Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/1BB160C225EB11E9ADD6867FC4F9AE02.roa
File:                     1BB160C225EB11E9ADD6867FC4F9AE02.roa (raw, json)
Hash identifier:          p5WI048j+aa2euJphDqE0g93ye/98v4Qw+eHTYJi4ss=
Subject key identifier:   31:BE:66:E7:3D:3C:36:6D:A8:DF:9E:68:D0:14:25:EE:73:CC:73:A1
Certificate issuer:       /CN=A916F95E/serialNumber=BF1BAB4CF0D54930E001B72D24F30B3ED68AE2B3
Certificate serial:       0F69
Authority key identifier: BF:1B:AB:4C:F0:D5:49:30:E0:01:B7:2D:24:F3:0B:3E:D6:8A:E2:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/1BB160C225EB11E9ADD6867FC4F9AE02.roa
Signing time:             Thu 24 Aug 2023 17:55:00 +0000
ROA not before:           Thu 24 Aug 2023 17:55:00 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     137982
IP address blocks:        103.119.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.crl
                          rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 18:06:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3945 (0xf69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916F95E/serialNumber=BF1BAB4CF0D54930E001B72D24F30B3ED68AE2B3
        Validity
            Not Before: Aug 24 17:55:00 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64e79974-cf71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d4:11:ec:c1:0a:fc:65:70:d4:68:97:4e:b0:
                    ab:11:a6:1d:fd:83:4c:6d:7e:17:70:ca:87:5a:9e:
                    66:8b:8a:d2:e0:3c:ce:c7:4e:72:f0:19:10:c5:b2:
                    4b:9d:72:5a:5b:7e:68:5f:04:66:7b:05:58:25:15:
                    ee:59:fc:81:2f:5c:5e:a6:ff:e3:1f:40:ad:68:4c:
                    f8:e7:94:7d:d5:81:83:9f:6c:25:94:1d:cf:94:1f:
                    7f:6e:0b:25:00:6b:ab:fa:13:9a:0b:e4:50:56:36:
                    94:65:99:8f:ed:b1:1c:88:b1:f9:9c:82:68:df:f2:
                    66:58:9c:2a:04:18:83:db:36:61:39:1f:b0:40:90:
                    0e:33:0a:7f:6e:00:1a:e7:75:d4:6b:75:d9:88:98:
                    05:11:47:aa:e9:ef:f9:3f:e5:be:7f:2b:0f:28:f1:
                    bf:1d:0a:31:7b:a7:69:ed:ee:80:ca:77:f3:10:a2:
                    06:ff:d9:ee:53:ca:63:e6:89:4d:5d:fc:2a:05:32:
                    24:bd:28:f8:52:f8:00:26:a9:eb:1d:d4:24:8d:d9:
                    04:96:76:58:b2:6e:a7:91:ef:4b:b0:ee:21:12:84:
                    85:de:4a:d4:fb:75:51:6a:43:d1:e8:d7:59:3e:6b:
                    4b:54:a5:ef:07:6b:0f:4f:46:cd:60:68:82:bc:8c:
                    e2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:BE:66:E7:3D:3C:36:6D:A8:DF:9E:68:D0:14:25:EE:73:CC:73:A1
            X509v3 Authority Key Identifier:
                keyid:BF:1B:AB:4C:F0:D5:49:30:E0:01:B7:2D:24:F3:0B:3E:D6:8A:E2:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/1BB160C225EB11E9ADD6867FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:d3:da:25:6e:9d:1e:b4:12:91:1a:5f:19:65:21:b7:73:90:
         8e:7e:30:c5:10:71:2b:b7:2c:d6:85:fd:5d:40:00:ba:48:11:
         59:82:55:6b:41:3f:96:ae:50:4e:b9:65:f0:b5:73:65:d2:a8:
         76:50:f9:92:3c:df:26:ed:cf:10:f3:0a:ee:13:6a:c9:81:43:
         15:ee:26:db:f9:0b:e5:02:25:22:8a:3e:06:5f:13:bd:b3:e7:
         ad:49:32:ab:3c:6b:97:29:50:21:6a:18:73:d1:22:cf:07:c1:
         93:5b:5e:84:91:97:03:c3:fc:6a:7f:22:02:d4:dd:bd:45:62:
         e3:a1:1e:09:c0:1c:e8:78:f8:65:90:39:1e:c3:3f:f2:e0:61:
         66:f4:ca:d4:0a:8f:f4:8b:45:9d:b4:b5:00:31:e8:a5:18:bb:
         12:af:38:88:b2:b8:d9:56:3e:33:a5:bb:95:c3:26:59:2f:88:
         92:71:96:81:93:cc:81:a8:b0:66:85:80:fb:a1:f8:75:57:0a:
         9f:44:c8:74:b8:72:cd:9e:02:40:b7:50:c3:a0:0f:b8:8b:b1:
         40:1c:4e:99:f5:c8:9e:a1:23:a7:e8:00:bc:39:62:c3:03:6c:
         d9:34:77:6e:79:6a:30:53:cd:52:31:06:a1:9d:22:f1:46:ad:
         c0:03:33:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 19:55:15 2024 by rpki-client on console-fra.rpki-client.org