Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/170BFAA6995211EA9CF98C52C4F9AE02.roa
File:                     170BFAA6995211EA9CF98C52C4F9AE02.roa (raw, json)
Hash identifier:          8yoAnMqhlRDOBdM8mgmHUO5+MkemJ+tEuJ78ZlMNQFI=
Subject key identifier:   AB:77:9D:AA:49:B5:87:D1:22:B5:02:71:D3:8D:FB:72:C8:2B:7B:D7
Certificate issuer:       /CN=A914CC0F/serialNumber=C0BA1DFB35996FCE9A7E4859E8AF8791FAF0EC94
Certificate serial:       08B0
Authority key identifier: C0:BA:1D:FB:35:99:6F:CE:9A:7E:48:59:E8:AF:87:91:FA:F0:EC:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLod-zWZb86afkhZ6K-Hkfrw7JQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/170BFAA6995211EA9CF98C52C4F9AE02.roa
Signing time:             Tue 02 Jul 2024 21:28:38 +0000
ROA not before:           Tue 02 Jul 2024 21:28:38 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     140643
IP address blocks:        103.151.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.crl
                          rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLod-zWZb86afkhZ6K-Hkfrw7JQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:08:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2224 (0x8b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CC0F/serialNumber=C0BA1DFB35996FCE9A7E4859E8AF8791FAF0EC94
        Validity
            Not Before: Jul  2 21:28:38 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66847106-e44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ce:6e:c6:ad:15:3a:c4:76:4e:37:67:0b:1d:
                    a6:49:df:1a:5e:75:b1:51:f1:91:86:66:f1:fd:30:
                    a2:b3:35:b7:91:0c:f7:2c:b2:0e:71:8d:0e:d0:80:
                    a4:24:e3:be:85:96:d9:70:3b:99:a3:2e:be:68:22:
                    28:20:31:6a:42:00:11:8f:d0:1d:33:c3:82:d8:a2:
                    87:bf:66:0b:b4:8b:e9:5b:46:4c:46:b3:b5:bc:7e:
                    76:7f:6f:ee:55:b4:e3:a2:5d:a5:07:e0:de:93:60:
                    57:bb:cc:77:67:00:2f:6a:77:a3:08:2b:fd:c1:9c:
                    f3:4b:b5:32:8a:05:63:44:d8:76:a0:d3:71:6d:75:
                    bb:9c:cc:58:59:29:ba:b4:a6:ec:f0:16:4c:de:48:
                    e5:20:8a:17:0b:20:4d:89:aa:4e:73:ab:d1:c5:d5:
                    fe:3c:af:3d:2d:93:e1:cb:ba:31:2c:2e:18:d7:81:
                    71:0d:5d:c2:54:04:03:ed:90:9b:e1:49:97:37:de:
                    23:c1:07:c4:7c:48:2b:de:9f:ce:0c:71:88:0e:ff:
                    81:95:ff:56:4a:ca:38:5f:03:f0:cc:72:cc:3b:e7:
                    4c:ad:58:45:c6:af:2f:41:2c:01:1e:9c:77:41:7d:
                    88:73:c8:d8:da:af:0f:f8:de:cf:bc:07:2a:02:8a:
                    7f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:77:9D:AA:49:B5:87:D1:22:B5:02:71:D3:8D:FB:72:C8:2B:7B:D7
            X509v3 Authority Key Identifier:
                keyid:C0:BA:1D:FB:35:99:6F:CE:9A:7E:48:59:E8:AF:87:91:FA:F0:EC:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLod-zWZb86afkhZ6K-Hkfrw7JQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/170BFAA6995211EA9CF98C52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:e1:6f:04:be:fe:c8:7f:e6:4f:1e:68:40:7d:14:6f:fa:95:
         02:9b:05:2b:12:38:bc:c4:88:3c:69:80:50:2e:04:be:ec:29:
         64:07:9d:11:0b:f9:bc:27:50:03:59:5e:e6:60:9b:46:73:41:
         9b:92:34:ee:a6:17:85:f9:ae:cc:b1:1a:6c:19:2d:9c:36:8b:
         e1:da:a1:7f:83:07:75:e5:cb:35:d9:e0:6f:8f:6b:b6:e5:19:
         16:15:22:ac:76:3c:8c:2b:4d:9a:f2:d1:0c:1d:dc:b1:ae:98:
         49:71:65:d3:26:6b:e1:fc:0c:9f:7b:65:43:34:f9:b2:71:db:
         0b:f3:05:33:90:48:fa:3b:ce:78:b7:2b:44:9a:a5:2d:cf:7b:
         75:35:35:a3:cc:6b:39:bf:2d:03:78:63:59:1e:28:a3:37:79:
         a2:15:71:de:9c:50:85:a0:0c:bf:e7:5e:cf:5f:88:50:af:d4:
         18:ae:7a:08:ab:d2:31:65:87:89:b4:5c:2c:2f:d3:aa:f8:99:
         16:d4:0b:57:16:25:cb:45:29:13:f0:28:5d:ad:bb:b8:ae:a2:
         dc:33:68:48:cb:df:0f:5d:b2:ef:6d:3c:ff:3c:b6:9a:e7:72:
         48:91:fa:72:30:1b:4b:ed:34:9b:8c:a0:da:91:e8:d9:45:83:
         26:c0:49:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:26 2024 by rpki-client on console-ams.rpki-client.org