Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/03D4EC14D82F11EBA454B918C4F9AE02.roa
File:                     03D4EC14D82F11EBA454B918C4F9AE02.roa (raw, json)
Hash identifier:          p5JyMcxJixg62lv7FaUL1kQInCYoLGWXuwUelGMNmyE=
Subject key identifier:   A8:FB:C7:58:71:3E:FC:A2:D4:0D:77:83:37:B9:2D:D0:16:D7:9E:AB
Certificate issuer:       /CN=A916BA2B/serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
Certificate serial:       0BD9
Authority key identifier: 3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/03D4EC14D82F11EBA454B918C4F9AE02.roa
Signing time:             Thu 02 May 2024 19:38:04 +0000
ROA not before:           Thu 02 May 2024 19:38:04 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     139282
IP address blocks:        103.113.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl
                          rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:14:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3033 (0xbd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BA2B/serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
        Validity
            Not Before: May  2 19:38:04 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6633eb9b-d929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ce:7b:9e:8f:ee:55:b8:84:82:c5:17:c3:d2:
                    93:4b:7a:a6:85:6d:c9:13:9b:81:5a:5e:cb:5a:4b:
                    a3:0a:02:b2:e8:e3:44:3b:e0:43:f5:66:7a:f1:1e:
                    c2:d0:75:22:a4:bf:ec:1e:95:50:2f:cd:4f:19:50:
                    06:29:fa:bc:e8:a5:42:e5:52:86:85:ce:d8:df:e2:
                    a3:a7:53:3d:3e:70:98:3b:60:e0:f0:de:54:03:02:
                    af:9e:93:a1:57:75:af:c2:55:a5:59:71:39:94:c1:
                    8b:1d:d5:ea:e9:03:f9:a3:3d:da:bd:06:9f:bd:39:
                    31:9e:bd:e8:c7:f4:d9:2f:57:22:cf:10:46:47:98:
                    bc:3f:88:30:60:e3:16:9c:ae:63:93:81:e6:43:4b:
                    38:01:e1:26:1f:31:b8:e4:5a:ec:9a:0b:99:b1:d0:
                    e3:ad:76:ea:76:22:87:f3:15:83:84:b3:49:26:b8:
                    a7:0e:b9:72:62:44:b3:8c:b9:5f:a1:17:27:cb:93:
                    1f:d4:77:03:ab:ec:d4:ee:47:3d:9f:52:5f:70:49:
                    34:3c:be:37:39:24:81:f6:56:c3:a4:5a:ee:4c:9f:
                    a0:73:1b:c1:51:ef:37:9e:c1:71:6f:2e:b7:57:f9:
                    6b:a0:2e:e0:4d:67:fe:72:6b:1c:20:7e:60:b9:ed:
                    82:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FB:C7:58:71:3E:FC:A2:D4:0D:77:83:37:B9:2D:D0:16:D7:9E:AB
            X509v3 Authority Key Identifier:
                keyid:3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/03D4EC14D82F11EBA454B918C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:f7:85:63:60:18:cb:9b:42:f8:eb:6c:94:c0:5e:84:13:88:
         d8:ce:26:6f:24:d0:0c:0a:e9:df:bb:ee:53:2c:70:8e:98:1c:
         e3:9e:ab:ba:48:31:5b:2a:b5:9e:70:48:d7:cd:37:36:64:a0:
         58:16:a5:32:f2:da:0b:8b:2b:9e:9c:5f:41:d8:76:dc:85:f3:
         4c:35:71:1a:a4:fb:23:95:0e:c3:05:33:83:ce:31:6f:bb:61:
         3d:09:ad:44:65:3f:2f:f9:6d:e6:42:ad:6d:cb:e7:a8:54:55:
         0b:1a:d3:dd:a1:8e:8b:31:fa:a1:64:d9:52:6d:a3:84:6e:03:
         e4:41:94:39:db:40:a4:9a:34:3c:06:53:51:11:29:84:81:59:
         7a:ed:85:04:7b:53:b9:83:74:67:a5:bf:c5:a3:3b:5a:51:fe:
         bc:95:b1:12:75:ae:b4:2b:48:b4:c4:f9:e1:02:e3:88:d9:0d:
         1d:5a:8d:c1:05:60:7a:87:70:df:aa:de:f0:0d:ce:ed:a9:b1:
         bf:e2:ab:96:bb:70:9f:a1:e1:0d:18:2a:58:04:7e:e3:dd:3c:
         36:15:ee:d1:fd:01:63:da:36:a1:e7:e4:46:3f:44:32:43:3a:
         dc:7d:c3:45:40:24:fd:9e:7a:da:0c:77:7d:ed:cc:8a:cb:bd:
         2c:56:70:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:04 2024 by rpki-client on console-ams.rpki-client.org