Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/79AA61622C8711EFBDD6F672C4F9AE02.roa
File:                     79AA61622C8711EFBDD6F672C4F9AE02.roa (raw, json)
Hash identifier:          3biVBRmslEYYBK7sgaVOapllwelbsd+exeLENbjHwjc=
Subject key identifier:   16:F4:0B:3B:E5:34:E2:FE:81:CA:36:27:58:66:C5:BB:16:F9:36:39
Certificate issuer:       /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial:       038A
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/79AA61622C8711EFBDD6F672C4F9AE02.roa
Signing time:             Thu 05 Dec 2024 01:15:10 +0000
ROA not before:           Thu 05 Dec 2024 01:15:10 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     139734
IP address blocks:        103.235.16.0/23 maxlen: 23
                          103.235.16.0/24 maxlen: 24
                          103.235.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
                          rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 906 (0x38a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916557B
        Validity
            Not Before: Dec  5 01:15:10 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=6750fe9d-7177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ad:14:ad:75:3e:93:b9:bc:f6:ab:d9:af:a1:
                    28:16:18:de:50:a7:f6:62:9e:a0:b0:d0:01:b4:a3:
                    e6:33:e0:b1:2a:98:b7:00:05:a9:ed:d8:f3:f6:1c:
                    58:04:44:57:a9:ec:96:8c:a3:07:6f:4e:25:2a:6f:
                    9d:7d:de:29:70:f8:33:5a:19:82:fc:a5:46:da:14:
                    64:10:0a:29:7c:d1:57:42:b3:d1:bf:7a:04:2b:3e:
                    1e:1a:87:5d:58:38:d4:c4:ec:d5:0d:57:99:dd:f7:
                    ef:72:1d:22:36:cb:02:41:fc:0b:c6:be:00:d2:84:
                    73:da:f1:19:5d:5b:a3:7f:6a:c7:f4:ec:c3:4d:3f:
                    f1:d0:e6:1d:2f:83:57:f3:65:5b:88:d2:04:ba:bc:
                    98:bb:bd:1f:e2:5c:db:69:78:27:85:ed:f0:00:25:
                    3d:f3:9e:e7:0e:1a:e0:cb:0c:fb:c7:38:db:04:2c:
                    61:63:db:03:7e:17:82:5d:18:18:fd:24:2a:f5:71:
                    26:a8:49:8c:59:c2:cd:9a:c0:47:8f:49:94:1a:0d:
                    ea:df:e0:94:c5:eb:1b:8e:f5:54:49:41:47:3e:41:
                    20:af:15:66:ea:f5:fe:0d:6e:5f:3b:ec:00:5c:4f:
                    95:88:69:85:a9:6e:2a:b8:a4:f2:7b:24:e9:76:8d:
                    ee:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F4:0B:3B:E5:34:E2:FE:81:CA:36:27:58:66:C5:BB:16:F9:36:39
            X509v3 Authority Key Identifier:
                keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/79AA61622C8711EFBDD6F672C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:2a:99:ae:d3:89:77:92:f0:58:c9:0d:e8:eb:64:ef:32:5a:
         6f:b3:54:cb:ef:5d:13:31:68:ac:1f:dd:46:3a:b9:01:8b:fb:
         49:b7:6e:65:4b:bd:be:88:60:62:dc:91:c3:98:12:36:a4:7d:
         94:8e:3f:65:8b:f7:ca:79:4f:ae:4d:22:2a:a8:b4:df:00:fa:
         7f:71:ea:9e:f8:4f:52:dd:85:9c:2a:00:a8:fb:d1:65:5a:11:
         a1:d6:2b:e9:e9:d5:b3:53:75:05:68:67:ac:77:d4:4c:f3:4e:
         6a:f5:e7:62:8a:e1:35:de:b5:5b:56:e5:9f:a8:c4:05:d7:39:
         cd:3a:98:23:18:ea:67:ec:bb:15:7b:bd:ff:9c:4c:a0:58:da:
         49:c7:fe:a8:3d:16:e4:11:2b:92:22:d6:21:d9:96:d4:66:70:
         9b:41:1f:b1:c3:63:1c:b6:39:8c:3d:ca:5e:7c:14:65:a9:ad:
         90:35:0c:70:88:31:0a:29:80:73:ef:35:ba:e4:37:98:74:1e:
         73:6b:87:14:22:f5:d7:de:7e:d7:c3:aa:47:95:85:78:ab:ae:
         e3:fa:47:36:af:c1:b7:c9:4d:43:f6:de:28:04:9b:d5:44:a0:
         f4:44:f6:a2:ab:12:e8:7f:d5:91:2e:10:7e:17:88:5f:4d:62:
         da:ae:99:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:28 2025 by rpki-client