Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/251E8EC04C8C11EDAE405312C4F9AE02.roa
File:                     251E8EC04C8C11EDAE405312C4F9AE02.roa (raw, json)
Hash identifier:          9cvo25DW+ZfoLkb7OCKelKu6oJQOHiY4WeLCtiJ/Vjc=
Subject key identifier:   F3:56:2B:3A:5C:37:F7:D6:A4:A6:C6:98:F0:D7:20:83:FE:9B:39:32
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       3EC3
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/251E8EC04C8C11EDAE405312C4F9AE02.roa
Signing time:             Tue 12 Sep 2023 02:42:42 +0000
ROA not before:           Tue 12 Sep 2023 02:42:42 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     149130
IP address blocks:        103.234.150.0/23 maxlen: 24
                          2400:a8e0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16067 (0x3ec3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep 12 02:42:42 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ffd021-9da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7f:e3:d1:7c:e7:97:7d:a1:1d:f9:b3:7d:5f:
                    8b:f0:7b:fa:2f:c3:8b:a2:69:4a:86:54:6c:ac:60:
                    19:9d:4d:66:b8:b2:ef:87:8b:4e:ac:bb:a5:bd:b1:
                    e9:3e:70:24:73:21:f7:d5:3a:27:b9:b7:67:c0:ee:
                    62:53:2c:0c:c3:45:f0:59:bf:2f:6f:3d:b7:18:97:
                    f9:23:08:73:f4:b6:67:05:c2:fe:b7:f5:6d:94:19:
                    41:da:6e:be:1c:c4:6f:d0:d3:35:c0:4e:9c:34:59:
                    04:1e:3e:b1:bb:0a:de:6b:b4:bc:0e:9e:46:09:83:
                    4d:7e:6c:92:ae:49:c5:01:e8:cf:00:99:f3:6a:de:
                    b1:60:27:8f:e2:51:72:48:61:2b:f9:98:c3:d4:3b:
                    0b:7a:e8:1a:1d:ea:74:bb:c4:e0:ff:62:ee:3b:ad:
                    5d:64:8a:24:0a:d9:35:11:b5:8a:67:7b:78:4a:c9:
                    dd:1a:f2:e8:6c:12:5e:2d:4a:4e:49:29:b6:6e:18:
                    37:c8:fb:d9:da:dd:ec:55:d7:a1:20:8e:e0:d2:3b:
                    fe:3d:f8:f8:8e:c9:fe:37:dd:df:45:c6:fa:af:b0:
                    22:7b:77:60:99:33:7b:e1:a3:df:c9:a9:41:26:56:
                    94:08:2d:b2:74:64:23:6d:28:b9:e9:be:ab:bb:16:
                    a9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:56:2B:3A:5C:37:F7:D6:A4:A6:C6:98:F0:D7:20:83:FE:9B:39:32
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/251E8EC04C8C11EDAE405312C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.150.0/23
                IPv6:
                  2400:a8e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:6d:45:59:a8:b5:3d:76:10:bb:04:88:67:d6:8d:30:b0:b1:
         76:d2:58:12:52:01:e4:bd:8c:ff:66:0a:81:d1:5c:94:e1:b2:
         4b:09:e9:82:9e:73:84:3b:25:93:bf:d8:83:a8:0e:13:34:44:
         80:d9:c3:07:e7:52:c5:83:9d:86:41:c1:0c:97:e4:da:d7:86:
         6f:51:f5:e5:d0:14:9f:a8:2c:71:1e:72:3f:e9:16:49:34:3d:
         c1:fe:5e:29:4e:7a:90:85:40:ea:9c:07:f4:e6:c4:6f:b9:15:
         47:72:65:9a:db:74:0b:c8:19:5d:a9:18:a6:0f:43:82:c7:de:
         7d:3e:02:2f:a8:26:ad:38:5d:2f:c2:94:97:d1:a7:1d:71:a0:
         13:7f:c3:66:3c:a7:af:54:19:75:72:2e:15:b4:bf:11:1a:11:
         1a:25:90:41:97:02:74:d3:ee:b2:14:a9:6f:0a:cc:be:f9:81:
         60:ab:20:80:eb:a3:7d:c0:bd:5f:3f:20:0a:c3:78:ed:0b:87:
         ef:da:df:49:1b:37:87:0c:79:94:2b:a2:bb:35:24:80:e8:75:
         86:d9:ba:11:58:d0:57:8a:87:2f:a9:98:d1:53:84:50:f7:e1:
         a3:a9:92:25:12:be:23:6b:a5:a7:38:8c:0f:82:54:15:74:41:
         73:55:58:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 15:08:33 2024 by rpki-client on console-fra.rpki-client.org