Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/C8165660822F11EEABA7D533C4F9AE02.roa
File:                     C8165660822F11EEABA7D533C4F9AE02.roa (raw, json)
Hash identifier:          U8OEyZFjA9I1IQBUUkrhnUMwPDhM8kTGhjLTtv1sIUM=
Subject key identifier:   53:43:1A:AC:75:7C:51:DD:15:C7:F5:A0:FA:5B:69:A1:79:05:BC:18
Certificate issuer:       /CN=A9170982/serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB
Certificate serial:       028E
Authority key identifier: E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/C8165660822F11EEABA7D533C4F9AE02.roa
Signing time:             Sat 09 Dec 2023 02:54:18 +0000
ROA not before:           Sat 09 Dec 2023 02:54:18 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     16839
IP address blocks:        103.23.64.0/22 maxlen: 24
                          2406:9f00::/32 maxlen: 32
                          2406:9f00:6100::/40 maxlen: 40
                          2406:9f00:6110::/48 maxlen: 48
                          2406:9f00:6120::/48 maxlen: 48
                          2406:9f00:6500::/40 maxlen: 40
                          2406:9f00:6510::/48 maxlen: 48
                          2406:9f00:6520::/48 maxlen: 48
                          2406:9f00:8100::/40 maxlen: 40
                          2406:9f00:8110::/48 maxlen: 48
                          2406:9f00:8120::/48 maxlen: 48
                          2406:9f00:8200::/40 maxlen: 40
                          2406:9f00:8210::/48 maxlen: 48
                          2406:9f00:8220::/48 maxlen: 48
                          2406:9f00:9100::/40 maxlen: 40
                          2406:9f00:9110::/48 maxlen: 48
                          2406:9f00:9120::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl
                          rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 00:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 654 (0x28e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170982/serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB
        Validity
            Not Before: Dec  9 02:54:18 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=6573d6d9-a372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bb:6e:9a:0c:01:5b:c7:07:7b:de:c1:e3:e6:
                    9d:92:45:72:e3:32:df:6a:a2:f7:40:90:00:7f:cf:
                    ac:8c:cf:f7:86:66:83:f4:aa:be:89:87:19:e2:ce:
                    81:cf:02:85:eb:55:67:10:71:b0:3b:97:21:1f:c2:
                    63:3b:a9:f4:da:d1:dd:24:37:45:03:a8:88:24:29:
                    ba:f0:5e:0d:d6:4a:57:82:e7:48:c2:67:73:b2:ab:
                    ef:90:01:e4:48:54:70:50:aa:92:1b:83:68:fc:71:
                    ba:ce:f4:c2:a0:33:49:a1:d2:cc:d9:1d:32:9f:39:
                    ce:df:49:19:45:27:27:d1:71:71:f8:93:4d:d2:34:
                    94:6a:6a:2a:79:84:01:d7:1d:5c:18:40:f8:01:57:
                    56:8d:4e:62:d0:cd:46:cb:6e:88:a3:c5:81:51:a3:
                    f5:7f:cb:e6:bc:99:df:66:d8:17:85:c2:23:a8:71:
                    2e:85:53:71:59:dd:fa:89:0d:df:b6:98:a7:ac:22:
                    67:52:20:7d:e6:b7:b0:1b:e0:d9:2b:1d:7f:d4:eb:
                    96:af:fc:4f:96:ae:cc:26:03:80:e6:82:6d:60:87:
                    9b:ba:a7:fd:bc:60:1e:a3:5c:09:17:14:83:df:7d:
                    8c:07:92:09:36:03:66:a8:91:36:09:c4:2e:b9:43:
                    56:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:43:1A:AC:75:7C:51:DD:15:C7:F5:A0:FA:5B:69:A1:79:05:BC:18
            X509v3 Authority Key Identifier:
                keyid:E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/C8165660822F11EEABA7D533C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.64.0/22
                IPv6:
                  2406:9f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:6e:6b:e8:e5:f0:5f:a3:8f:4a:12:ac:93:4d:44:1d:db:27:
         62:7e:a8:6c:21:f3:8e:30:da:d3:1b:71:64:42:6e:99:6d:35:
         9e:cc:53:01:2e:12:48:90:ec:28:5b:d6:61:64:04:93:c8:b9:
         24:df:f3:98:99:4f:c1:ae:01:cc:db:51:62:bd:64:60:3e:52:
         3d:ce:e8:64:a8:a9:c2:73:fd:65:1c:6e:8c:c3:06:8c:e4:e0:
         94:c5:b4:6e:55:41:eb:0d:b4:5f:06:7c:7a:78:b9:76:f5:ea:
         18:73:65:b6:88:fb:48:2c:bf:33:22:a2:78:82:68:bd:57:55:
         19:1f:02:d3:f3:73:c2:fb:04:68:1d:7f:6b:78:0d:29:c5:97:
         0c:b2:49:24:47:4c:16:d7:72:3c:6d:56:65:a6:25:2f:73:de:
         b8:c7:e7:ed:f0:b0:1e:1c:62:eb:4c:b9:0c:d3:2b:6e:ab:3c:
         ac:d0:82:ed:ab:e5:46:4a:a6:3b:32:94:27:20:61:e6:d6:d5:
         05:db:a5:b0:0e:8f:69:58:91:d4:93:6a:31:38:21:9a:94:80:
         99:cd:82:63:4b:fc:39:94:ce:ce:8c:5e:b0:4a:a4:06:76:4a:
         cf:84:8f:55:26:7e:65:f0:e9:a4:96:f3:cd:32:c0:a1:85:e0:
         2b:44:97:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:41 2024 by rpki-client on console-ams.rpki-client.org