Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/96C3CFEAD46711EEA842517BC4F9AE02.roa
File:                     96C3CFEAD46711EEA842517BC4F9AE02.roa (raw, json)
Hash identifier:          +8ppDDvxSy2q2aM7S1BLIbwvYFSh6Bx1aeXj22W8sik=
Subject key identifier:   06:F5:60:59:F6:44:4E:D8:A8:7F:5F:D1:81:FE:06:1C:A1:39:36:45
Certificate issuer:       /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial:       0296
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/96C3CFEAD46711EEA842517BC4F9AE02.roa
Signing time:             Mon 26 Feb 2024 05:26:27 +0000
ROA not before:           Mon 26 Feb 2024 05:26:27 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     139734
IP address blocks:        103.235.16.0/23 maxlen: 23
                          103.235.16.0/24 maxlen: 24
                          103.235.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
                          rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 03:28:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 662 (0x296)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
        Validity
            Not Before: Feb 26 05:26:27 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65dc2103-bb47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:15:78:88:10:b8:37:db:3b:d4:e2:15:8a:42:
                    9d:73:cf:9a:b1:fa:99:10:87:9c:5e:ea:e5:4e:8b:
                    2f:51:d2:47:78:ca:e5:8a:e0:f4:e2:de:a2:37:0a:
                    a2:13:80:e2:e3:8b:79:8f:3a:0e:2f:79:71:46:b4:
                    e6:83:c1:73:9a:e1:3b:89:27:2e:96:b6:1d:01:3e:
                    8d:4f:70:ac:dc:d9:99:b4:7d:f6:59:df:04:da:46:
                    dd:9e:65:6f:d2:3d:bc:c0:00:72:44:f8:7d:e6:27:
                    aa:f6:de:f2:f1:28:58:8c:a8:d4:d9:94:34:43:94:
                    8d:e7:a8:26:58:06:f8:44:dc:1e:f6:7c:da:b4:e7:
                    3c:96:c5:46:72:9a:8f:bb:a2:f0:f7:02:cc:2b:ad:
                    d5:ab:00:d9:e0:36:b3:20:4a:7f:65:c8:39:ec:4f:
                    ae:73:22:33:58:23:0b:8e:88:16:a8:ca:56:4b:ee:
                    1f:37:96:82:dc:8c:bd:52:70:18:bc:29:78:57:4f:
                    b3:2f:ec:6d:08:5f:92:93:9a:df:87:1f:4d:62:96:
                    1f:65:82:d2:12:70:1d:a8:f1:bf:e1:f0:27:a7:36:
                    59:73:a9:db:a4:df:11:ac:61:06:33:bd:db:30:99:
                    6d:6c:fa:64:12:3c:c0:03:19:eb:5a:ba:ad:c1:3d:
                    6c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F5:60:59:F6:44:4E:D8:A8:7F:5F:D1:81:FE:06:1C:A1:39:36:45
            X509v3 Authority Key Identifier:
                keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/96C3CFEAD46711EEA842517BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:dc:34:5e:c2:7d:dc:c1:12:f0:29:3e:d0:80:ab:43:d6:30:
         9f:3b:9c:f2:08:43:b9:b1:88:0b:79:2c:78:81:a6:0e:d1:1f:
         a1:bb:42:83:10:65:9e:98:2a:e1:4b:4d:29:f7:62:8c:d8:f7:
         72:b4:19:fc:65:39:86:44:59:8b:0d:55:7c:2b:43:09:de:36:
         5d:84:3e:4f:7b:66:1c:f0:2f:d4:9f:f3:e8:e6:3a:40:02:41:
         fd:74:6b:8d:c2:79:66:aa:d5:54:fd:59:92:01:1e:b6:18:45:
         fd:79:fe:b8:2e:97:a8:ac:df:8a:71:3e:25:41:64:2e:48:ba:
         e2:53:f9:ba:d0:1a:2d:55:49:6a:e4:e1:96:7d:08:4d:6f:1e:
         a6:c2:ed:99:a6:00:ef:09:cc:a3:dd:75:cb:c1:b8:e8:60:16:
         44:95:64:4e:99:77:a4:48:41:f2:7b:26:0f:65:31:5b:7a:48:
         b6:2b:e5:a6:cf:a9:c1:02:d6:69:24:b9:15:77:93:9e:ee:80:
         4d:dd:a0:ea:06:1f:c9:25:85:32:f8:77:75:2e:6a:f4:2f:29:
         25:06:97:4a:04:c5:a2:b5:87:43:6a:19:48:d8:79:08:0f:9d:
         76:4a:39:a1:f9:de:2b:07:4b:1d:3f:f0:38:d5:29:8d:e0:44:
         0c:12:ee:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 04:35:39 2024 by rpki-client on console-ams.rpki-client.org