Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/A155911C4BCA11EEBC8C8B82C4F9AE02.roa
File:                     A155911C4BCA11EEBC8C8B82C4F9AE02.roa (raw, json)
Hash identifier:          JxKBFjyLkFcKUeUnxfqVxERJRU2rYWuYYc5hc1dcqKQ=
Subject key identifier:   83:22:05:64:33:6A:02:11:DA:B3:CB:37:48:13:9C:81:97:FD:FE:F5
Certificate issuer:       /CN=A917DD85/serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5
Certificate serial:       0B
Authority key identifier: 94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/A155911C4BCA11EEBC8C8B82C4F9AE02.roa
Signing time:             Tue 05 Sep 2023 09:00:16 +0000
ROA not before:           Tue 05 Sep 2023 09:00:16 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     150288
IP address blocks:        103.126.142.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl
                          rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 07:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DD85/serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5
        Validity
            Not Before: Sep  5 09:00:16 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=64f6ee1f-ffa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:61:00:0f:bc:8b:97:ce:b6:88:ac:59:38:3d:
                    bf:ec:94:b4:ae:25:9d:b9:8c:8b:2c:a1:7f:f7:ec:
                    50:ef:56:c6:08:e6:28:b2:d0:b4:a9:95:86:2d:35:
                    90:ba:a3:13:b5:11:ee:8b:4d:1b:a6:7f:b5:93:20:
                    7a:42:1c:9d:fd:b8:2f:85:fe:b6:18:d1:9c:80:31:
                    7b:ea:e6:61:68:ee:a2:ee:01:f0:4f:cf:56:eb:5f:
                    f7:e6:57:16:bc:b8:17:cb:fc:69:4e:44:a6:d9:1e:
                    b3:e2:a2:11:cf:e6:a2:d4:67:99:c8:a6:7f:08:98:
                    16:bd:e7:c7:01:df:2f:de:8b:d1:19:7b:79:48:d4:
                    cf:ca:13:0c:d9:d3:de:6e:75:74:59:8d:d3:1d:12:
                    85:7c:cc:a6:7e:28:de:0a:85:6e:9a:53:2a:42:2c:
                    06:3f:03:ae:93:2a:7f:ea:2f:eb:45:3e:d8:36:15:
                    3f:06:ec:46:d6:81:c0:2a:c8:f9:cc:c6:d6:77:34:
                    86:6d:ef:c7:5a:d3:fe:46:f4:4a:31:61:e6:17:4f:
                    67:64:07:c6:cd:fb:1d:98:c9:a3:18:2a:71:89:2e:
                    c5:22:fb:fe:15:80:03:ba:64:12:75:ac:e0:b5:7a:
                    a3:4d:9d:17:eb:30:44:9a:ec:3a:fd:47:5d:a2:1d:
                    f0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:22:05:64:33:6A:02:11:DA:B3:CB:37:48:13:9C:81:97:FD:FE:F5
            X509v3 Authority Key Identifier:
                keyid:94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/A155911C4BCA11EEBC8C8B82C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d8:4e:21:99:7a:ae:b2:6b:94:ef:99:f1:2c:01:38:93:10:6e:
         f8:62:d3:00:a9:d1:02:b6:c7:21:f8:9d:7e:ac:d0:b4:7d:d1:
         08:c7:73:01:6c:f8:ca:83:c0:fc:98:13:9c:a8:be:3b:73:fd:
         6b:2f:a3:7e:9e:4b:52:59:de:bd:56:dc:d8:69:87:cb:7f:d5:
         b8:3b:28:2c:37:94:df:da:78:5f:1a:58:85:87:93:e9:94:72:
         0c:d7:07:b2:e4:da:23:11:26:f4:b6:41:25:95:26:58:ca:d9:
         aa:5c:f0:b7:08:66:58:8d:ef:d1:be:12:97:e4:51:d5:92:4e:
         e3:4b:6e:1e:63:2e:f1:d7:a6:2c:c6:28:3d:d9:fd:93:28:e2:
         e4:40:14:a8:7e:1d:ab:13:d2:fe:32:62:7a:f6:f9:68:22:b7:
         23:d5:e0:d4:28:1d:8b:94:10:b1:a7:14:b7:7d:f8:29:58:85:
         04:f3:b8:ef:74:9b:be:5e:f5:a1:c8:51:22:07:e6:93:10:49:
         59:cd:ab:c4:6d:49:e2:dc:75:bd:e1:56:d0:d9:3d:60:7a:38:
         c3:00:7f:01:42:77:06:7e:0e:c8:00:68:71:e3:a5:61:59:46:
         8c:03:5e:fc:f1:6e:41:9f:2e:36:f7:87:15:9d:2e:29:b3:f8:
         c5:43:eb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 09:40:21 2024 by rpki-client on console-ams.rpki-client.org