Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/D08310DE94C511EDB2732947C4F9AE02.roa
File:                     D08310DE94C511EDB2732947C4F9AE02.roa (raw, json)
Hash identifier:          6swA/Z2Bn/93wNV89PyUjWjhUlp9ILVNtdOEp/BxgkA=
Subject key identifier:   AA:7D:70:E3:50:85:27:E3:A9:84:3C:F6:AA:EB:EE:B2:03:1C:40:D8
Certificate issuer:       /CN=A9165D52/serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
Certificate serial:       BE
Authority key identifier: 2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/D08310DE94C511EDB2732947C4F9AE02.roa
Signing time:             Sat 23 Dec 2023 04:55:25 +0000
ROA not before:           Sat 23 Dec 2023 04:55:25 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     150662
IP address blocks:        103.49.100.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl
                          rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:18:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165D52/serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
        Validity
            Not Before: Dec 23 04:55:25 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6586683c-7063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:55:91:f2:db:4c:7e:1c:84:b7:cc:ee:e3:d6:
                    f7:ad:fe:f6:f3:df:5e:10:b1:6b:44:ce:97:e9:2c:
                    d6:be:9e:69:39:83:c8:a8:db:4f:fa:86:f1:97:45:
                    28:6e:b7:4c:25:97:69:b9:92:21:e2:78:d4:58:09:
                    f8:00:a3:7e:f4:25:ae:1a:7e:0e:14:ba:f9:2f:ce:
                    62:14:c7:c7:97:f2:1f:2f:53:e9:8b:b4:33:ac:4e:
                    d6:15:d3:7a:5f:3b:aa:70:c1:23:9c:e9:6c:95:e1:
                    66:6a:ba:85:d0:4b:f9:5f:6c:ab:0e:ad:a3:cc:86:
                    ec:de:64:48:ee:2d:95:f6:09:ba:3d:b7:91:13:00:
                    4b:15:cc:29:76:7e:3e:c4:65:de:de:ae:2b:86:84:
                    d2:40:4f:aa:4f:d5:fc:11:d2:28:05:65:6d:8d:b2:
                    be:0e:58:c9:c3:d9:b6:12:f2:6e:c6:0f:c8:0a:f1:
                    ac:c5:11:3f:f9:60:b9:ab:7a:c6:e9:b5:01:d4:14:
                    54:a1:9e:c4:45:ee:b8:66:63:82:73:ae:0f:56:ce:
                    df:9e:55:43:fb:70:da:90:99:1f:51:75:8e:f7:69:
                    94:3a:ca:e8:47:8f:81:66:fe:a8:38:b9:e2:dd:4e:
                    c8:2e:b1:b1:c6:9f:61:f7:34:fa:d7:c2:23:f7:f3:
                    0f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7D:70:E3:50:85:27:E3:A9:84:3C:F6:AA:EB:EE:B2:03:1C:40:D8
            X509v3 Authority Key Identifier:
                keyid:2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/D08310DE94C511EDB2732947C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:9d:0b:7c:5e:26:9c:f1:17:e5:de:31:94:99:02:81:1d:54:
         f0:88:a9:0e:8a:ac:2f:b2:5c:78:f6:a8:53:7f:76:6e:45:3c:
         2e:ce:5f:6e:6b:8c:c2:ba:c0:66:ef:af:75:57:d7:f4:d2:c6:
         de:8e:3a:ec:62:32:d2:5b:50:60:9b:5f:15:8e:ea:be:30:36:
         51:ad:be:fd:c3:b3:fa:19:39:be:26:93:5a:11:ce:df:fa:a6:
         18:78:a1:d0:61:1e:27:de:ef:2d:ff:c8:f3:d6:53:b8:c4:96:
         df:31:e4:11:3d:c2:67:9b:6b:e0:9b:49:3d:67:54:67:33:08:
         e5:13:56:33:0e:43:08:0c:0f:06:f7:b5:2e:94:f3:74:29:a2:
         99:2f:cc:20:b9:fe:2e:7e:fc:d5:c6:83:8a:7e:6a:11:fc:da:
         cc:04:c9:77:2e:5d:1c:b4:b6:a0:f6:66:d4:dd:4c:3d:f7:a6:
         d1:05:0b:7a:a6:a1:d5:a8:fd:95:fe:84:82:b3:d0:58:45:10:
         60:4c:eb:b6:c0:d6:fe:53:51:4d:a1:f0:0e:da:6b:b6:ee:c2:
         e3:b5:66:16:ca:cb:89:bc:11:a7:73:b0:57:e6:91:4c:5b:01:
         85:ac:af:79:24:f7:f0:64:89:49:e9:8a:69:4a:2e:c6:0d:67:
         52:3d:2e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:40 2024 by rpki-client on console-ams.rpki-client.org