Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/16079DB83C1D11EBA532C076C4F9AE02.roa
File:                     16079DB83C1D11EBA532C076C4F9AE02.roa (raw, json)
Hash identifier:          3st6MobuJip6qDAf9Ivm0tg5ABkTFVJKzVQnKOv7+ww=
Subject key identifier:   3B:25:7C:6B:51:4E:F5:1A:DA:17:69:30:43:BC:46:1F:5C:0F:01:ED
Certificate issuer:       /CN=A9166C39/serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C
Certificate serial:       076C
Authority key identifier: 07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/16079DB83C1D11EBA532C076C4F9AE02.roa
Signing time:             Wed 16 Aug 2023 21:38:31 +0000
ROA not before:           Wed 16 Aug 2023 21:38:31 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     46997
IP address blocks:        103.152.112.0/23 maxlen: 23
                          103.152.112.0/24 maxlen: 24
                          103.152.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl
                          rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 21:47:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1900 (0x76c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166C39/serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C
        Validity
            Not Before: Aug 16 21:38:31 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64dd41d7-8018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f6:ea:0f:0d:68:55:26:e7:65:56:d3:f4:ee:
                    25:13:ac:11:e6:ee:f4:ee:3b:e5:1d:c5:35:0f:79:
                    c9:9f:4e:78:7c:26:c2:8d:87:4f:82:5d:f8:bb:d2:
                    ba:b7:a1:e9:ad:be:6a:4a:6b:d0:3c:ce:96:0f:a0:
                    f2:6a:c8:97:18:22:80:79:08:d9:21:33:1c:19:99:
                    b4:c0:62:58:0e:29:4d:58:1a:3d:6e:a4:37:24:25:
                    fc:06:2a:90:ec:b0:45:3c:6a:c2:a5:28:85:91:cc:
                    7f:05:25:fa:fd:6b:b1:e3:d9:65:76:4b:5a:81:5d:
                    3a:e4:f5:2e:3c:33:51:47:67:a4:c7:a9:e9:89:42:
                    ac:70:26:91:2a:4e:db:42:bc:e0:6c:d7:4d:df:64:
                    eb:d5:62:31:03:09:24:47:2d:47:78:ff:84:85:67:
                    51:1d:81:6d:1b:04:af:23:c4:06:7b:75:5a:c7:56:
                    98:f6:c4:7d:50:bd:a3:c9:eb:d8:cf:ad:03:5f:91:
                    c8:c4:64:40:3d:b3:3a:69:ee:f5:e4:93:0b:e8:e1:
                    c4:aa:c2:c6:fa:b4:65:19:0e:9d:10:7a:5a:df:b2:
                    c4:54:4c:2a:df:39:19:de:55:bb:c5:58:08:94:93:
                    5d:9b:1d:0e:15:4a:54:6f:ac:43:92:c4:4a:08:60:
                    ae:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:25:7C:6B:51:4E:F5:1A:DA:17:69:30:43:BC:46:1F:5C:0F:01:ED
            X509v3 Authority Key Identifier:
                keyid:07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/16079DB83C1D11EBA532C076C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:ad:71:80:d4:d9:77:82:38:eb:ab:9b:26:ee:bd:41:7d:4b:
         65:43:50:a7:9a:eb:38:7d:ab:34:c0:af:ad:a5:c5:b6:fa:57:
         77:56:5b:07:93:6c:84:fd:6a:06:c6:29:5d:4c:0a:d0:87:d7:
         82:76:a3:43:4a:a9:2d:1d:f2:c4:31:42:6a:15:b7:93:4e:ae:
         37:c7:ec:ff:7d:cf:f3:a1:78:2f:87:09:49:f2:ee:3e:32:4f:
         ac:eb:63:aa:2f:68:36:7c:2b:51:0b:02:60:39:8e:c7:84:d4:
         7d:b4:99:e0:f1:67:32:90:83:af:bd:01:15:a6:f9:8b:f4:80:
         6a:7e:7a:10:1f:48:62:4b:21:2e:cf:13:ae:07:fd:8e:35:18:
         6a:d0:34:63:52:c3:9f:35:b2:41:b0:97:b3:43:d9:72:cc:24:
         fd:ae:36:d9:f4:67:ed:16:a4:21:cf:dd:20:7e:d6:22:c1:36:
         96:93:80:c7:d0:f0:c4:74:30:f3:69:cf:8a:64:72:6b:50:4b:
         cf:73:72:9a:53:9f:fa:7e:26:62:b4:e1:92:fc:96:2b:92:7c:
         c7:ed:75:72:b7:e0:8e:69:43:0e:40:d1:f2:50:cd:27:89:3b:
         34:aa:aa:0c:0a:78:c4:6d:24:6a:12:3a:d5:14:b9:9c:0c:c2:
         e2:8d:cb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 22:44:37 2024 by rpki-client on console-fra.rpki-client.org