Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/1443F7BA200411EE84DAD06BC4F9AE02.roa
File:                     1443F7BA200411EE84DAD06BC4F9AE02.roa (raw, json)
Hash identifier:          xfX0OFFU9ucwd7GNHYjPTYMLnApyyVc1+dbqqZpDo/0=
Subject key identifier:   BA:DE:C5:7F:92:EB:55:90:F0:95:4C:96:AC:30:40:03:EC:3B:6D:C0
Certificate issuer:       /CN=A9192E6F/serialNumber=93F49DD3EDC9D59271AFE1313C921DE66C222064
Certificate serial:       0370
Authority key identifier: 93:F4:9D:D3:ED:C9:D5:92:71:AF:E1:31:3C:92:1D:E6:6C:22:20:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/1443F7BA200411EE84DAD06BC4F9AE02.roa
Signing time:             Tue 01 Aug 2023 02:02:54 +0000
ROA not before:           Tue 01 Aug 2023 02:02:54 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     141008
IP address blocks:        103.154.196.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl
                          rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 02 Jul 2024 01:14:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880 (0x370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192E6F/serialNumber=93F49DD3EDC9D59271AFE1313C921DE66C222064
        Validity
            Not Before: Aug  1 02:02:54 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=64c867ce-4fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2d:b8:5f:b0:db:4f:5e:e2:6d:8b:71:fc:aa:
                    c1:e2:80:5c:94:87:55:1d:55:83:94:0d:57:87:52:
                    57:a9:92:35:0f:a0:49:b2:04:ea:6b:be:7b:bc:db:
                    99:36:ab:61:f6:d5:64:12:f5:56:40:93:0c:0d:91:
                    21:5f:1b:6d:32:fa:50:0b:00:3e:50:6a:93:2e:16:
                    e4:bb:54:c7:b7:a2:d3:d4:20:9d:e4:07:28:53:8d:
                    49:9f:90:b9:b7:22:ea:7d:2e:cc:5d:1c:3a:79:34:
                    9e:6d:4d:7c:70:39:33:fd:58:83:cd:a5:05:05:36:
                    0c:ba:ce:fa:64:05:c9:20:b1:74:e0:b5:8e:e1:fa:
                    83:2c:d6:37:80:03:a7:08:a9:4e:2d:2b:37:64:e2:
                    80:ab:63:21:38:ad:37:ac:66:8f:6d:b1:e1:4e:55:
                    0f:37:74:4f:6a:c5:72:82:f4:13:95:80:56:27:94:
                    5c:c1:69:90:0c:5d:21:21:d1:81:20:6c:02:33:7a:
                    1e:32:51:c2:c1:a4:b3:49:74:92:98:02:45:b3:d8:
                    48:a2:4e:bb:46:0a:8a:1f:50:16:a1:72:9d:b6:cc:
                    dc:e8:6d:00:4b:d2:03:85:cf:0e:7a:25:53:20:bd:
                    d5:3f:60:a3:1e:60:46:d9:f5:39:32:ad:39:42:f9:
                    b5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DE:C5:7F:92:EB:55:90:F0:95:4C:96:AC:30:40:03:EC:3B:6D:C0
            X509v3 Authority Key Identifier:
                keyid:93:F4:9D:D3:ED:C9:D5:92:71:AF:E1:31:3C:92:1D:E6:6C:22:20:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/1443F7BA200411EE84DAD06BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:f7:e3:a0:b7:61:38:b6:2f:e8:60:dd:8d:96:b5:31:1f:1d:
         fe:c8:bd:9d:81:d9:29:08:bd:f8:8b:9e:43:5e:ae:ff:b1:0d:
         0f:33:e0:9f:2f:30:ab:15:d1:65:d7:a1:7d:eb:82:30:f6:8c:
         69:45:16:fe:3a:b2:f4:7c:6d:0f:12:45:64:44:42:cf:a2:4b:
         f6:04:17:7c:72:29:42:c2:1f:22:b1:be:42:65:dd:74:58:b3:
         9f:0a:c7:3f:85:c3:82:7c:ea:6d:55:cd:d9:41:48:a4:90:0d:
         4e:80:3a:3d:17:71:b2:0d:31:3d:c7:00:b9:d8:9e:e1:aa:75:
         1b:90:96:80:8b:49:97:c5:d2:26:4a:cf:43:32:97:a1:93:55:
         e4:d1:ba:4c:c1:8f:84:25:5b:23:f4:0f:e4:9e:bf:00:65:46:
         15:74:ab:8e:4c:7e:9e:8f:32:1f:74:59:fc:8e:89:55:75:1b:
         a3:bd:8a:89:41:00:5d:ac:c1:47:79:0a:ce:fe:e4:67:e9:19:
         c1:a7:ab:0c:c5:b8:2a:36:31:fb:22:15:69:43:dc:f8:cd:0d:
         70:2b:60:d2:0b:29:c2:77:45:1a:a6:07:aa:56:e7:0b:42:31:
         42:6b:39:bd:db:69:41:75:2f:a0:37:aa:ec:dc:03:6c:fa:6b:
         8c:a8:66:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 04:13:34 2024 by rpki-client on console-ams.rpki-client.org