Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/F058F664642911EAA019224CC4F9AE02.roa
File:                     F058F664642911EAA019224CC4F9AE02.roa (raw, json)
Hash identifier:          pR8hpYrCoO89tivRWBJiZRzg2aFD3n8kIVZ7Qsgjqk8=
Subject key identifier:   38:F0:D7:6A:23:41:D5:80:DC:C3:BF:C4:AE:2E:12:33:C7:54:56:AD
Certificate issuer:       /CN=A916BA2B/serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
Certificate serial:       0BD7
Authority key identifier: 3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/F058F664642911EAA019224CC4F9AE02.roa
Signing time:             Thu 02 May 2024 19:38:01 +0000
ROA not before:           Thu 02 May 2024 19:38:01 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     137453
IP address blocks:        103.113.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl
                          rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3031 (0xbd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BA2B/serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
        Validity
            Not Before: May  2 19:38:01 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6633eb99-7d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:08:46:5a:88:2e:dd:f8:73:d1:61:0e:2e:7a:
                    88:09:b0:3d:58:77:8b:06:9e:46:62:d7:6c:4e:76:
                    71:bf:76:d3:8a:2c:69:a0:04:91:6a:97:19:2a:63:
                    25:3e:36:ff:2c:49:e0:ed:3d:46:3c:6c:c2:31:65:
                    a3:30:e8:e1:a8:93:c5:6a:5a:b2:f3:bf:a5:74:d5:
                    dc:d9:97:74:6c:06:bb:b5:86:e9:1a:29:d2:b7:6b:
                    cc:8c:5c:29:16:64:c4:fd:ab:52:51:0a:73:4a:0b:
                    e5:24:50:f1:5c:88:68:22:e4:2c:95:48:de:de:79:
                    c5:e4:c8:2f:80:03:05:16:7e:be:90:9a:6e:27:39:
                    ce:32:c6:30:fd:1c:dd:2e:2e:37:29:83:7d:ae:db:
                    89:d7:e3:03:83:49:22:ea:8f:d9:cd:b0:08:6a:32:
                    5e:bb:84:15:93:37:5a:63:30:65:f5:fb:b2:fd:b2:
                    1a:a9:c5:64:22:3d:d2:86:bb:06:d4:c5:76:0a:89:
                    a7:d4:3d:e6:37:8f:93:ed:84:90:16:b4:bd:39:8e:
                    cc:11:19:c6:c9:0e:9d:91:24:ad:a3:7c:33:ed:3e:
                    1a:50:e9:41:41:a3:0c:58:57:07:b3:49:61:3c:75:
                    a2:14:32:32:fb:4e:1c:b1:9f:b1:c8:3d:0f:fe:bb:
                    98:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F0:D7:6A:23:41:D5:80:DC:C3:BF:C4:AE:2E:12:33:C7:54:56:AD
            X509v3 Authority Key Identifier:
                keyid:3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/F058F664642911EAA019224CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:74:78:ab:bd:93:5d:6e:74:e9:a6:89:25:82:bb:f8:dd:85:
         ef:27:e0:48:11:1f:a8:2d:2e:4b:21:d5:79:12:80:d3:a5:26:
         31:fe:4c:64:6f:ba:59:55:b5:89:21:6e:66:97:4e:ff:ca:15:
         dd:d1:4e:74:56:6d:77:1a:3f:10:6b:38:7f:60:a0:1e:95:fd:
         c7:78:4d:fc:d5:d7:e6:4d:e4:c3:b2:62:dc:0d:dd:6c:d0:2e:
         08:4a:ec:61:f2:25:06:65:be:97:88:b3:1a:2c:3e:88:87:e2:
         63:73:e0:af:89:2e:a6:df:10:23:28:13:5a:e2:b2:23:82:fa:
         c6:e2:3d:86:67:d2:73:5f:94:06:e1:7a:2f:0f:7f:67:08:25:
         13:22:b0:b1:7b:d8:af:62:d5:27:68:ec:a1:91:20:44:f3:e0:
         1b:47:1d:3f:f4:9c:90:4d:52:3c:40:41:e1:6c:80:31:37:05:
         b6:9e:3f:e9:fb:80:cc:e1:d1:90:c9:24:b4:67:e7:7e:b8:dc:
         3a:5c:2b:e7:ba:4a:44:a5:83:2e:e8:1a:8d:36:ee:ea:84:59:
         d7:4a:01:15:01:cd:7c:43:54:7b:31:5a:69:6f:65:35:aa:1a:
         13:34:74:ca:6a:53:34:3a:f1:9c:9d:47:4d:e3:2a:25:f7:07:
         65:01:39:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:03:58 2024 by rpki-client on console-fra.rpki-client.org