Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/23237036280611ED8BEBC536C4F9AE02.roa
File:                     23237036280611ED8BEBC536C4F9AE02.roa (raw, json)
Hash identifier:          vm8Vejf8CyGBpfBSgbZueDQzotKjZGUda/HqUz1lS7U=
Subject key identifier:   23:55:92:C0:FA:91:BD:B6:F1:DB:79:71:A6:C0:6A:6F:53:89:25:3D
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       3E79
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/23237036280611ED8BEBC536C4F9AE02.roa
Signing time:             Tue 12 Sep 2023 02:41:36 +0000
ROA not before:           Tue 12 Sep 2023 02:41:36 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     135945
IP address blocks:        103.116.100.0/24 maxlen: 24
                          103.116.101.0/24 maxlen: 24
                          103.116.102.0/24 maxlen: 24
                          103.116.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 14:37:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15993 (0x3e79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep 12 02:41:36 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ffcfe0-b694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f6:84:b6:ab:fd:4c:7d:b1:a0:9f:06:fe:43:
                    ab:2d:e6:3b:e2:a5:41:4f:d6:dc:81:08:8e:ce:8e:
                    7a:d0:ea:cc:52:5c:d1:c8:94:76:28:77:3d:d7:e9:
                    c9:a3:08:10:d6:39:ba:6a:6d:d4:c9:e1:2e:63:1b:
                    48:67:9e:dd:3b:5c:21:60:80:a0:ef:c7:48:20:fd:
                    69:c1:06:49:7e:68:2b:62:ef:e5:f7:a5:71:33:26:
                    dd:ff:ef:31:4a:fd:67:c4:d5:04:6e:f4:eb:fc:9a:
                    3c:bf:7d:03:d0:de:bc:57:10:2c:4d:bc:92:5a:03:
                    d0:c1:08:3c:1a:40:92:4f:1c:04:fb:7b:db:6c:cb:
                    3d:a7:9e:e8:40:9a:63:94:44:d5:b2:2b:64:0d:8a:
                    63:82:b4:91:d3:7c:f1:5a:fe:52:c0:a8:86:51:a0:
                    58:4b:12:33:89:f4:bd:3c:45:ff:7c:45:e8:29:a8:
                    83:39:83:df:e8:b5:c3:84:80:e3:fe:a3:bf:2a:bc:
                    13:e1:99:23:16:c0:2b:a7:d4:81:1d:5b:27:76:d8:
                    10:3d:67:e8:b9:a7:93:2c:c8:84:8c:dd:94:d6:71:
                    fc:e0:e0:40:1d:a6:3c:7b:e8:c6:1e:7b:ee:55:b9:
                    f6:b7:23:25:fc:4e:56:bf:ed:e7:57:97:ba:f1:ad:
                    03:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:55:92:C0:FA:91:BD:B6:F1:DB:79:71:A6:C0:6A:6F:53:89:25:3D
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/23237036280611ED8BEBC536C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:25:8d:d9:a0:14:8a:56:78:dd:a3:d6:64:71:40:32:f2:1c:
         e6:3d:44:93:44:dd:3b:6d:ad:e8:50:2e:a2:d5:aa:8f:2f:66:
         ae:7c:25:da:64:0b:5f:32:ff:59:81:5d:58:30:79:0a:de:0a:
         fd:09:30:98:e9:81:72:a1:15:d2:6f:03:c1:d2:b0:cc:03:b4:
         cf:a8:f0:7a:61:e6:8d:a6:4c:97:27:c6:b8:38:5f:cb:16:50:
         3b:b1:06:3d:4f:e0:f0:f0:bd:77:10:bb:38:28:ba:ef:ef:dc:
         b2:0e:ad:c0:b1:2b:8a:c3:90:2f:19:f1:da:c6:20:03:9b:37:
         3c:09:58:30:a3:f7:57:54:c6:a2:55:60:ad:46:2b:bb:56:8c:
         61:6e:88:a3:48:6f:c5:89:8a:b8:48:c5:2b:d8:44:79:2b:5c:
         3e:cf:2d:ee:17:5d:13:5b:dc:1e:78:65:9b:e1:e3:e9:19:a7:
         f0:93:81:4b:64:ec:e9:ae:c1:6b:71:cb:4a:e4:ff:92:8e:b7:
         e4:e3:b4:5e:47:ff:1d:ca:e6:85:57:7d:fe:80:3b:1a:00:c5:
         41:ba:b2:fe:78:08:99:bf:3f:9e:e0:64:8f:6c:97:f2:ae:36:
         b0:a1:c0:0b:b5:f3:24:72:07:31:fb:45:97:74:e1:ac:c8:aa:
         27:f6:92:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 16:49:40 2024 by rpki-client on console-fra.rpki-client.org