Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/32D02AAABCC711EDB96C8F81C4F9AE02.roa
File:                     32D02AAABCC711EDB96C8F81C4F9AE02.roa (raw, json)
Hash identifier:          +0RjdoO/nNOOxvYVrVomPnCBwTh8UeSrzAvUryBi70Y=
Subject key identifier:   4A:A6:69:38:84:92:34:2C:BA:7C:3B:0E:07:AA:57:C5:33:E4:A7:C9
Certificate issuer:       /CN=A919B300/serialNumber=1A198F9A17F0B35EDB849560FB5F98501C3C9CAF
Certificate serial:       0F31
Authority key identifier: 1A:19:8F:9A:17:F0:B3:5E:DB:84:95:60:FB:5F:98:50:1C:3C:9C:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhmPmhfws17bhJVg-1-YUBw8nK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/32D02AAABCC711EDB96C8F81C4F9AE02.roa
Signing time:             Thu 06 Jun 2024 18:41:26 +0000
ROA not before:           Thu 06 Jun 2024 18:41:26 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     139312
IP address blocks:        103.221.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/GhmPmhfws17bhJVg-1-YUBw8nK8.crl
                          rsync://rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/GhmPmhfws17bhJVg-1-YUBw8nK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhmPmhfws17bhJVg-1-YUBw8nK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3889 (0xf31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B300/serialNumber=1A198F9A17F0B35EDB849560FB5F98501C3C9CAF
        Validity
            Not Before: Jun  6 18:41:26 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=666202d6-fc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3a:6a:73:3f:f4:ac:cc:52:48:9e:20:a0:fe:
                    fe:54:fe:c3:c2:74:61:13:14:f7:ac:fc:07:82:48:
                    09:ec:c0:b3:1d:c1:a3:60:45:01:1f:56:2b:cc:ff:
                    98:b9:13:37:81:aa:0b:2c:ee:dd:fa:56:ba:76:0f:
                    2d:56:a4:13:8d:9a:70:1c:46:a6:39:f2:9f:7b:85:
                    f6:76:0b:87:4b:8d:4a:21:63:61:07:6e:ad:b8:c9:
                    12:ad:a2:c7:09:9f:d0:52:01:b1:28:da:09:7b:65:
                    eb:b1:b3:0e:04:bc:22:3a:1c:6e:05:57:5a:c7:a8:
                    7f:91:41:8f:7a:57:2b:70:33:f8:67:8a:50:46:ed:
                    67:8b:2c:63:c2:4a:33:2d:c4:67:6e:38:c4:ec:20:
                    89:7e:e6:c9:bf:c9:93:72:29:26:20:43:63:27:71:
                    94:c6:b7:3c:e9:af:fd:8d:0f:c6:d6:fe:25:ce:af:
                    93:37:83:cc:3c:4a:d4:4d:c6:41:a6:92:b9:ce:f5:
                    b0:93:83:19:f6:8c:c3:65:78:9d:a5:59:95:41:bb:
                    82:bd:ac:de:34:89:e0:61:80:88:11:ce:26:b6:73:
                    38:9f:32:7c:4c:c3:9f:e6:7e:2d:fe:fe:f8:09:50:
                    e7:16:33:e2:8e:10:93:e8:b0:44:b8:5a:47:53:14:
                    af:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A6:69:38:84:92:34:2C:BA:7C:3B:0E:07:AA:57:C5:33:E4:A7:C9
            X509v3 Authority Key Identifier:
                keyid:1A:19:8F:9A:17:F0:B3:5E:DB:84:95:60:FB:5F:98:50:1C:3C:9C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/GhmPmhfws17bhJVg-1-YUBw8nK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhmPmhfws17bhJVg-1-YUBw8nK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/32D02AAABCC711EDB96C8F81C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.221.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:2a:2b:b9:a0:b8:4c:70:2d:59:df:bc:c4:cc:43:44:f6:a1:
         37:ad:ab:b7:e3:4d:ce:58:30:41:b3:92:28:7d:ec:6c:51:33:
         36:1e:e0:54:95:0c:0f:9e:87:a1:80:cc:79:b1:f2:4d:ee:d1:
         55:8e:6f:06:20:bb:58:f4:e7:fd:6b:4e:bd:7a:cf:48:3e:7d:
         b1:d3:4d:32:13:ec:e4:14:2a:91:30:1d:60:1c:e3:f7:34:36:
         1e:6f:04:ae:de:44:73:5b:62:76:dc:dc:fd:ca:f8:65:bc:45:
         7e:c4:ff:3e:2a:59:e2:94:d0:00:6f:b5:dc:6a:08:07:6a:3e:
         85:a6:40:f3:f2:9d:da:40:d8:10:17:10:6a:7b:c2:63:3a:b8:
         f3:95:62:81:d3:77:c9:f9:a2:b7:4c:4c:b7:8a:28:9f:99:cd:
         d9:e9:6a:2e:51:d8:eb:e6:aa:04:37:ba:9c:b7:7f:ca:c2:e7:
         68:19:a7:98:e6:a6:d0:9f:bd:9b:13:38:33:07:d5:cb:a3:c4:
         a8:3a:cb:0b:8e:b5:6d:ae:b3:6b:3a:d0:d5:db:38:21:a2:e3:
         74:44:58:42:18:c2:f1:7e:6a:1e:48:28:51:a1:b2:9b:78:88:
         08:22:23:be:39:b0:13:2f:7c:3b:36:58:c9:f9:25:bc:59:02:
         12:c5:e8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org