Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/8F60E314584D11EE90C6141EC4F9AE02.roa
File:                     8F60E314584D11EE90C6141EC4F9AE02.roa (raw, json)
Hash identifier:          3+bbodaGDKLK4JyiFTzIM1SO7bAkuD+PumWDreJiAAM=
Subject key identifier:   01:FB:F6:71:7D:84:BF:F1:13:98:DD:90:38:CB:E6:D3:5E:89:81:9A
Certificate issuer:       /CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388
Certificate serial:       07
Authority key identifier: F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/8F60E314584D11EE90C6141EC4F9AE02.roa
Signing time:             Thu 21 Sep 2023 07:07:44 +0000
ROA not before:           Thu 21 Sep 2023 07:07:44 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     134972
IP address blocks:        103.151.172.0/24 maxlen: 24
                          103.151.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl
                          rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 03:26:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388
        Validity
            Not Before: Sep 21 07:07:44 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=650bebbf-019b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cb:2e:27:9d:5e:3a:2e:4f:27:cd:4c:ca:bd:
                    5f:23:7e:54:1c:9f:1b:ac:dc:7e:aa:96:2b:b5:96:
                    51:47:74:26:33:6a:1e:25:fc:bc:e8:50:75:ba:df:
                    07:61:dd:a1:74:45:d2:06:58:44:02:eb:d0:f9:62:
                    16:5d:da:49:01:8f:93:ac:e0:95:3e:86:b2:a6:9e:
                    aa:7d:c7:7f:c0:3f:64:0e:4f:e6:b4:69:09:f8:7a:
                    f6:7f:61:25:69:1a:3e:4e:1e:99:83:5d:21:38:2b:
                    44:76:5c:cc:64:0b:f9:0b:da:eb:c0:32:56:04:d0:
                    15:f9:13:a2:3c:42:c4:2a:83:74:0d:18:a8:56:6d:
                    ae:52:08:fc:3b:d3:65:b1:9e:79:fa:e2:61:53:03:
                    01:67:ab:77:e7:d5:8c:da:02:31:c8:69:5b:f1:98:
                    f8:d9:e7:69:8d:13:9f:94:1e:73:10:a5:d8:3f:98:
                    f8:85:61:eb:91:5c:e8:17:35:2f:14:37:e1:b7:e2:
                    40:2d:4d:a0:59:1c:ca:d0:ff:ca:fc:b3:cf:b9:1d:
                    7d:3d:b6:41:29:89:2f:d9:eb:ae:6e:29:8f:6a:f1:
                    eb:70:75:c9:49:aa:6d:cb:9b:a4:a9:34:8f:8d:76:
                    dd:f1:2a:a2:3f:f1:e1:97:79:93:8f:1f:bf:b6:62:
                    c1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FB:F6:71:7D:84:BF:F1:13:98:DD:90:38:CB:E6:D3:5E:89:81:9A
            X509v3 Authority Key Identifier:
                keyid:F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/8F60E314584D11EE90C6141EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:a1:34:0f:47:03:10:cb:f0:7d:83:68:5d:50:8f:df:dc:dd:
         ad:3a:b5:66:61:b1:95:89:65:7a:ee:a8:82:44:fd:03:84:79:
         a6:c0:ab:96:f7:40:4d:6a:a4:e7:5e:49:04:7a:cf:41:cf:1e:
         ba:19:13:42:fa:46:85:c2:e2:79:a0:a3:f5:db:15:8a:c8:85:
         73:30:2a:34:22:59:24:fc:66:b1:1f:79:26:66:67:7f:3a:0d:
         41:a3:fa:60:34:bc:9f:52:fc:85:24:a5:0d:a2:6c:00:47:63:
         79:2c:fa:1f:ac:bd:11:f8:97:33:80:54:b5:6b:82:b1:49:ff:
         95:30:36:0c:7d:2b:76:04:bf:e6:72:bd:37:1e:20:d7:f2:7f:
         b6:d4:fb:55:4c:8f:59:dc:cc:7c:bf:11:26:a5:d9:e9:5c:c3:
         0e:c5:6e:8f:43:78:4b:af:06:49:ba:42:ae:18:5d:04:83:7c:
         64:36:c5:ea:da:c3:6d:ef:70:50:00:d6:49:9f:78:60:27:ef:
         43:ba:1b:20:c4:69:c2:fc:e1:d5:d2:70:16:c7:a5:a3:15:da:
         fb:15:ea:75:ca:50:29:f7:97:e0:c7:41:3c:ee:61:85:68:52:
         42:0f:42:40:77:26:28:14:8a:d6:26:05:a1:a8:b2:4e:60:d1:
         b5:51:87:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 06:49:15 2024 by rpki-client on console-ams.rpki-client.org