Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/86B5983C582111EC8035E069C4F9AE02.roa
File:                     86B5983C582111EC8035E069C4F9AE02.roa (raw, json)
Hash identifier:          XPaekCEMT317heGRbT99LDDrqQpikQu45RC6FRjR/2o=
Subject key identifier:   48:94:26:48:BE:BE:11:5F:9E:32:93:91:90:D5:EB:EF:53:9C:98:96
Certificate issuer:       /CN=A9181437/serialNumber=AF0BE0B24A119D3B3E93FD0CD3B3415A2C0D01B8
Certificate serial:       0340
Authority key identifier: AF:0B:E0:B2:4A:11:9D:3B:3E:93:FD:0C:D3:B3:41:5A:2C:0D:01:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwvgskoRnTs-k_0M07NBWiwNAbg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/86B5983C582111EC8035E069C4F9AE02.roa
Signing time:             Tue 03 Oct 2023 01:42:47 +0000
ROA not before:           Tue 03 Oct 2023 01:42:47 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     142645
IP address blocks:        103.171.176.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/rwvgskoRnTs-k_0M07NBWiwNAbg.crl
                          rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/rwvgskoRnTs-k_0M07NBWiwNAbg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwvgskoRnTs-k_0M07NBWiwNAbg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 02:39:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 832 (0x340)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181437/serialNumber=AF0BE0B24A119D3B3E93FD0CD3B3415A2C0D01B8
        Validity
            Not Before: Oct  3 01:42:47 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=651b7197-b588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ea:72:fe:e7:2c:f6:9f:8a:fc:81:68:08:72:
                    80:24:27:12:03:83:01:82:1f:f5:61:9f:78:ef:90:
                    b9:64:f8:0c:0d:1d:36:14:ed:d3:f5:af:e7:71:88:
                    ec:11:7c:cf:6d:ca:04:99:71:e4:dd:5c:29:55:bd:
                    e5:05:dc:f6:fc:91:43:f5:c3:40:10:87:d4:6f:4d:
                    91:6f:05:d1:67:75:c4:50:92:db:f0:3f:12:50:f4:
                    fa:4c:76:50:ef:66:1d:b4:72:b2:9d:00:40:94:81:
                    ea:71:25:bd:fb:bc:c1:a9:a0:c6:a9:5b:60:1a:40:
                    8c:ba:82:4f:e2:0d:ea:b1:5d:5a:50:6c:2c:a7:e8:
                    a9:40:36:85:63:52:ad:a6:bc:04:98:d5:a8:16:96:
                    60:34:0d:82:45:b6:95:aa:cc:fb:3a:5a:11:28:c4:
                    22:d9:cd:7d:2b:fb:95:00:6c:72:fb:61:8f:52:fe:
                    48:4f:0e:eb:9a:d9:8e:6a:d8:69:33:6b:36:08:56:
                    ad:d8:37:ff:b1:2a:30:33:e5:51:a5:00:39:0d:e2:
                    61:83:b1:5a:e1:d1:53:67:37:80:d0:6e:1a:3f:bd:
                    31:fe:32:fb:df:10:4f:fa:64:39:81:f7:38:fa:76:
                    14:5e:29:81:6f:bf:18:22:a1:35:ce:d9:60:8c:df:
                    14:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:94:26:48:BE:BE:11:5F:9E:32:93:91:90:D5:EB:EF:53:9C:98:96
            X509v3 Authority Key Identifier:
                keyid:AF:0B:E0:B2:4A:11:9D:3B:3E:93:FD:0C:D3:B3:41:5A:2C:0D:01:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/rwvgskoRnTs-k_0M07NBWiwNAbg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwvgskoRnTs-k_0M07NBWiwNAbg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/86B5983C582111EC8035E069C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d6:ca:85:12:86:e3:47:6a:cb:4a:25:f0:5a:06:6a:58:9c:17:
         04:4b:dd:50:24:77:10:00:8a:a9:b4:b3:5a:b8:0e:41:96:13:
         0d:d8:40:99:4d:21:88:37:f9:78:26:64:a1:45:d7:80:69:05:
         06:6c:2f:23:c5:d0:4e:ef:1c:10:26:0f:1b:e3:10:30:ca:f1:
         cb:de:8b:f7:ec:13:f9:29:01:59:54:72:eb:9b:cc:ec:54:0d:
         ba:bb:39:94:92:68:ef:9b:b6:b3:08:4b:5a:dc:38:0f:73:f3:
         d6:12:0e:bb:0c:c9:92:4d:2e:2a:38:f9:52:71:ab:bf:96:94:
         36:d1:d8:73:5b:02:78:87:c9:60:8d:73:a3:15:42:e9:1e:12:
         16:4d:69:81:cd:ac:00:d4:1c:4f:36:1c:16:ab:e5:43:64:51:
         1b:fb:c6:58:a7:e5:f4:43:c0:05:1c:18:a8:86:63:e9:6b:94:
         3b:0b:e4:69:b5:f9:f8:9d:c8:e1:3f:97:34:91:c5:7f:31:17:
         68:b6:77:0c:23:f7:89:b8:aa:06:09:89:98:c2:03:a3:50:45:
         bd:44:52:32:71:44:9e:7a:c7:e7:83:84:19:19:41:3f:57:3a:
         a7:c8:32:f5:b8:9e:d6:1d:27:dc:a3:e7:0a:79:b4:91:02:73:
         46:39:21:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:52:21 2024 by rpki-client on console-ams.rpki-client.org