Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/6154A3B0B2B611EAA5884016C4F9AE02.roa
File:                     6154A3B0B2B611EAA5884016C4F9AE02.roa (raw, json)
Hash identifier:          bwqm3eXH4Pq2TLKBY01Dp4vmzkj0Oa/mlaYXh3jfcS4=
Subject key identifier:   C8:39:85:95:D8:D5:0F:7A:6F:00:07:5F:0D:A5:2C:16:BA:5B:38:BE
Certificate issuer:       /CN=A913E652/serialNumber=DB37CD282C6C7DBC3A90B103B7A239DCD158FF60
Certificate serial:       076E
Authority key identifier: DB:37:CD:28:2C:6C:7D:BC:3A:90:B1:03:B7:A2:39:DC:D1:58:FF:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/6154A3B0B2B611EAA5884016C4F9AE02.roa
Signing time:             Thu 20 Jul 2023 21:18:00 +0000
ROA not before:           Thu 20 Jul 2023 21:18:00 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     140668
IP address blocks:        103.151.130.0/23 maxlen: 23
                          103.151.130.0/24 maxlen: 24
                          103.151.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.crl
                          rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1902 (0x76e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E652/serialNumber=DB37CD282C6C7DBC3A90B103B7A239DCD158FF60
        Validity
            Not Before: Jul 20 21:18:00 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64b9a488-c365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:43:78:72:32:06:4c:29:bb:23:70:3a:b2:fb:
                    85:53:fa:7a:67:8e:9f:fc:08:e5:29:f9:74:37:89:
                    d7:19:d7:dd:76:3c:d6:ce:5c:c8:b7:ae:d5:75:9e:
                    b7:b3:ba:6f:4e:f9:00:08:1a:6a:a3:b5:f2:55:f0:
                    16:b9:7e:96:97:2d:93:a8:74:57:f2:9a:41:b2:21:
                    98:36:a8:fb:30:34:2d:cb:a5:2f:dc:e3:18:02:1f:
                    30:4b:fc:db:c8:7b:25:38:f6:2e:1b:cb:b7:df:1d:
                    02:0c:e9:21:22:48:03:20:34:75:5b:1c:ed:da:d8:
                    73:83:f6:75:57:48:4d:38:42:e1:75:bc:67:dd:ea:
                    f0:bb:1a:02:62:d7:5f:0c:b8:e9:ba:af:80:a8:62:
                    02:d1:19:bc:a1:da:0d:95:82:23:1e:99:dc:00:31:
                    1b:9d:f8:d9:f7:31:fa:9a:19:6e:77:f4:8c:c6:1e:
                    d4:25:bc:b8:0b:25:db:59:32:b4:a8:c1:fb:c0:ae:
                    e1:b1:6d:ab:d4:bc:f3:b2:0b:ec:a0:cc:bf:fd:92:
                    8e:2e:b7:93:45:60:dc:87:a6:c0:7b:2f:63:12:0e:
                    f8:3f:ab:d8:64:0c:15:87:a1:fb:6c:f1:e6:3e:1f:
                    81:51:8f:0b:e5:4e:30:4b:ea:e1:e7:aa:f8:7b:a2:
                    c0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:39:85:95:D8:D5:0F:7A:6F:00:07:5F:0D:A5:2C:16:BA:5B:38:BE
            X509v3 Authority Key Identifier:
                keyid:DB:37:CD:28:2C:6C:7D:BC:3A:90:B1:03:B7:A2:39:DC:D1:58:FF:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/6154A3B0B2B611EAA5884016C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:cc:23:e7:e6:28:4c:6a:05:b2:f4:d8:e6:ea:9a:99:43:7d:
         bf:7b:ef:7a:32:0c:46:b2:10:74:53:0a:88:f9:93:34:9d:b6:
         a7:7e:e5:3b:60:d0:3e:d9:15:ea:af:ec:fd:9b:17:c2:31:fe:
         9d:c1:6a:85:a4:80:89:87:ac:47:23:ad:ca:82:b6:0f:1f:0b:
         02:f4:0e:6f:bf:5f:62:f5:61:31:91:4f:c4:45:a0:ad:05:76:
         cd:60:f5:60:17:f8:15:35:16:11:d2:09:9b:ba:a3:bc:f9:1c:
         72:ae:6c:84:f9:f2:76:2f:50:e5:5f:23:e1:60:ff:a5:c1:14:
         8c:3e:f2:8b:94:1b:98:99:94:e3:1b:25:b6:bc:13:8d:30:c2:
         8e:7b:ff:fc:6a:91:56:be:e1:fd:a3:86:d3:e9:09:ad:3c:0d:
         fc:54:e3:8e:b6:32:37:be:ed:67:f8:76:3c:e9:29:52:e9:91:
         9c:fc:00:41:a8:ac:4f:dc:ed:42:68:98:13:7e:01:3f:a3:fd:
         8d:0a:70:3a:e6:ea:34:54:dc:d0:cc:7b:e2:56:84:28:78:39:
         26:84:7c:b4:1f:46:5c:e6:9d:54:6a:c4:53:a2:f8:1e:28:0a:
         63:e0:bb:91:e4:3c:ea:83:38:ab:c8:9d:1a:e5:a0:30:35:bb:
         bf:d4:d1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:16:13 2024 by rpki-client on console-fra.rpki-client.org