Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/B247246862DA11EF8F038E37C4F9AE02.roa
File:                     B247246862DA11EF8F038E37C4F9AE02.roa (raw, json)
Hash identifier:          doc68Gz54moH6nLhWDfXOwdXES4SMkUeKQF6aEUTWQQ=
Subject key identifier:   58:3E:CC:3D:3F:1D:59:ED:7B:31:68:92:14:D9:17:C1:65:F3:65:1E
Certificate issuer:       /CN=A918A132/serialNumber=016569C3CF8E700932F14E482C56AA66BBAF2B61
Certificate serial:       54
Authority key identifier: 01:65:69:C3:CF:8E:70:09:32:F1:4E:48:2C:56:AA:66:BB:AF:2B:61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWVpw8-OcAky8U5ILFaqZruvK2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/B247246862DA11EF8F038E37C4F9AE02.roa
Signing time:             Sun 25 Aug 2024 12:08:10 +0000
ROA not before:           Sun 25 Aug 2024 12:08:10 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     140057
IP address blocks:        103.163.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/AWVpw8-OcAky8U5ILFaqZruvK2E.crl
                          rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/AWVpw8-OcAky8U5ILFaqZruvK2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWVpw8-OcAky8U5ILFaqZruvK2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 04:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A132/serialNumber=016569C3CF8E700932F14E482C56AA66BBAF2B61
        Validity
            Not Before: Aug 25 12:08:10 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=66cb1eaa-5d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ef:1a:2f:5b:13:97:f1:99:c4:b2:fe:54:4a:
                    46:82:fb:72:da:69:25:2d:70:49:33:08:89:9d:77:
                    b8:a3:c1:45:14:5d:cc:f6:15:ee:b6:b1:50:8e:c9:
                    51:43:40:8a:87:dd:8e:b6:f1:54:79:f7:ab:78:f8:
                    b2:88:1c:75:1d:ef:f5:02:2f:f6:6f:7c:9e:51:1d:
                    47:60:59:05:61:b4:05:1f:89:95:32:bd:a3:36:4e:
                    39:6e:6e:4c:5c:65:2e:24:02:6f:e3:68:97:a0:15:
                    66:3f:e5:11:71:6e:20:43:33:7c:ed:08:d4:03:af:
                    8e:71:9c:74:47:92:b2:ba:13:72:60:15:e8:d5:e9:
                    1d:2a:35:7e:fe:94:20:e3:21:9c:a1:8f:62:f8:a5:
                    a0:35:b9:ca:d1:6c:7b:ba:d9:e2:c7:df:96:2b:87:
                    ae:a6:3f:49:41:20:7a:8e:fb:8c:73:ec:d0:ea:ca:
                    9c:1b:f6:a0:f4:e0:ca:69:11:33:4a:a9:70:e8:ca:
                    61:d7:1c:c1:5e:bd:8b:d9:0e:db:c1:6b:b6:fc:19:
                    8b:ff:af:c4:f1:e5:77:a5:55:5c:75:cf:12:9d:90:
                    11:be:d2:e2:2d:13:ff:cd:6e:76:83:eb:d6:5c:cc:
                    b5:d6:37:2e:41:3d:55:fa:a4:df:1b:8d:32:75:e6:
                    48:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3E:CC:3D:3F:1D:59:ED:7B:31:68:92:14:D9:17:C1:65:F3:65:1E
            X509v3 Authority Key Identifier:
                keyid:01:65:69:C3:CF:8E:70:09:32:F1:4E:48:2C:56:AA:66:BB:AF:2B:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/AWVpw8-OcAky8U5ILFaqZruvK2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWVpw8-OcAky8U5ILFaqZruvK2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/B247246862DA11EF8F038E37C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:0d:f1:e1:36:8f:88:1a:9b:ab:48:9e:89:25:e7:7c:de:02:
         8d:79:ea:72:bd:23:4e:7d:f8:71:23:3b:e6:05:53:0b:33:9e:
         60:59:37:57:02:ab:dd:d1:df:a6:8d:1b:fa:79:f0:10:b2:b6:
         c0:6f:31:9e:99:aa:9d:bf:89:01:2f:6d:68:d2:9e:28:64:f2:
         e0:e7:1b:0a:7f:fa:ca:cc:32:be:93:d8:4f:31:5c:ec:70:9d:
         75:7d:74:ab:9b:da:57:db:59:4e:3a:21:4f:3f:a3:81:4a:81:
         d4:a7:70:00:71:ea:d8:b9:90:f9:b7:41:83:84:28:82:47:84:
         5f:78:36:a9:eb:e9:5e:f1:8b:17:92:66:67:45:09:ee:3f:76:
         c4:d9:2d:74:9a:3a:84:34:11:78:78:75:b9:a0:92:80:52:e5:
         1d:2a:0c:c5:10:87:44:74:6a:f8:04:de:c8:52:e2:4e:74:bc:
         f5:65:a0:94:4f:32:be:c6:5d:03:4b:6e:de:97:33:87:87:e3:
         9f:86:f7:77:13:69:98:8a:32:61:fd:4b:5e:0b:cc:14:2a:a1:
         31:80:68:a6:ab:9c:01:2a:f3:2b:1e:84:19:b9:09:94:40:08:
         5e:4d:79:c3:c1:f0:03:c0:3e:4e:75:7c:43:95:15:24:f0:6a:
         dc:48:8a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:08 2024 by rpki-client on console-ams.rpki-client.org