Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131927/E99772F896E911EBB258E562C4F9AE02/9FD744CE96EC11EBA1E20768C4F9AE02.roa
File:                     9FD744CE96EC11EBA1E20768C4F9AE02.roa (raw, json)
Hash identifier:          we6sPidoqk7Ad1RQiQ/gR4dEywgbUcN6wPOmveCv5l8=
Subject key identifier:   B0:F7:6D:3F:FA:4E:41:A0:7C:61:B3:14:22:FE:75:7C:09:9C:02:1B
Certificate issuer:       /CN=A9131927/serialNumber=7E8103C8659B2DF67273B504AF75C66665310116
Certificate serial:       04BE
Authority key identifier: 7E:81:03:C8:65:9B:2D:F6:72:73:B5:04:AF:75:C6:66:65:31:01:16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foEDyGWbLfZyc7UEr3XGZmUxARY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131927/E99772F896E911EBB258E562C4F9AE02/9FD744CE96EC11EBA1E20768C4F9AE02.roa
Signing time:             Wed 31 May 2023 02:29:21 +0000
ROA not before:           Wed 31 May 2023 02:29:21 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        103.165.160.0/24 maxlen: 24
                          2001:df6:6880::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131927/E99772F896E911EBB258E562C4F9AE02/foEDyGWbLfZyc7UEr3XGZmUxARY.crl
                          rsync://rpki.apnic.net/member_repository/A9131927/E99772F896E911EBB258E562C4F9AE02/foEDyGWbLfZyc7UEr3XGZmUxARY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foEDyGWbLfZyc7UEr3XGZmUxARY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Apr 2024 00:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1214 (0x4be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131927/serialNumber=7E8103C8659B2DF67273B504AF75C66665310116
        Validity
            Not Before: May 31 02:29:21 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6476b101-06eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7c:d4:83:aa:13:ad:d0:e4:c6:c7:2a:e9:f7:
                    7e:97:87:f7:5a:86:7c:f3:c3:ae:06:37:af:8d:01:
                    27:bd:08:33:b9:5e:66:86:bb:dd:e6:06:05:a9:3e:
                    5c:a4:25:96:6b:15:1d:2f:5d:58:0d:00:cf:fa:c8:
                    77:e8:bd:af:2d:38:c5:6f:74:ef:70:b9:11:4f:a2:
                    bc:08:e2:8f:14:ed:d0:d2:5b:f9:11:48:b7:e2:1c:
                    88:16:0c:ae:ef:bb:e2:74:82:87:3e:8c:f4:36:01:
                    82:4d:32:5a:42:e8:ae:06:0c:ee:42:4c:b6:89:53:
                    2c:ba:62:4f:94:01:ca:88:e7:06:16:0b:d2:4c:9f:
                    9f:e6:e4:3d:a6:b3:e5:43:1b:db:40:a5:0e:3f:4d:
                    b9:b0:74:66:8d:6e:d1:6c:8c:df:bc:cf:ec:30:e0:
                    af:76:75:cb:54:bc:78:18:4a:37:a5:90:72:18:48:
                    1f:b3:bf:b8:00:5d:04:18:d9:4b:15:ee:de:a4:15:
                    32:c3:86:a2:7b:65:3e:bb:88:81:35:83:13:9a:6b:
                    e0:2f:5e:d2:c3:e5:2a:3c:c7:42:18:3e:97:18:1f:
                    bb:f0:ec:4a:42:04:76:b2:f2:2f:92:db:58:fb:a5:
                    22:7f:50:51:1f:da:75:f8:39:73:70:11:98:f8:39:
                    00:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F7:6D:3F:FA:4E:41:A0:7C:61:B3:14:22:FE:75:7C:09:9C:02:1B
            X509v3 Authority Key Identifier:
                keyid:7E:81:03:C8:65:9B:2D:F6:72:73:B5:04:AF:75:C6:66:65:31:01:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131927/E99772F896E911EBB258E562C4F9AE02/foEDyGWbLfZyc7UEr3XGZmUxARY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foEDyGWbLfZyc7UEr3XGZmUxARY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131927/E99772F896E911EBB258E562C4F9AE02/9FD744CE96EC11EBA1E20768C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.160.0/24
                IPv6:
                  2001:df6:6880::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:73:8a:46:d0:53:5c:25:68:97:1e:10:00:f6:74:22:3b:55:
         8f:61:a3:c8:ad:42:db:9c:50:65:4a:d3:49:48:2b:f8:0b:a3:
         9d:2c:da:1a:32:43:71:9d:4d:a2:29:f4:55:e4:01:b0:26:d5:
         f1:2d:cc:f3:b7:f8:4d:84:f6:18:08:56:51:85:e2:f9:00:a6:
         61:76:5a:ea:f2:8d:fb:15:e5:83:4c:33:b6:84:b5:43:30:60:
         2b:17:6c:3a:f1:82:de:81:fa:65:c5:83:b6:74:3d:b2:fd:83:
         db:5b:c6:67:4c:50:ac:c8:26:84:20:66:87:2b:4d:90:00:8a:
         95:1d:62:75:49:e1:f0:1f:48:17:d8:30:77:6e:b8:1a:65:60:
         8d:9b:c9:f1:75:b6:2c:83:44:7a:8d:f8:28:ec:33:1f:4d:78:
         55:56:51:59:a6:0e:20:17:2a:2c:1c:b5:47:dc:34:38:1d:49:
         0f:fe:8f:71:37:dd:c5:61:1b:6d:5c:8e:28:57:0a:31:99:36:
         b7:6c:aa:0b:23:93:71:a1:4d:62:c5:44:88:58:14:55:1f:e3:
         0c:1b:ac:9a:4a:d0:37:f0:0e:8e:11:aa:ed:2f:e7:22:49:55:
         7d:56:f0:a2:7a:6d:0b:c5:00:65:a5:62:bd:5f:6c:cc:d2:3f:
         ff:b5:91:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 02:33:20 2024 by rpki-client on console-fra.rpki-client.org