Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/105A1F50778211EE997FD552C4F9AE02.roa
File:                     105A1F50778211EE997FD552C4F9AE02.roa (raw, json)
Hash identifier:          ZfqL0mekqMSkpT1JFuTMXYl9KofA+Q6YfWwZ2fBHwV8=
Subject key identifier:   B6:DF:73:33:FC:B8:12:40:44:4A:94:21:B4:BB:4D:24:13:D1:D2:A7
Certificate issuer:       /CN=A9193235/serialNumber=5A56F89F50812A810FF2DE845470F1092724A1AB
Certificate serial:       0F
Authority key identifier: 5A:56:F8:9F:50:81:2A:81:0F:F2:DE:84:54:70:F1:09:27:24:A1:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/105A1F50778211EE997FD552C4F9AE02.roa
Signing time:             Thu 09 Nov 2023 13:32:26 +0000
ROA not before:           Thu 09 Nov 2023 13:32:26 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     140664
IP address blocks:        103.151.118.0/23 maxlen: 23
                          103.151.118.0/24 maxlen: 24
                          103.151.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.crl
                          rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 01:23:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193235/serialNumber=5A56F89F50812A810FF2DE845470F1092724A1AB
        Validity
            Not Before: Nov  9 13:32:26 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=654cdf6a-53f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b0:cf:f4:18:fa:a2:ee:1a:6e:4a:7b:6f:42:
                    89:3b:a8:ec:af:30:35:47:03:92:9c:a5:c0:8d:5a:
                    2e:24:ff:9d:eb:4a:c2:8f:16:ca:36:cf:af:96:5a:
                    bc:0a:4c:6c:81:7b:b2:58:21:fc:3c:36:f1:2f:61:
                    d8:59:f9:43:e8:3e:0e:d3:6b:5f:c6:c5:a6:d7:87:
                    1e:a0:ff:8b:e3:7b:61:6c:3c:8f:89:57:d0:20:f8:
                    b5:3d:9e:be:48:19:f4:61:1d:ef:e2:31:dd:0d:91:
                    7f:e5:84:0c:1a:ef:01:b7:f5:09:28:93:1b:1a:18:
                    f9:ae:11:56:cd:8d:3f:63:6c:e9:2d:fe:e6:d0:07:
                    05:36:76:c8:bc:79:c8:90:7c:e4:fb:5a:1e:0c:7a:
                    19:8b:86:92:5e:74:f5:53:84:56:0a:2d:b8:c9:c2:
                    06:7f:8e:3a:f6:39:6d:3f:fe:9f:e9:c8:95:0e:33:
                    bb:30:9e:b4:59:da:41:24:95:b9:96:90:38:82:f6:
                    58:24:fc:3e:ea:e6:c7:01:9d:98:a2:09:6f:88:57:
                    db:40:87:95:2b:b4:1f:7d:df:f6:fa:f6:c2:89:ab:
                    85:30:c3:76:b5:84:86:26:e2:c7:0c:9d:31:5d:9e:
                    06:89:bf:27:50:87:57:b8:eb:b1:2c:7f:56:3f:b3:
                    67:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DF:73:33:FC:B8:12:40:44:4A:94:21:B4:BB:4D:24:13:D1:D2:A7
            X509v3 Authority Key Identifier:
                keyid:5A:56:F8:9F:50:81:2A:81:0F:F2:DE:84:54:70:F1:09:27:24:A1:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/105A1F50778211EE997FD552C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:0a:01:33:24:8e:5a:a0:c5:d5:84:91:6d:f2:5c:4a:bc:5e:
         43:59:47:99:21:34:31:a4:fe:4f:bc:79:d5:6c:84:c6:bc:74:
         c9:27:8c:9c:8f:07:8c:61:b2:b9:83:6e:b4:17:0e:e0:3f:36:
         35:8f:17:87:7b:e2:15:39:da:d5:2a:f0:29:94:9f:18:53:ee:
         ae:66:18:b6:1f:36:cf:b4:1c:10:a1:7b:59:a1:4a:36:c3:08:
         4d:8d:67:1a:91:ef:db:9f:00:2e:7d:80:6b:05:8e:bb:90:a0:
         9e:6b:f1:92:92:5e:9d:7e:a5:96:67:1b:7a:eb:93:85:c0:77:
         04:06:8e:bb:46:e0:ea:b8:84:13:31:67:37:99:4b:81:7b:35:
         32:7f:09:6b:36:2e:04:57:f8:d3:58:e5:c8:28:a0:6e:61:04:
         b7:e5:08:c0:31:ed:24:56:85:11:76:42:f7:a2:0c:d9:13:63:
         69:54:03:19:1e:ac:cd:6f:d3:04:41:70:bb:16:e3:6b:5c:7f:
         67:c5:3f:43:0f:fe:7b:48:28:ec:a0:df:0e:b2:22:a3:0c:20:
         4e:7a:52:2a:b0:d4:a7:39:21:eb:4b:a2:31:98:db:f0:4d:7d:
         c8:07:cf:0e:c7:f3:94:a8:ca:18:84:91:eb:94:39:c1:16:99:
         51:fe:34:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 03:19:07 2024 by rpki-client on console-ams.rpki-client.org