Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/1F59A248F69E11EC947BBC5EC4F9AE02.roa
File:                     1F59A248F69E11EC947BBC5EC4F9AE02.roa (raw, json)
Hash identifier:          wteDAp88PU/OXsrCKeDE5pjIsifmHrURWAVujMlzkII=
Subject key identifier:   B0:8C:4D:41:F4:20:CE:4B:4A:4A:72:AF:73:7A:3A:09:3F:D3:C1:4C
Certificate issuer:       /CN=A917983D/serialNumber=6F00246A8588848C3A172752F32AE4EA30C680A4
Certificate serial:       0157
Authority key identifier: 6F:00:24:6A:85:88:84:8C:3A:17:27:52:F3:2A:E4:EA:30:C6:80:A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwAkaoWIhIw6FydS8yrk6jDGgKQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/1F59A248F69E11EC947BBC5EC4F9AE02.roa
Signing time:             Fri 21 Jul 2023 03:03:12 +0000
ROA not before:           Fri 21 Jul 2023 03:03:12 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     139922
IP address blocks:        103.190.40.0/23 maxlen: 24
                          2001:df0:e440::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.crl
                          rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwAkaoWIhIw6FydS8yrk6jDGgKQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 04:20:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917983D/serialNumber=6F00246A8588848C3A172752F32AE4EA30C680A4
        Validity
            Not Before: Jul 21 03:03:12 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64b9f56f-860b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:89:33:1f:d7:c6:c3:bd:17:0b:0d:e9:52:f9:
                    8f:74:6b:c1:6a:c9:fc:f1:d7:8f:f3:9f:67:9d:c9:
                    11:24:95:d1:1a:58:7b:fc:60:d0:6b:99:29:2a:35:
                    31:07:71:4b:76:ae:90:cd:68:e0:12:81:4b:a4:5c:
                    ca:b6:dd:66:c5:4a:4f:f0:81:26:bf:9b:e5:cc:ca:
                    f4:ad:ca:7c:80:07:b0:bc:97:78:36:be:18:b5:ef:
                    fe:5f:50:25:8a:60:e7:71:82:d0:d4:0a:0e:12:68:
                    86:56:19:f6:15:e4:da:60:ac:ab:74:bd:99:6f:9e:
                    ad:f4:5e:82:17:46:41:3f:ba:98:ea:a7:92:13:dd:
                    32:04:e7:c5:21:19:3b:11:04:45:71:99:63:e8:6f:
                    80:77:4d:ac:d0:a2:7c:24:f5:2e:4c:c7:55:70:96:
                    28:21:10:e5:21:a6:6c:63:31:43:44:02:f7:a0:94:
                    d7:6e:84:a9:cb:a7:bf:c2:24:53:98:58:90:5c:09:
                    8b:74:7e:3e:ec:43:2a:1c:77:fb:7c:89:43:8f:16:
                    f2:4d:9c:1d:7d:20:03:c2:ed:72:5e:b8:ce:27:12:
                    7f:f3:af:31:45:21:00:f2:f7:02:c9:01:83:40:86:
                    4d:e2:69:96:b4:92:f9:04:ec:2c:b9:7a:e9:7b:c8:
                    02:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8C:4D:41:F4:20:CE:4B:4A:4A:72:AF:73:7A:3A:09:3F:D3:C1:4C
            X509v3 Authority Key Identifier:
                keyid:6F:00:24:6A:85:88:84:8C:3A:17:27:52:F3:2A:E4:EA:30:C6:80:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwAkaoWIhIw6FydS8yrk6jDGgKQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/1F59A248F69E11EC947BBC5EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.40.0/23
                IPv6:
                  2001:df0:e440::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:bc:26:71:aa:76:a1:a8:3f:3e:96:c5:9d:56:fd:6d:ca:f4:
         3b:6b:66:e3:23:d5:61:5c:85:6b:b9:34:e0:0d:a1:b1:0a:8b:
         9f:e5:bf:4a:85:b6:1b:2f:be:b9:3b:71:11:53:ce:69:34:d2:
         0b:cc:93:c1:53:cf:8d:4b:97:00:39:79:cb:8a:a6:3e:be:59:
         ea:93:41:ca:0b:66:23:fb:ea:7c:5a:ef:e6:a4:a2:5c:ee:cb:
         4a:c3:c6:e2:a0:db:28:c9:2a:f5:a4:57:f3:50:c4:5a:40:f3:
         83:ab:97:f1:d8:c2:49:b4:1b:c6:08:39:3d:15:83:ee:5a:61:
         e5:99:7a:53:16:f3:07:12:3a:3f:3e:9d:bb:b4:d8:bc:22:56:
         54:2e:a9:fe:74:1f:d2:f2:1a:b6:bd:6e:ed:d6:8d:15:97:63:
         0c:c0:61:14:13:51:17:6b:b5:b8:13:1c:14:92:e7:df:c1:f2:
         36:81:b2:ea:22:ee:96:30:ed:c5:3f:1b:a6:8b:15:04:c4:b7:
         95:15:a0:2b:5e:32:8a:18:96:c4:a6:dc:fb:14:87:14:3a:58:
         15:2b:ea:30:06:36:b2:68:3c:5f:86:38:f2:db:5b:85:4e:dd:
         41:07:e5:24:da:32:95:f0:ab:e3:17:dd:c2:f5:08:ab:0e:56:
         a6:ca:42:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:46:24 2024 by rpki-client on console-ams.rpki-client.org