Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/A74C3132F49211ED8659177BC4F9AE02.roa
File:                     A74C3132F49211ED8659177BC4F9AE02.roa (raw, json)
Hash identifier:          J6N5IV7MCpXlVeF8cR4PHiRc9CQaom2wbzrHsgmKoxg=
Subject key identifier:   8E:73:6A:6C:D8:56:61:38:C3:DC:77:47:72:21:8B:B6:CA:0B:9D:DD
Certificate issuer:       /CN=A9166123/serialNumber=7B40A8CF8F4F1A06C36E2034F18A38BF98CA5B18
Certificate serial:       8F
Authority key identifier: 7B:40:A8:CF:8F:4F:1A:06:C3:6E:20:34:F1:8A:38:BF:98:CA:5B:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/A74C3132F49211ED8659177BC4F9AE02.roa
Signing time:             Wed 31 Jan 2024 06:46:43 +0000
ROA not before:           Wed 31 Jan 2024 06:46:43 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     59349
IP address blocks:        103.234.168.0/22 maxlen: 24
                          2001:df6:b800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.crl
                          rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166123/serialNumber=7B40A8CF8F4F1A06C36E2034F18A38BF98CA5B18
        Validity
            Not Before: Jan 31 06:46:43 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65b9ecd3-d08b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f1:4a:1d:14:89:4f:f6:95:3d:3f:33:46:e0:
                    91:67:36:b4:95:e9:50:7d:8e:a3:ad:c9:83:5f:f4:
                    d3:70:8f:46:e7:be:3a:0f:2c:3a:c0:ad:c9:ff:7f:
                    3d:95:f3:55:87:75:ce:0f:ea:a6:24:ad:53:6b:ea:
                    af:fc:c7:2d:d1:e3:a1:25:f8:1d:21:d7:7c:a3:74:
                    49:8f:83:d6:a5:bc:72:3c:83:fd:35:03:33:bf:da:
                    7e:62:70:4d:92:8f:c0:cf:f0:9b:06:3f:3a:dd:5f:
                    47:58:40:53:b7:a5:31:46:d5:c2:67:ee:92:e2:28:
                    6b:31:14:a5:cc:18:e6:71:3c:49:29:e9:8c:87:e2:
                    3c:4e:af:86:35:bb:f5:dc:fa:97:0b:4b:fa:30:49:
                    23:ad:b0:3c:57:16:5b:45:7a:b1:d3:3d:85:fa:cd:
                    fb:83:40:40:97:d0:f1:f2:47:9b:01:73:77:1d:3f:
                    0c:e3:6e:55:18:c6:11:8c:98:9a:27:02:ed:e3:c1:
                    b8:3c:2f:3c:16:d6:c5:9a:0b:45:6a:74:e6:47:e9:
                    9f:13:10:77:a8:2a:52:0d:c2:09:35:1d:1c:f7:56:
                    a8:f4:f8:18:e3:04:f3:aa:9a:33:d3:f8:95:07:a0:
                    c2:22:31:19:5d:c4:8f:31:09:7f:1c:46:1c:fc:cf:
                    7d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:73:6A:6C:D8:56:61:38:C3:DC:77:47:72:21:8B:B6:CA:0B:9D:DD
            X509v3 Authority Key Identifier:
                keyid:7B:40:A8:CF:8F:4F:1A:06:C3:6E:20:34:F1:8A:38:BF:98:CA:5B:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/A74C3132F49211ED8659177BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.168.0/22
                IPv6:
                  2001:df6:b800::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:6b:b8:cf:d9:f8:c1:3a:66:52:bc:fc:07:45:ec:7d:9f:b0:
         a1:63:6f:10:9e:9f:a4:0c:f0:f2:f9:e0:8f:97:e7:0d:b1:33:
         a4:8b:ae:2c:e1:c6:c7:3b:13:5a:31:0f:91:1e:14:f5:7e:ae:
         91:2b:ee:b1:1d:2e:89:29:b1:8f:e6:6e:38:ed:81:0f:53:0c:
         12:54:df:43:e1:a9:99:05:15:e0:67:86:42:a0:ce:ff:5b:e9:
         d7:ef:80:94:3a:27:d2:1f:ba:b7:42:ec:45:a9:8e:19:13:67:
         91:22:58:7c:63:ad:fb:ad:a5:41:4c:f4:00:14:40:6b:78:6e:
         14:03:b1:dc:f4:af:67:c8:4e:aa:54:76:19:17:a6:9b:8c:a8:
         8a:2f:49:a7:e7:f6:f3:22:be:a0:ec:d4:99:2b:1c:68:57:55:
         45:4b:6b:50:6e:bc:ee:b3:c0:68:d8:b6:f1:05:d0:db:43:9e:
         b0:65:73:ba:e8:d9:73:bf:dc:79:9b:c5:42:96:da:07:71:4b:
         27:22:34:d3:9c:69:ee:e0:95:44:b4:b5:d2:02:11:9c:53:f1:
         92:0d:48:46:b1:a9:1c:05:60:95:47:57:c9:ff:0c:ac:4d:dc:
         5e:e0:65:e0:e7:3f:45:4a:84:24:7e:3d:ec:70:a5:40:4b:a8:
         8e:8a:c7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:06 2024 by rpki-client on console-ams.rpki-client.org