Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/784507FC9F4211ECB5BC4D14C4F9AE02.roa
File:                     784507FC9F4211ECB5BC4D14C4F9AE02.roa (raw, json)
Hash identifier:          Rrqo0fHhyR6JUNrP9MMcsUE6hhp2tronEE70lXIOPYI=
Subject key identifier:   59:E0:94:DF:3B:55:16:C9:50:AB:F2:1D:A2:08:0E:AD:99:94:6A:1B
Certificate issuer:       /CN=A9195393/serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D
Certificate serial:       0A49
Authority key identifier: 28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/784507FC9F4211ECB5BC4D14C4F9AE02.roa
Signing time:             Tue 14 May 2024 20:59:34 +0000
ROA not before:           Tue 14 May 2024 20:59:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     139069
IP address blocks:        103.139.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl
                          rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Jun 2024 20:33:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2633 (0xa49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195393/serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D
        Validity
            Not Before: May 14 20:59:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6643d0b6-4452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b6:5e:76:76:d7:48:d7:70:59:40:43:fb:d9:
                    48:ea:dc:b6:b6:22:4e:85:ff:3e:83:b1:66:ef:aa:
                    c7:ce:cf:6f:4b:0c:37:bf:98:43:74:7a:90:90:4f:
                    2a:ef:f9:89:09:76:3d:74:6b:2d:b1:e4:a5:60:1e:
                    42:b3:18:9f:15:45:34:58:a1:d8:2c:e5:57:2c:24:
                    5c:ef:21:4e:ff:d9:69:00:3b:15:21:ea:a9:48:62:
                    36:f0:72:f7:c6:ca:6d:dc:3c:76:25:a9:2f:d0:62:
                    c1:9b:c5:f2:b1:5d:52:7b:11:83:7f:5d:dd:76:34:
                    67:0e:54:6c:d5:6e:3a:cd:d3:79:8a:20:98:7d:73:
                    5a:ed:9a:ff:49:ce:cc:7d:19:4b:8f:5c:af:84:3f:
                    c5:53:bd:69:71:c7:63:a3:5c:ca:be:5e:3e:e9:e1:
                    cd:b1:ba:80:8f:c8:ff:cd:b5:44:d9:ba:d0:c9:b1:
                    c8:a2:42:54:30:fd:6c:42:5a:ad:fe:20:08:d6:b5:
                    b2:69:80:cb:84:8d:f0:3f:c1:b9:3e:5d:a6:b3:28:
                    c1:e7:a1:e7:fe:c7:59:25:b1:44:d0:60:77:b1:8f:
                    1e:95:e6:d5:2e:53:c3:f2:b3:a9:82:92:d6:bd:b0:
                    dd:b2:fe:07:4f:80:10:75:29:39:14:85:ff:e9:27:
                    13:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E0:94:DF:3B:55:16:C9:50:AB:F2:1D:A2:08:0E:AD:99:94:6A:1B
            X509v3 Authority Key Identifier:
                keyid:28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/784507FC9F4211ECB5BC4D14C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:27:e3:d8:e2:32:fd:a4:72:f0:72:cd:6a:67:dd:87:06:c1:
         29:7d:11:28:d1:25:59:d2:af:f7:c1:9a:bc:f2:7d:20:b7:8b:
         c3:64:de:05:63:74:17:97:bb:14:3b:c8:dd:84:34:81:c9:d7:
         b6:4d:89:25:63:b9:e6:ac:34:ab:21:9d:9d:de:92:d2:58:ae:
         08:2d:3c:2e:3f:06:c5:d2:31:77:57:47:ae:a8:54:ea:df:02:
         c7:dd:0b:7b:80:e4:0b:44:cc:84:91:78:ec:4d:e1:cc:52:3c:
         20:f9:7b:ea:9f:c9:31:0b:cc:54:c9:b3:7c:52:65:1d:b8:15:
         6a:fb:79:f1:1f:75:1c:65:f9:7b:ab:4d:9d:76:9c:0b:88:ea:
         58:1b:9d:f5:89:01:90:95:13:7d:b9:56:b6:ee:89:75:38:53:
         8b:2f:91:20:42:a8:1c:ee:72:98:31:6f:bf:1c:92:5f:5b:e5:
         9c:24:ec:b3:93:42:7c:05:c9:43:ea:5e:19:70:ec:a4:12:d9:
         51:90:01:62:64:67:56:39:a1:17:b9:9f:c7:ea:d4:d8:d8:ed:
         cb:0f:dd:41:e7:c4:e5:86:6e:13:02:f9:e7:19:66:48:9b:83:
         d9:c0:a0:6c:8b:79:72:0b:ff:1f:ae:37:d4:2b:00:23:c4:38:
         70:03:81:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 23:05:34 2024 by rpki-client on console-ams.rpki-client.org