Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/2BA0624C078511ED87041524C4F9AE02.roa
File:                     2BA0624C078511ED87041524C4F9AE02.roa (raw, json)
Hash identifier:          +DJN7L7U20IOYBw+mw1+xj96Ek8avdQS7ghcGjFKxeA=
Subject key identifier:   14:07:72:3D:9D:DB:96:EA:35:85:2E:33:54:A9:7C:89:2E:47:98:BB
Certificate issuer:       /CN=A9166E2B/serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B
Certificate serial:       0AD1
Authority key identifier: 01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/2BA0624C078511ED87041524C4F9AE02.roa
Signing time:             Thu 06 Jul 2023 19:16:15 +0000
ROA not before:           Thu 06 Jul 2023 19:16:15 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     140229
IP address blocks:        103.115.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl
                          rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 20:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2769 (0xad1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166E2B/serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B
        Validity
            Not Before: Jul  6 19:16:15 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64a712ff-8cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d2:a3:b6:db:d5:d0:a8:5f:a0:80:24:1f:43:
                    c2:37:b1:67:c6:9a:bc:1c:5c:01:28:8b:84:28:3a:
                    22:54:d8:a5:42:06:a3:bf:d4:6a:59:25:d1:80:b2:
                    d5:ad:41:2c:5a:18:53:c5:9e:c7:b8:ad:1d:c1:1f:
                    27:d3:89:96:d4:2e:64:e7:8d:a7:0e:d0:8d:bb:70:
                    95:39:f4:5f:39:ef:01:36:d8:df:39:e4:ff:9e:f2:
                    3d:f3:65:8f:0b:9a:93:b1:5c:9e:15:7b:27:9c:3d:
                    99:c7:fb:7c:45:51:06:c9:1f:88:29:77:40:6b:8b:
                    77:c1:f0:ba:54:5e:0d:fa:e7:35:cd:5c:cb:86:f1:
                    fd:05:d0:ff:3f:da:7f:75:64:37:3c:2d:02:20:28:
                    62:9a:f8:12:6f:c4:ba:d5:44:24:e1:a2:2e:1a:fe:
                    29:c8:c5:94:37:26:fe:0e:b7:61:f8:e2:6e:5d:21:
                    1d:64:96:5e:51:3d:f8:b8:02:80:78:37:91:cb:70:
                    73:b6:48:5d:bc:f0:88:2b:67:13:9d:c3:f1:b9:b9:
                    87:57:67:26:1b:d2:b7:2b:f1:4d:42:dd:6d:87:70:
                    45:25:96:26:00:61:3b:e9:ea:3d:af:7e:38:5d:58:
                    6a:f8:ab:44:a8:52:ce:d7:53:fd:9f:8a:2f:4d:a4:
                    10:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:07:72:3D:9D:DB:96:EA:35:85:2E:33:54:A9:7C:89:2E:47:98:BB
            X509v3 Authority Key Identifier:
                keyid:01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/2BA0624C078511ED87041524C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:a5:94:6a:c0:17:74:67:f4:6e:64:b5:e1:19:ce:23:a9:67:
         fa:a5:b3:44:45:0d:09:fb:d1:7c:f7:e1:b4:d2:88:70:1b:5c:
         37:6d:00:bd:6f:a6:03:22:76:0a:5e:8b:21:af:38:87:9d:91:
         27:54:be:97:93:e1:d5:09:52:36:f6:30:1e:aa:4d:25:eb:38:
         d5:f8:8a:b7:1a:9e:9e:df:5a:c9:b8:08:0c:c2:b6:10:b2:d2:
         0f:18:41:30:0b:20:b2:30:3b:ed:27:ad:12:6c:6b:49:a9:75:
         5d:8e:b9:ff:d6:10:8b:54:70:68:27:0c:75:cb:d1:95:2d:6c:
         2c:d3:e4:d0:4d:62:6e:dc:da:76:0d:f1:47:8f:10:01:dc:70:
         0a:61:0f:5c:e9:aa:c0:ac:9b:6e:00:7c:a7:4e:fe:41:75:33:
         12:49:01:c6:1f:a6:ab:07:2f:70:a2:80:a8:38:4d:ad:fd:00:
         5a:f0:da:26:ed:cb:ac:8b:83:64:ac:63:61:d6:5b:32:fb:00:
         f1:db:dc:3b:22:8c:5d:80:3c:44:6f:34:71:29:09:77:15:d2:
         51:1d:d7:07:3a:95:a9:48:22:e3:78:ca:16:3b:15:1b:60:2e:
         62:d8:21:f3:80:9e:b1:ac:4c:91:39:6d:0c:aa:08:5d:a2:37:
         50:f1:c2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 22:13:05 2024 by rpki-client on console-fra.rpki-client.org