Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/246D53F049BC11EB98F78F66C4F9AE02.roa
File:                     246D53F049BC11EB98F78F66C4F9AE02.roa (raw, json)
Hash identifier:          xY1WqwDewRwzlD4qXf5hbGAS9KLjfg4UZ9/Wz9PDhEU=
Subject key identifier:   91:5E:45:94:26:54:EC:CE:C3:54:0F:04:04:FF:CD:2D:4B:B2:0B:CE
Certificate issuer:       /CN=A918C0AE/serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686
Certificate serial:       05E6
Authority key identifier: 3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/246D53F049BC11EB98F78F66C4F9AE02.roa
Signing time:             Wed 06 Dec 2023 23:31:24 +0000
ROA not before:           Wed 06 Dec 2023 23:31:24 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     141475
IP address blocks:        103.159.190.0/23 maxlen: 24
                          2001:df5:8480::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl
                          rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 23:20:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1510 (0x5e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C0AE/serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686
        Validity
            Not Before: Dec  6 23:31:24 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6571044b-e66d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:36:55:17:17:8d:63:70:95:27:6b:f3:43:b2:
                    17:f0:98:08:e1:17:d4:8a:bc:8b:89:31:ca:a4:4f:
                    61:bf:a8:c6:38:b8:f6:e2:5a:77:45:41:ae:f1:db:
                    6c:87:af:bd:f4:3b:c2:7b:42:49:46:aa:3b:89:84:
                    e6:81:3b:95:41:2d:4b:0f:39:a5:87:e6:ec:1a:60:
                    7e:3f:87:12:4d:59:a0:ff:32:e8:8d:18:49:ab:95:
                    64:23:c8:26:6f:69:60:64:cc:f6:1f:a9:6c:1b:bb:
                    fd:d0:7e:53:1a:7d:cb:7a:18:2c:ca:5f:8d:bf:10:
                    82:11:9b:c7:c4:25:8e:83:cd:91:e0:72:0e:0a:0c:
                    7c:80:8c:d7:46:79:69:6d:f6:54:66:fd:84:e0:45:
                    71:fe:fd:25:3b:9b:2f:45:7b:ad:f4:12:42:02:6a:
                    2f:4e:24:26:27:a1:69:7d:f5:a6:dc:71:b6:73:8e:
                    2c:21:e1:ca:7d:b4:61:c8:1c:ec:fc:61:51:5f:03:
                    8e:6e:fd:b2:d7:68:e2:c2:3d:f8:39:88:31:e9:ee:
                    c0:15:94:32:32:c2:0e:58:a5:82:ca:69:d9:13:cd:
                    42:38:ef:8a:b7:cd:8c:6f:06:d5:32:ec:3f:1b:3f:
                    bc:bf:7d:8f:79:33:67:1e:d8:c2:64:59:08:f0:34:
                    23:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5E:45:94:26:54:EC:CE:C3:54:0F:04:04:FF:CD:2D:4B:B2:0B:CE
            X509v3 Authority Key Identifier:
                keyid:3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/246D53F049BC11EB98F78F66C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.190.0/23
                IPv6:
                  2001:df5:8480::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:8a:4b:5d:88:91:f9:a1:99:02:c1:a6:e8:57:89:aa:84:9d:
         b1:d6:68:b8:7a:a0:fe:62:3d:e1:98:73:0e:36:c6:4c:57:11:
         a3:28:f7:54:78:08:7a:a0:44:5f:06:fc:49:05:e6:97:14:8f:
         f4:b4:2f:69:b5:38:58:6a:2a:4d:7f:32:be:0a:d4:f7:51:5d:
         b1:62:f0:60:76:85:99:47:2e:7d:34:77:b1:05:eb:a8:06:2f:
         11:50:46:55:63:61:0a:e0:e3:a1:06:d3:3d:f5:66:31:67:59:
         1d:74:23:2d:34:1b:3e:cd:35:84:db:2a:aa:88:32:de:c8:30:
         31:1f:56:2a:59:4f:5b:6e:ee:ca:85:a6:c7:cd:cd:ba:a1:89:
         cf:82:e5:b2:bb:d0:a0:16:40:a0:6b:62:da:c5:be:f8:b2:e5:
         f5:b6:3a:dc:16:90:12:19:91:85:06:81:3b:fe:fb:e8:18:99:
         25:88:1f:fa:7b:cd:d4:d3:25:f8:7e:6e:d1:be:c6:24:69:de:
         1a:f7:13:69:a5:0d:f5:8e:77:7f:5f:24:3b:56:6f:07:74:32:
         67:f4:d3:c9:88:7a:e8:fa:4b:ce:46:23:d3:17:b8:a5:b9:c7:
         cf:51:ea:27:2a:eb:29:b1:f9:74:73:b1:15:a1:e1:20:db:77:
         7f:37:a4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 00:53:21 2024 by rpki-client on console-ams.rpki-client.org