Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/CB91083CA63511EA900DB923C4F9AE02.roa
File:                     CB91083CA63511EA900DB923C4F9AE02.roa (raw, json)
Hash identifier:          aYWj7eOk6WOEVhVHd57pKAx3bYIlz8QLKy8R6BimW6Y=
Subject key identifier:   BA:18:EB:BF:70:83:60:A6:3D:A7:FB:16:34:38:CA:4E:C2:8F:6E:AF
Certificate issuer:       /CN=A917C185/serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516
Certificate serial:       082D
Authority key identifier: AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/CB91083CA63511EA900DB923C4F9AE02.roa
Signing time:             Fri 08 Dec 2023 21:28:24 +0000
ROA not before:           Fri 08 Dec 2023 21:28:24 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     45559
IP address blocks:        103.10.200.0/22 maxlen: 24
                          116.206.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl
                          rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2093 (0x82d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C185/serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516
        Validity
            Not Before: Dec  8 21:28:24 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65738a78-2503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:92:89:2a:6d:60:4d:f4:2f:b0:33:22:1e:93:
                    11:a5:fb:6f:be:f1:76:7c:df:28:09:4f:b1:62:64:
                    59:f0:90:3f:2d:85:51:72:ca:6c:82:c0:90:ee:99:
                    8f:15:29:41:e6:59:b2:8a:89:5d:cb:59:2d:55:fa:
                    55:3f:38:b8:e3:af:3b:dc:3d:a1:73:eb:b7:88:be:
                    cb:63:99:7a:be:34:66:3f:d0:d5:4a:12:28:7b:a4:
                    c4:fb:a8:97:ed:c4:ea:d3:06:5e:cc:71:f6:25:bd:
                    2f:2f:c9:7e:fa:73:50:af:66:4a:58:db:e5:89:e4:
                    eb:fc:99:0c:76:7a:61:32:4e:d7:de:a5:34:87:31:
                    aa:42:04:53:43:0d:fd:fa:00:c5:4f:87:21:10:47:
                    a6:ec:49:fd:5e:81:40:86:22:22:63:4e:8e:78:a9:
                    9b:df:55:3f:33:72:c4:e9:36:e2:2e:62:f8:dc:e9:
                    83:f9:43:6d:3a:30:d5:fe:ef:e8:63:7a:23:b6:87:
                    47:ba:bb:e2:54:b7:48:a0:b7:f1:fd:01:dd:15:70:
                    29:25:25:23:68:c1:60:4a:6a:f8:a7:4e:d4:c9:77:
                    5b:03:11:21:33:77:ff:64:b7:f8:71:08:93:b3:6e:
                    eb:0e:9d:6f:ab:3e:e7:39:07:7b:88:d0:02:67:68:
                    68:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:18:EB:BF:70:83:60:A6:3D:A7:FB:16:34:38:CA:4E:C2:8F:6E:AF
            X509v3 Authority Key Identifier:
                keyid:AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/CB91083CA63511EA900DB923C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.200.0/22
                  116.206.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:8e:c0:d6:b1:08:84:b9:15:67:5c:4c:da:f5:a6:0a:39:2f:
         1d:b1:c2:15:c6:5b:c5:02:e6:70:b7:7d:c7:6b:da:cc:3d:27:
         54:87:ef:8b:41:02:67:62:00:72:69:f3:88:63:1b:f9:50:9e:
         2d:56:21:ad:b4:b0:ca:d6:e0:bb:6d:53:cd:0d:b9:71:aa:ab:
         b4:0e:74:2a:31:71:22:eb:3c:97:38:6e:f1:28:3d:bd:cd:5c:
         6b:4c:09:22:11:e4:55:52:80:34:af:67:78:34:8f:f2:0b:29:
         a7:06:d6:82:bf:84:27:08:06:fd:83:5a:38:2a:01:fa:5f:a2:
         b0:be:b4:df:b5:d0:55:21:49:0d:06:a9:6c:5a:28:0f:4c:29:
         17:23:d2:0b:c0:77:a5:4a:f4:56:98:cf:4f:a7:83:89:a4:a9:
         73:48:0d:6d:2c:72:c2:a4:9e:1b:a8:66:8a:a7:b2:32:4d:4a:
         b9:1e:2f:3b:38:62:9c:46:e3:cf:1e:c5:18:9f:af:71:d0:a9:
         9a:c0:42:c7:bf:ca:64:88:0f:d9:62:3f:f2:6e:48:1e:4c:40:
         e6:3c:6f:33:84:df:93:7d:23:fa:ac:14:a1:1b:87:d3:29:7f:
         c6:19:11:1f:86:93:b4:53:43:ee:a7:06:f1:01:03:a0:22:fd:
         9e:ee:61:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:31 2024 by rpki-client on console-ams.rpki-client.org