Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/BA5354A4044211EDBB686665C4F9AE02.roa
File:                     BA5354A4044211EDBB686665C4F9AE02.roa (raw, json)
Hash identifier:          CWQRhDcsRk+PrAPNNvmnTDq9CpqjytNv9S7aPPwX5Y0=
Subject key identifier:   BE:A1:D9:B0:FC:EB:CC:CF:81:8F:38:8A:BF:41:15:51:33:86:DF:D7
Certificate issuer:       /CN=A916F338/serialNumber=70CD4CD13E2E377E5E5C37ABBC797EEDE6B6621B
Certificate serial:       0175
Authority key identifier: 70:CD:4C:D1:3E:2E:37:7E:5E:5C:37:AB:BC:79:7E:ED:E6:B6:62:1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/BA5354A4044211EDBB686665C4F9AE02.roa
Signing time:             Sun 19 Nov 2023 04:05:17 +0000
ROA not before:           Sun 19 Nov 2023 04:05:17 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     132310
IP address blocks:        103.242.148.0/24 maxlen: 24
                          103.242.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.crl
                          rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 04:30:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916F338/serialNumber=70CD4CD13E2E377E5E5C37ABBC797EEDE6B6621B
        Validity
            Not Before: Nov 19 04:05:17 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6559897d-1738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4a:23:6e:a6:97:d8:c8:b7:0d:cf:69:a1:c4:
                    69:4f:92:ee:2f:3b:cc:16:46:a3:47:e8:d8:9e:08:
                    76:25:df:66:8e:46:f8:9c:d0:dc:f3:90:11:c8:02:
                    eb:1f:d0:43:62:3c:f3:f7:f3:b4:10:de:57:e1:a5:
                    a0:e3:91:e1:37:c7:70:f1:1b:a6:f2:40:7e:76:42:
                    16:36:25:db:c2:6c:d0:7f:65:e5:77:62:bf:98:04:
                    ca:07:d7:2e:95:c5:f4:00:8f:73:89:ec:0f:87:d8:
                    15:df:8f:6a:32:e3:fb:79:4d:3f:cd:a6:d6:73:88:
                    bc:68:79:72:2d:52:83:b0:fa:20:94:5e:c5:33:5c:
                    15:fe:d9:a7:4a:0e:f1:f7:28:48:cb:23:4f:f4:1f:
                    9c:07:f2:30:17:2c:3d:80:bc:6d:f8:4d:61:75:86:
                    6e:16:7c:f6:68:fc:a4:b9:aa:43:c4:3d:2c:1f:93:
                    76:a7:74:3a:f9:b4:f0:fd:e6:ac:72:ef:f7:c1:31:
                    5c:ad:ac:49:f4:98:b2:e8:e2:10:75:49:45:40:68:
                    76:81:1c:d2:6a:d1:c8:8e:ed:5d:e0:d9:0a:6b:13:
                    50:c6:c8:90:09:d7:a0:88:07:fb:72:07:d3:f8:d9:
                    e9:fc:8c:74:db:ff:89:54:c5:2e:dc:5b:02:12:27:
                    4f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A1:D9:B0:FC:EB:CC:CF:81:8F:38:8A:BF:41:15:51:33:86:DF:D7
            X509v3 Authority Key Identifier:
                keyid:70:CD:4C:D1:3E:2E:37:7E:5E:5C:37:AB:BC:79:7E:ED:E6:B6:62:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/BA5354A4044211EDBB686665C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.242.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:b7:70:c0:c5:ab:18:e9:8a:79:03:2a:13:d0:e4:04:d6:0d:
         82:4e:e8:40:74:f8:c8:e5:c2:be:fc:dc:5d:20:88:55:9a:88:
         58:63:59:06:e3:6a:a8:ec:8c:46:b7:0b:a8:4c:00:4b:ff:6e:
         7b:49:b9:a7:10:d3:c4:3f:dd:4b:33:27:6e:16:82:73:3c:37:
         62:e7:32:23:e2:11:32:53:d2:73:a4:39:db:fa:25:c3:9b:bf:
         01:80:d8:c7:51:0c:71:3d:da:8d:2d:70:8d:3f:c1:ba:38:23:
         72:23:c3:cf:6d:c9:a8:97:94:4f:c5:21:b9:60:e4:4b:80:39:
         28:0d:66:37:52:57:3d:c1:ec:fe:db:be:f6:fb:c7:60:a1:85:
         9c:7d:c6:de:e8:d6:76:e4:94:02:26:7b:db:6f:4f:64:44:9d:
         bb:43:00:7c:fd:e8:9c:e3:55:97:7b:bc:53:0f:94:6e:58:3e:
         72:88:4d:2b:8f:6b:bb:da:94:0b:7f:e9:26:55:45:04:4b:bf:
         cb:7c:20:be:6d:d5:f3:5f:98:b7:8a:8c:d0:31:4d:d2:13:22:
         bb:a1:36:a2:78:9f:cd:b4:37:74:b5:3f:e2:01:7b:f3:a3:ea:
         e5:e4:5a:ed:95:e1:2b:f8:e4:9e:d3:93:6b:48:0b:03:fd:c3:
         d6:f0:e3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:18:06 2024 by rpki-client on console-fra.rpki-client.org