Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/A7119C2E8FEE11ED83F3C543C4F9AE02.roa
File:                     A7119C2E8FEE11ED83F3C543C4F9AE02.roa (raw, json)
Hash identifier:          7r4Kd1SbOT6pyg52SnxxUUBZC3wljX6QNUfJPQO+idA=
Subject key identifier:   2F:8B:14:2E:48:3C:A8:52:AF:03:89:BE:05:D4:D1:E5:7E:4D:E0:02
Certificate issuer:       /CN=A919DA26/serialNumber=11AC33678D18333CFEBD49892B56899E27EA6348
Certificate serial:       8B
Authority key identifier: 11:AC:33:67:8D:18:33:3C:FE:BD:49:89:2B:56:89:9E:27:EA:63:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EawzZ40YMzz-vUmJK1aJnifqY0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/A7119C2E8FEE11ED83F3C543C4F9AE02.roa
Signing time:             Tue 03 Oct 2023 04:25:11 +0000
ROA not before:           Tue 03 Oct 2023 04:25:10 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     150329
IP address blocks:        103.13.166.0/24 maxlen: 24
                          103.13.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.crl
                          rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EawzZ40YMzz-vUmJK1aJnifqY0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 05:27:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DA26/serialNumber=11AC33678D18333CFEBD49892B56899E27EA6348
        Validity
            Not Before: Oct  3 04:25:10 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=651b97a6-9913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9d:0a:ac:e4:4b:0a:66:87:cd:ab:7f:bf:5a:
                    1e:f5:72:b8:40:ba:98:18:87:ed:ab:2f:91:6c:7b:
                    56:3f:c1:07:81:36:6e:eb:d4:ea:e5:91:7d:56:24:
                    bf:79:2c:77:27:1b:ba:ee:4f:fb:91:7b:65:13:e7:
                    e4:22:58:69:0d:bc:0a:ff:60:87:d8:07:de:46:b6:
                    4f:e8:65:44:a5:13:46:46:d8:f6:bb:10:ab:57:ea:
                    6e:2a:3c:82:86:b2:18:5f:70:84:66:3b:a9:37:aa:
                    f2:45:d2:c0:40:d8:fc:b9:76:37:c9:e1:f2:b9:bd:
                    3d:7f:7a:b6:92:2a:b0:ac:17:b5:09:0d:58:f5:b3:
                    03:5d:c6:f1:b9:f0:68:ba:b7:91:91:c3:e6:ff:32:
                    c2:94:8f:fb:e0:a4:47:83:e7:25:84:6e:84:a4:ee:
                    67:82:a3:80:1f:96:96:13:96:e8:3a:ca:76:dc:28:
                    49:7b:e1:3c:52:0f:c9:59:78:dc:8d:85:f3:22:62:
                    8f:cd:1d:ae:ce:df:29:3d:55:de:c5:9a:0a:58:6a:
                    e0:62:b9:77:c1:82:81:5f:8a:1a:15:64:45:b6:f2:
                    35:f6:9d:df:b7:32:44:03:b2:61:f9:a2:e5:10:fe:
                    8d:03:00:4b:bd:72:c0:0c:ad:02:7b:0b:13:3b:5b:
                    25:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8B:14:2E:48:3C:A8:52:AF:03:89:BE:05:D4:D1:E5:7E:4D:E0:02
            X509v3 Authority Key Identifier:
                keyid:11:AC:33:67:8D:18:33:3C:FE:BD:49:89:2B:56:89:9E:27:EA:63:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EawzZ40YMzz-vUmJK1aJnifqY0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/A7119C2E8FEE11ED83F3C543C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:97:8c:3e:e3:84:6d:f2:e8:f3:f6:82:52:8e:f9:c0:b8:fb:
         89:b1:c9:32:54:b7:09:79:cc:d1:f3:2e:16:44:7b:26:c0:90:
         07:59:0f:f2:1b:72:12:f3:7f:80:0b:e9:53:33:4c:67:13:79:
         29:cc:6c:18:91:ba:17:68:f2:27:69:ff:20:f5:a1:76:ed:f9:
         57:27:d0:4f:43:82:e2:38:21:72:eb:24:e3:a5:f8:49:fb:d5:
         35:b7:d1:68:2a:9b:8b:d8:4e:4c:85:ad:d8:c1:d1:ce:3a:1d:
         44:70:f5:de:10:e7:d7:e0:d4:c8:1e:68:35:19:2e:fa:10:f0:
         f2:e4:48:aa:19:90:1b:c3:7f:e9:6f:e6:b8:1b:3b:4f:e9:d8:
         2f:bc:36:ae:3d:9e:0d:0d:f7:f5:f1:90:9e:89:a9:a9:26:88:
         ec:3c:b9:6b:81:a5:00:ac:af:9e:e6:b6:e9:c9:b7:dc:30:25:
         20:6b:fe:c6:72:25:70:33:c0:82:27:f6:31:35:c8:6a:17:32:
         d5:b3:62:c0:e1:f4:03:1f:73:de:43:fc:21:2a:d5:b1:dc:0f:
         9a:33:c0:b7:c6:c2:b9:dc:98:4f:c1:5c:0a:59:d2:ab:06:26:
         2e:8f:1e:05:51:82:b4:89:b9:7d:ce:bd:a1:c6:0a:c1:b9:82:
         98:91:88:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 08:02:29 2024 by rpki-client on console-ams.rpki-client.org