Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/F63AE024CFE111EE86A9477EC4F9AE02.roa
File:                     F63AE024CFE111EE86A9477EC4F9AE02.roa (raw, json)
Hash identifier:          F/DshtttloAsTSEwTHyyn5d7CKsxPZf91YvYHyrHYGc=
Subject key identifier:   7D:5A:EB:E6:31:FB:AC:DD:95:87:AB:1B:01:D2:8A:A7:43:F7:5D:8B
Certificate issuer:       /CN=A91A4BD6/serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
Certificate serial:       57
Authority key identifier: 24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/F63AE024CFE111EE86A9477EC4F9AE02.roa
Signing time:             Tue 20 Feb 2024 11:19:50 +0000
ROA not before:           Tue 20 Feb 2024 11:19:50 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     152151
IP address blocks:        103.62.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 07:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4BD6/serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
        Validity
            Not Before: Feb 20 11:19:50 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=65d48ad6-711b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c9:a6:95:a9:b0:39:db:06:c2:f1:3a:a5:3b:
                    e3:c6:26:bd:9b:44:4b:d4:ee:fe:df:0a:df:b0:24:
                    d3:44:0f:65:96:e2:9f:8c:38:f7:3f:0a:80:9c:2c:
                    4d:fc:77:af:e9:79:e8:9a:e0:6e:48:15:f1:1a:0c:
                    ab:3c:6c:54:16:b4:4f:c9:47:bc:68:1b:66:24:27:
                    d9:25:9c:fa:3c:a1:e2:0f:a5:b2:3f:59:9b:7b:11:
                    4b:e4:36:93:34:b1:74:12:58:34:27:8c:aa:30:23:
                    5e:c9:0d:40:3e:bf:63:bb:0f:1f:4d:0c:1e:29:c9:
                    d7:02:fd:60:0e:b8:8a:41:8a:8b:30:bb:91:ec:b6:
                    b8:c5:1e:52:0b:79:32:b1:0f:79:41:69:94:f7:c4:
                    81:a2:63:df:ed:18:1a:fe:b5:8f:bc:4c:5e:21:6e:
                    e0:65:fa:5a:c4:de:68:8f:32:62:12:1c:88:3b:c3:
                    37:f4:b2:52:3b:24:01:69:9f:bd:23:ce:7a:8f:c6:
                    12:ed:96:e2:5c:53:d8:4e:b4:9e:a0:03:91:eb:2d:
                    c8:36:0d:7f:3e:e1:39:4b:4d:f3:40:a5:9e:fe:9c:
                    c3:a4:d4:eb:67:e9:80:06:a6:ce:0e:f9:e3:1b:10:
                    2a:c5:01:a6:92:a6:c1:a4:5c:a5:73:e6:77:15:48:
                    a8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5A:EB:E6:31:FB:AC:DD:95:87:AB:1B:01:D2:8A:A7:43:F7:5D:8B
            X509v3 Authority Key Identifier:
                keyid:24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/F63AE024CFE111EE86A9477EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.62.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:58:9d:45:15:f3:94:ac:f1:84:77:4c:ef:b1:10:ef:c1:aa:
         7e:8a:c4:35:c7:f3:03:ed:18:c6:04:8a:4a:e6:14:5b:42:c5:
         f4:14:00:68:c9:26:de:be:30:f0:bc:d9:76:19:c1:42:38:b0:
         a4:27:80:69:0b:cb:d5:f9:ec:66:84:fb:3e:ec:73:44:6e:21:
         5e:f6:be:6d:c0:b0:45:b5:c8:0f:75:fd:34:75:46:47:f3:14:
         43:08:24:26:13:8d:bd:57:95:c2:78:09:68:97:b4:79:b8:7d:
         64:26:72:6e:c1:70:40:89:5b:42:83:b1:95:cd:a6:d5:70:37:
         57:05:0b:ad:63:d0:e4:82:9e:c3:02:77:20:7e:28:1b:72:d6:
         3c:5f:a1:80:08:0e:e0:2d:ab:02:93:11:2e:b4:e7:dc:40:8e:
         a4:a4:af:fa:01:a5:0e:15:07:c5:e6:c6:5c:c2:39:d8:36:f5:
         dd:4b:f9:80:e2:46:9d:24:92:bd:42:ba:a1:d1:6c:25:69:8e:
         7c:c0:ca:7d:45:d2:d1:80:d7:3c:3f:e0:26:49:bd:25:e3:b7:
         71:9e:bb:ce:1c:34:68:f6:2a:8d:3d:34:b5:fa:d1:eb:a0:fb:
         bf:fe:65:f7:c6:f3:00:82:a4:8e:4b:0b:f3:3f:f3:05:9f:98:
         e8:c0:3f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 10:02:40 2024 by rpki-client on console-ams.rpki-client.org