Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/71CE3962337511EDAE4C4121C4F9AE02.roa
File:                     71CE3962337511EDAE4C4121C4F9AE02.roa (raw, json)
Hash identifier:          C51lZrSkmiHfhRN2orS87DL386YZSDAlrqGSAk6Pr1s=
Subject key identifier:   31:D5:29:33:2B:8B:74:3C:44:0C:5A:BB:FB:D6:94:9A:45:8B:9C:05
Certificate issuer:       /CN=A912672E/serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801
Certificate serial:       C4
Authority key identifier: CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/71CE3962337511EDAE4C4121C4F9AE02.roa
Signing time:             Thu 03 Aug 2023 03:44:07 +0000
ROA not before:           Thu 03 Aug 2023 03:44:07 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     150306
IP address blocks:        103.234.118.0/23 maxlen: 23
                          103.234.118.0/24 maxlen: 24
                          103.234.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl
                          rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 05:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912672E/serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801
        Validity
            Not Before: Aug  3 03:44:07 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=64cb2287-2037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:33:0c:df:a0:c2:99:9c:cd:9d:b8:53:a8:fb:
                    e9:1c:64:c0:69:c7:50:9e:e7:f0:35:2d:21:c8:f8:
                    20:03:10:99:49:3b:5c:3f:17:92:89:77:2e:44:ee:
                    cc:0e:91:53:3e:ee:60:54:d1:da:7c:60:ca:cc:4c:
                    a6:57:00:ab:a4:27:66:10:4c:63:50:87:9e:80:92:
                    6f:41:e3:e1:fb:91:ec:c3:91:8a:02:a6:a4:b5:69:
                    36:5c:c7:a1:1e:66:c3:62:31:e2:92:84:90:c3:61:
                    4e:16:fe:f6:ac:38:99:9c:44:e7:35:6a:ce:72:1f:
                    76:82:76:15:b3:fd:4c:87:c3:2f:ce:bb:b0:0f:e1:
                    6b:03:08:00:79:cc:a2:d9:fe:c8:f9:c3:3e:9b:9e:
                    54:e3:4c:8e:3b:62:f9:88:3b:d6:1e:29:72:19:34:
                    90:a3:b3:23:66:78:bb:aa:b9:8a:3d:1b:ad:c8:7c:
                    23:cc:c0:5b:4f:ab:13:56:a3:15:e8:af:a5:a8:51:
                    d3:17:a1:a3:21:4f:7e:45:44:1d:0b:bc:65:8a:1f:
                    6f:43:9e:ad:2c:93:b8:ce:86:d0:79:3e:82:38:bd:
                    fa:25:13:dc:0d:4f:58:46:ab:8e:6a:d5:bc:9b:93:
                    ef:f0:48:00:35:18:d5:5b:ab:b3:db:53:d9:9c:41:
                    9f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D5:29:33:2B:8B:74:3C:44:0C:5A:BB:FB:D6:94:9A:45:8B:9C:05
            X509v3 Authority Key Identifier:
                keyid:CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/71CE3962337511EDAE4C4121C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:b9:90:ed:79:ff:80:65:9c:1d:4e:3f:5c:87:94:1c:48:30:
         5e:7f:1a:0b:3b:3a:8c:e7:77:cc:b7:8a:e2:67:47:e2:cb:95:
         6f:52:1e:97:97:e1:ec:bd:91:10:7e:c8:9f:9e:55:df:27:64:
         20:20:8f:1f:97:5b:c6:23:b6:79:2a:94:43:89:2c:60:bd:da:
         74:fe:66:84:0b:da:e5:ae:0d:0e:4c:da:e7:90:e0:78:aa:80:
         1e:08:99:7c:35:48:60:86:b0:72:8d:f3:7c:8c:7d:ab:12:7e:
         6e:e1:d3:c6:5d:0f:56:c9:4e:8e:f0:87:c3:2b:e8:a7:82:b6:
         4f:4e:18:b0:8a:37:3d:50:42:a4:f8:c3:a1:37:cb:1f:70:45:
         72:2e:9a:46:60:d7:38:15:72:16:17:bd:33:a0:b3:b1:a1:ca:
         3a:5a:d5:37:1c:1e:1d:f9:41:d9:17:1d:05:a9:96:d6:e0:1a:
         67:2c:d3:96:0c:58:38:d8:e5:30:ae:b5:01:93:39:3d:13:9a:
         2d:09:d4:50:c3:30:ce:c9:79:46:12:a8:6f:4a:56:31:9a:e9:
         cc:fb:22:d5:15:2f:cb:3a:b8:fd:ae:4c:a6:c4:d0:5b:7c:9d:
         50:09:82:ce:95:79:79:1c:29:16:50:36:71:46:2f:09:d9:30:
         a9:13:bd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:08:12 2024 by rpki-client on console-ams.rpki-client.org