Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/A2272F186E1D11EEB6A10A0CC4F9AE02.roa
File:                     A2272F186E1D11EEB6A10A0CC4F9AE02.roa (raw, json)
Hash identifier:          u20NuNFzDHapjyOj4X0XHCGLZUioMw89EmL8O4oRBbc=
Subject key identifier:   7D:7C:BC:4A:54:50:D0:24:EA:E2:28:C9:7D:1C:9B:6C:25:CD:82:C8
Certificate issuer:       /CN=A916D128/serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92
Certificate serial:       064B
Authority key identifier: C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/A2272F186E1D11EEB6A10A0CC4F9AE02.roa
Signing time:             Sat 02 Mar 2024 23:42:18 +0000
ROA not before:           Sat 02 Mar 2024 23:42:18 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     151487
IP address blocks:        103.160.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl
                          rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 23:53:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1611 (0x64b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D128/serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92
        Validity
            Not Before: Mar  2 23:42:18 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65e3b95a-cb43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b0:8a:6b:48:f2:51:c3:8c:d5:b9:a9:5a:8d:
                    52:47:bd:99:e4:36:0a:7c:85:20:18:21:c2:f6:f7:
                    18:5a:01:57:4b:bd:57:e0:76:4f:df:49:b2:4e:43:
                    af:1a:a5:91:61:a5:5d:91:5a:06:3d:ca:62:ae:bc:
                    73:94:b4:5d:5f:f6:1a:70:f1:7f:28:76:ee:b8:da:
                    8e:32:63:44:52:7a:d2:6f:38:dc:ab:ab:ad:9d:1b:
                    eb:43:1a:14:79:34:db:c3:fa:aa:01:99:2e:d8:93:
                    d4:74:48:6c:f0:8b:cc:96:06:6d:e1:99:a0:c2:38:
                    53:30:f5:1a:88:3e:56:15:ec:18:d9:a3:6c:8a:fa:
                    67:90:ba:a3:de:d2:cf:7c:a7:2d:c7:6a:e6:da:14:
                    d4:f0:1c:18:d4:4a:85:3e:97:82:75:15:2e:a4:41:
                    24:73:e8:8e:21:98:53:b0:51:36:9c:ce:34:1a:1f:
                    84:d7:c1:41:d7:08:7d:3c:91:4b:88:6b:af:b5:7e:
                    1e:dc:23:ae:8e:d4:a3:97:0d:b6:b8:93:72:f4:36:
                    1c:00:8d:8b:1b:6e:34:6f:48:e5:9f:6c:95:01:d1:
                    1d:dd:61:bf:2a:ba:df:f6:2d:c2:ef:15:56:d7:6d:
                    02:4c:40:eb:bf:92:9c:3f:6f:53:ca:77:67:6b:5e:
                    15:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:7C:BC:4A:54:50:D0:24:EA:E2:28:C9:7D:1C:9B:6C:25:CD:82:C8
            X509v3 Authority Key Identifier:
                keyid:C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/A2272F186E1D11EEB6A10A0CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:ad:5d:14:30:83:9b:f9:6d:a8:8c:be:45:aa:bb:eb:be:a0:
         71:94:df:c9:b7:c0:61:cc:d8:89:61:30:ed:30:ee:fa:98:69:
         dd:34:51:3f:6e:35:07:d9:04:7c:8b:cc:f2:a2:be:af:08:35:
         80:56:a8:33:89:ec:c2:a5:64:4c:81:f0:af:d9:27:5e:30:8d:
         6f:65:7a:42:44:20:a7:94:a8:79:f0:b4:6c:58:5a:f2:38:e2:
         61:e7:cb:da:34:13:3c:57:83:ee:9d:f8:84:7c:61:7c:f3:dc:
         c7:17:14:4f:65:13:dc:e1:db:dd:8e:04:ab:0f:71:31:35:30:
         42:d8:95:cf:1c:f5:59:0f:27:c3:b4:cc:8e:a9:bd:91:d9:74:
         db:5b:ed:d6:9d:c8:57:f0:f7:3c:66:b6:4a:70:19:2f:26:16:
         93:45:2d:7e:04:ca:c4:b2:9a:8e:3d:06:f0:32:65:b9:72:38:
         d1:ca:98:5a:13:a2:76:30:1f:da:68:74:ef:dd:0f:7c:bf:d3:
         9d:fa:ef:46:56:fe:88:54:09:88:63:e8:49:84:c4:bc:36:39:
         cb:d1:12:7f:bc:2e:83:2a:89:89:ad:74:dd:d0:47:7b:bd:8e:
         15:e9:88:fe:6d:b5:3d:2c:ca:88:9c:db:12:02:90:5f:55:66:
         fc:d7:49:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 02:29:41 2024 by rpki-client on console-ams.rpki-client.org