Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/016E53362A7611EC82181F2EC4F9AE02.roa
File:                     016E53362A7611EC82181F2EC4F9AE02.roa (raw, json)
Hash identifier:          22M78a7CgqDXjmTndeph4/a877sCav3hTpq3xAqAn8M=
Subject key identifier:   BA:D1:09:5A:30:FF:EA:C2:A2:9F:61:BB:C7:EC:FB:14:D0:C3:A7:19
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6FA2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/016E53362A7611EC82181F2EC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:39:44 +0000
ROA not before:           Wed 10 May 2023 16:39:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     146871
IP address blocks:        103.173.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28578 (0x6fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:39:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc8cf-3a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f8:7c:de:a2:19:f2:d1:77:14:63:23:4c:d8:
                    f9:3c:37:38:a6:d1:b2:7e:85:cd:3e:3e:41:fe:fb:
                    a5:64:f6:1f:2d:a2:be:cf:7c:ab:a2:d5:5e:8e:2e:
                    71:fd:93:cf:ee:ea:95:c8:f6:18:2f:92:d9:19:c0:
                    38:69:62:ff:57:94:8b:b4:c4:15:1e:ee:57:0d:8f:
                    d0:18:5f:09:1f:fb:f2:f6:69:d2:dd:9b:06:8f:31:
                    08:e6:04:ed:cb:91:1e:16:c6:01:bf:a1:6d:98:db:
                    f1:c5:6e:fb:b8:c8:bc:2f:be:28:15:52:66:10:93:
                    ed:85:7a:d0:23:c4:ef:5a:c1:2e:61:48:d3:18:22:
                    39:d8:1f:fc:e9:5d:bd:7e:2b:56:17:a4:c9:49:b7:
                    68:0f:f2:5d:c5:5f:0b:c3:5c:b9:35:75:36:78:ef:
                    7b:83:6f:6f:a4:5b:ea:d4:a6:38:d8:62:24:87:8e:
                    34:7b:c3:19:44:76:f3:73:15:8c:2b:00:4d:d9:5d:
                    cf:78:fb:5e:e4:eb:93:ec:11:33:09:df:9f:ef:5f:
                    e9:65:68:fa:f3:43:1b:e7:aa:60:56:14:f0:cc:b4:
                    ed:1b:2c:a1:5e:26:0e:14:49:a6:df:6f:c8:d8:5a:
                    08:42:93:ff:02:4f:43:a4:da:67:81:2a:ec:19:9a:
                    a1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D1:09:5A:30:FF:EA:C2:A2:9F:61:BB:C7:EC:FB:14:D0:C3:A7:19
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/016E53362A7611EC82181F2EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:91:f6:8a:29:1f:10:f9:b1:ea:65:94:9c:06:05:bf:b1:b3:
         95:e6:b7:5b:c6:8f:a9:a9:5b:1f:dc:2d:f8:65:7d:bf:aa:40:
         01:c5:46:c0:3c:d4:8d:8a:f8:2b:aa:80:34:9f:23:64:20:9b:
         d8:59:69:0f:1d:81:36:93:c6:b2:62:a7:57:72:e7:c0:24:dd:
         c4:20:9d:38:79:e3:2e:79:78:3f:e5:67:08:1d:31:8e:79:52:
         13:20:79:f3:23:af:6f:5b:84:65:95:af:dc:8e:52:93:75:31:
         4e:01:a2:6f:0d:e4:c5:89:83:17:46:98:e5:f8:e4:97:fb:6e:
         3e:47:ad:91:43:88:25:d7:85:3a:43:4a:34:63:94:0e:2d:71:
         e1:95:dd:7d:c6:ad:64:b8:dd:96:86:9a:72:db:c7:83:c8:76:
         2a:3d:2c:c1:c6:7e:95:c3:43:12:a2:83:89:a0:cd:d8:35:f2:
         ac:f3:4c:80:ce:01:0d:5e:5f:52:39:34:95:c8:1e:ea:19:3d:
         e8:4c:d8:1c:2a:ec:5f:51:43:c7:e6:40:16:37:9f:dc:65:c1:
         94:02:7d:44:f2:02:17:ff:6b:20:e4:13:26:97:d2:4b:2d:05:
         ab:3f:f9:47:73:2c:7c:e7:38:8f:69:ac:7d:cd:c7:c2:5d:89:
         be:1c:a5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:25 2024 by rpki-client on console-ams.rpki-client.org