Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1D/30203ED017A411EDB3601564C4F9AE02/A917D87217A711ED8D17FC7CC4F9AE02.roa
File:                     A917D87217A711ED8D17FC7CC4F9AE02.roa (raw, json)
Hash identifier:          2PqJdzm4+rKQKtxyDM7E1nFD4A9EAD2S30HfC2pixCk=
Subject key identifier:   24:F6:67:91:B8:D4:A9:94:EA:2D:53:48:61:A1:9D:0C:83:2D:B0:89
Certificate issuer:       /CN=A9132B1D/serialNumber=476945B21F2589F7E712751FE747FA2143A5235B
Certificate serial:       0109
Authority key identifier: 47:69:45:B2:1F:25:89:F7:E7:12:75:1F:E7:47:FA:21:43:A5:23:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2lFsh8liffnEnUf50f6IUOlI1s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132B1D/30203ED017A411EDB3601564C4F9AE02/A917D87217A711ED8D17FC7CC4F9AE02.roa
Signing time:             Tue 25 Jul 2023 03:43:39 +0000
ROA not before:           Tue 25 Jul 2023 03:43:39 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     150002
IP address blocks:        103.190.130.0/23 maxlen: 23
                          103.190.130.0/24 maxlen: 24
                          103.190.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132B1D/30203ED017A411EDB3601564C4F9AE02/R2lFsh8liffnEnUf50f6IUOlI1s.crl
                          rsync://rpki.apnic.net/member_repository/A9132B1D/30203ED017A411EDB3601564C4F9AE02/R2lFsh8liffnEnUf50f6IUOlI1s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2lFsh8liffnEnUf50f6IUOlI1s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 05:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132B1D/serialNumber=476945B21F2589F7E712751FE747FA2143A5235B
        Validity
            Not Before: Jul 25 03:43:39 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64bf44eb-d7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2d:ab:62:a3:98:ea:e0:19:db:c2:aa:f7:83:
                    0d:fe:e0:35:bb:66:4b:6b:e0:60:d6:07:93:22:9e:
                    a1:38:9f:70:87:9a:dc:ff:f4:ae:d7:17:57:0e:b0:
                    9c:f1:02:a3:7c:f4:c1:c7:df:79:53:70:b6:fc:9b:
                    49:cf:ac:59:70:1d:06:52:7d:1c:3f:24:ae:8b:c9:
                    b6:30:d8:8d:f3:78:e1:59:83:eb:cb:0c:2b:ee:50:
                    c0:b1:a6:73:4d:da:f5:8d:9f:7f:10:74:c5:a6:7c:
                    7d:22:74:ef:33:e9:01:47:8b:3c:6c:3e:10:3a:2f:
                    de:b5:68:35:b6:82:95:9d:8c:f5:6a:90:f0:f3:7d:
                    0e:fc:f2:b4:cd:b7:b5:93:93:76:72:8a:86:8d:f9:
                    60:36:e4:51:b2:51:a5:31:6b:d5:eb:b2:d6:eb:ce:
                    72:09:09:b2:6c:2a:5a:e2:25:09:10:d7:ce:8d:e3:
                    03:2b:2c:d5:69:1d:3d:81:bd:20:d3:07:85:3c:eb:
                    0f:fb:4b:38:05:3e:40:cf:13:e2:4b:4a:45:9f:b5:
                    de:03:d9:17:91:27:8d:e3:ee:c8:71:c1:62:e5:6b:
                    31:c0:71:c4:b3:6a:25:db:54:57:fc:d2:f7:44:9b:
                    47:6f:6d:f9:61:ce:a6:0e:d9:3d:1b:3c:15:93:ee:
                    4e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F6:67:91:B8:D4:A9:94:EA:2D:53:48:61:A1:9D:0C:83:2D:B0:89
            X509v3 Authority Key Identifier:
                keyid:47:69:45:B2:1F:25:89:F7:E7:12:75:1F:E7:47:FA:21:43:A5:23:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132B1D/30203ED017A411EDB3601564C4F9AE02/R2lFsh8liffnEnUf50f6IUOlI1s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2lFsh8liffnEnUf50f6IUOlI1s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1D/30203ED017A411EDB3601564C4F9AE02/A917D87217A711ED8D17FC7CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cb:24:f2:31:c8:fe:8b:b7:f8:64:fb:25:60:62:93:50:a6:cc:
         95:9b:dc:fe:11:c3:8b:80:cd:36:22:54:7d:e4:36:12:72:70:
         67:50:47:3d:40:6d:bb:08:32:ec:7c:3c:91:da:98:7e:6c:f6:
         90:bd:c8:e9:78:09:57:7f:e9:22:5c:03:3b:02:51:a0:63:4c:
         ce:47:f5:89:aa:72:50:45:86:12:c6:e2:0b:2d:88:b1:24:74:
         8c:12:71:c9:6d:f5:7a:0a:8c:69:e2:4e:41:1e:16:98:2d:ab:
         cd:3e:06:16:62:ad:08:41:5c:2a:65:e0:a4:03:77:b8:e6:1f:
         89:5f:a9:b4:ac:2f:da:47:33:ce:c7:bd:56:b7:0f:ed:65:f6:
         7f:08:2a:cb:46:83:5c:c4:70:eb:3f:00:82:3a:c1:88:cd:34:
         72:c4:a5:78:e9:48:c1:98:4e:69:5b:84:d9:4a:69:5d:5a:02:
         ee:e4:46:1f:1e:f6:48:1f:42:96:2f:fd:45:b2:a8:0e:26:e9:
         ec:b8:a6:59:c1:ee:38:8e:4d:40:f8:b1:37:98:12:17:61:a0:
         aa:fc:d0:fc:6e:62:f0:6c:db:bb:3b:a4:ff:a4:e0:38:cf:be:
         82:bd:3f:95:10:42:a5:9e:c3:b3:43:46:ce:48:9a:bc:00:69:
         d7:ef:ca:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:08:13 2024 by rpki-client on console-ams.rpki-client.org