70:56:
                    c8:11:04:f1:7d:d1:16:f6:7a:69:1e:49:a5:56:d0:
                    cc:98:f7:e6:ec:93:3f:94:0f:2f:4c:28:d5:4d:bb:
                    e0:82:0b:e2:86:49:a8:37:e4:38:83:7a:b0:44:d0:
                    4a:b8:76:15:58:30:b3:95:1a:b7:98:b0:21:d6:d7:
                    3a:97:56:7a:ef:c1:0d:d6:28:77:1f:86:ea:73:b2:
                    50:52:33:cc:42:68:9d:84:02:05:80:36:b1:84:09:
                    81:45:cb:a9:84:88:ae:d0:20:41:11:2b:a9:57:13:
                    19:bc:df:a3:a9:02:4b:1c:8a:62:82:41:c4:eb:6e:
                    0f:dd:65:de:5b:c8:cf:95:2c:36:70:12:20:76:48:
                    2d:75:1e:20:48:da:30:b6:94:ea:93:79:7f:6b:f6:
                    63:00:66:b5:3c:c0:fc:02:e7:05:2f:c1:28:e9:b0:
                    f8:9b:b7:50:7d:a5:be:bc:de:e7:70:06:fc:c1:f1:
                    39:b0:a2:dc:d1:7b:f6:aa:a9:40:a1:9b:d6:ba:00:
                    7e:ec:97:3a:f3:dd:d8:61:16:1f:8f:5b:f2:ef:c1:
                    7e:dc:58:ec:ed:f9:bb:ec:4c:87:04:b9:9f:89:08:
                    69:77:b6:21:56:6f:ba:da:b8:2a:ad:c5:65:c0:6e:
                    08:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D9:C8:61:00:ED:77:2F:2C:20:07:91:AB:28:A7:2B:46:8F:8B:5A
            X509v3 Authority Key Identifier:
                keyid:A5:2F:8F:98:59:CA:C4:7D:68:54:27:23:4D:26:16:EB:9E:53:96:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pS-PmFnKxH1oVCcjTSYW655TljQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/A84F7CEE432711EA87CB0E53C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.206.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:98:8e:20:ee:f9:52:b9:51:e1:5f:4c:5d:ea:dc:09:d3:0c:
         a3:5f:14:03:75:bd:81:e9:9b:4c:c3:f3:e5:33:a6:58:24:76:
         cb:46:d3:35:6e:68:33:88:5f:48:40:ac:e2:23:72:03:6e:21:
         b8:49:b3:fe:7a:60:27:f7:22:17:44:b4:53:9d:cc:ab:75:95:
         ad:8e:ec:c2:2b:71:7c:fb:10:b1:f8:72:4a:c4:b9:28:c9:a5:
         ef:b0:45:2c:4d:9b:c2:e9:49:53:15:4e:5a:f2:84:5e:73:cb:
         a7:4e:9f:5b:c3:54:11:3e:70:b4:24:15:e2:f8:03:cc:09:24:
         87:b9:d6:ad:30:57:0f:9b:ab:dd:dd:fb:6c:c2:32:ab:d5:95:
         ed:66:eb:4a:37:20:48:28:de:9e:9d:ac:11:f0:97:d2:31:78:
         af:e8:eb:6a:4d:a4:5e:d7:25:c2:83:d0:20:bf:80:58:45:e7:
         3c:26:a0:83:1f:5c:f5:27:f4:ac:27:ed:62:b2:6a:f8:45:58:
         63:08:aa:b8:b5:a2:5d:c6:7c:8e:8a:4f:65:e7:c2:d7:ad:9c:
         29:de:bb:5b:a7:63:6e:38:f6:e4:09:bf:c9:de:ca:0b:9f:fb:
         ee:7e:b3:68:15:2a:40:be:e3:8c:af:8c:c9:eb:24:a7:e4:1a:
         66:c9:ae:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 21:49:43 2024 by rpki-client on console-fra.rpki-client.org