Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/5A233B60424611EE9C25DD48C4F9AE02.roa
File:                     5A233B60424611EE9C25DD48C4F9AE02.roa (raw, json)
Hash identifier:          fKYGNefresdzFDDl2tWhCprVxSYE1AN94xDv7ol7pWc=
Subject key identifier:   7E:4D:D7:35:94:F1:F2:B6:99:7D:0B:87:1E:A3:41:56:5A:F8:75:2A
Certificate issuer:       /CN=A916A763/serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3
Certificate serial:       04
Authority key identifier: A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/5A233B60424611EE9C25DD48C4F9AE02.roa
Signing time:             Thu 24 Aug 2023 06:26:07 +0000
ROA not before:           Thu 24 Aug 2023 06:26:07 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     151675
IP address blocks:        103.6.122.0/23 maxlen: 24
                          2001:df2:d6c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl
                          rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 06:52:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A763/serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3
        Validity
            Not Before: Aug 24 06:26:07 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=64e6f7fe-2130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:aa:85:ba:6b:82:8d:7e:e3:d1:40:52:ec:ff:
                    7b:4e:20:bf:28:ad:94:b6:ba:68:b5:33:a0:a8:3c:
                    90:74:fd:19:d6:fe:3f:2b:d4:67:8e:b9:39:23:df:
                    0c:de:2d:c6:3e:f8:30:7e:29:b5:b3:5d:c9:ea:a9:
                    7e:c5:41:9c:f8:63:45:1e:91:6a:85:96:9d:8b:61:
                    41:fc:f2:38:9f:33:ef:ae:aa:ca:d8:27:20:6f:91:
                    e3:a9:48:9d:44:b3:98:2a:b9:42:7b:79:3e:a4:35:
                    ac:9d:ac:55:84:5c:40:2b:45:29:4a:18:a1:4b:8a:
                    77:8e:35:0b:f6:9e:2f:cc:93:24:c7:d5:48:84:d0:
                    57:2f:ba:45:b5:42:e0:42:45:42:dc:11:3f:31:79:
                    4b:f4:e2:28:f8:a7:b3:9f:5e:7c:40:50:6d:be:3e:
                    cc:51:55:a1:bf:37:c5:ae:d8:ba:a6:ab:b8:b6:65:
                    9b:81:3d:84:19:ee:93:cd:49:dd:7a:8d:66:15:2a:
                    b1:75:70:3c:04:55:f2:73:2d:0f:b6:af:4f:86:6c:
                    da:ae:c2:66:83:f7:2c:08:3f:bf:7c:d8:f7:9f:f5:
                    8d:ea:72:8d:a5:1b:46:3a:e1:af:fe:b0:74:bb:b7:
                    d3:1b:89:37:71:41:61:d3:77:09:a5:9e:8b:2d:f1:
                    96:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:4D:D7:35:94:F1:F2:B6:99:7D:0B:87:1E:A3:41:56:5A:F8:75:2A
            X509v3 Authority Key Identifier:
                keyid:A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/5A233B60424611EE9C25DD48C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.122.0/23
                IPv6:
                  2001:df2:d6c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:72:ee:3c:0a:92:e0:0b:f5:29:1e:74:64:14:c7:a9:d8:01:
         30:a0:c4:92:1e:f5:99:06:6a:62:42:31:a6:b1:38:ee:7a:d7:
         bf:0d:0a:29:47:ac:26:4f:52:5b:60:92:b4:53:5f:90:e5:0c:
         6f:bc:b9:e2:f1:c8:2c:7e:d4:25:b1:72:6e:bb:9c:78:65:b3:
         90:ba:86:13:eb:f8:aa:22:9b:93:d3:d3:8f:f0:c6:ab:5e:89:
         78:7b:d4:19:bc:21:2e:2a:38:bb:45:d4:5b:5c:33:85:d0:7a:
         f2:e3:98:84:80:63:a3:f8:33:e2:83:47:8d:65:23:02:b6:c0:
         e8:4e:e2:b8:b7:b6:04:e8:1b:ab:7a:b7:8a:17:a6:c8:ed:6b:
         10:7f:06:ca:05:cd:0e:ac:95:4a:52:9f:5c:5b:70:41:53:e8:
         b5:85:de:a6:1c:c0:09:88:4f:60:4f:a1:8a:6a:8c:af:6b:ff:
         60:8d:c4:3b:36:f6:e9:97:31:58:c8:5b:d7:13:86:24:24:f5:
         35:3c:d1:cb:fd:79:d9:c0:3f:5f:ed:5d:50:0f:7d:ca:cb:a1:
         5b:46:48:51:9f:cd:4d:66:c8:f3:43:fa:65:1f:b4:91:15:31:
         24:6d:c9:f7:98:8e:8c:53:53:d0:c2:e2:2c:36:4c:c9:ca:3b:
         c9:2b:05:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 08:01:42 2024 by rpki-client on console-ams.rpki-client.org