Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/89ACB13E759511EB8124E879C4F9AE02.roa
File:                     89ACB13E759511EB8124E879C4F9AE02.roa (raw, json)
Hash identifier:          ksV36mIaw0YNrbxvtMh6svsz9lkH5T0nJBSt7hqp7Rg=
Subject key identifier:   87:04:9E:0A:A3:BE:11:DA:B1:7A:4A:62:11:AC:16:57:00:82:79:36
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6E85
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/89ACB13E759511EB8124E879C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:34:27 +0000
ROA not before:           Wed 10 May 2023 16:34:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     141302
IP address blocks:        103.160.170.0/24 maxlen: 24
                          103.163.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28293 (0x6e85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:34:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc792-b037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:62:86:bd:4c:0f:6f:c4:1c:30:9b:8f:09:ae:
                    ac:8f:56:73:ad:1e:c5:1b:98:3f:b1:b3:30:76:8c:
                    ba:26:fd:ea:4c:af:69:ed:7e:b1:19:69:ac:66:1e:
                    87:4b:99:20:b8:ce:b6:e8:b8:d6:23:43:b7:4e:3a:
                    39:08:35:0e:20:09:e4:c1:e2:ad:06:67:be:b2:6b:
                    bc:59:a4:ec:6f:b9:07:54:a4:19:82:97:ea:c4:f2:
                    6d:d7:62:bc:64:7a:d1:db:3e:13:38:2c:7a:fc:85:
                    79:55:14:df:1c:9b:4e:14:e9:b5:e2:1e:a2:0a:5d:
                    4c:43:6d:f1:af:76:22:90:cd:05:76:cf:03:93:1c:
                    fa:fc:6c:d2:a5:5f:e8:b0:6d:d7:81:57:43:a6:e8:
                    9e:a8:48:de:3a:fe:81:15:97:66:24:11:0b:db:3b:
                    40:3c:c0:37:6d:99:22:37:d0:c8:f7:20:f3:7f:83:
                    2f:13:98:b1:b1:90:0c:ab:4e:79:18:3a:5a:c8:e8:
                    25:e5:80:0f:e0:c2:34:03:30:d1:f5:b4:75:9e:ac:
                    10:1d:13:93:41:7e:8e:77:37:86:50:01:88:c8:ea:
                    83:3b:c8:7c:3d:4e:44:0c:cb:98:ad:87:0e:61:03:
                    d9:ef:df:85:b6:e8:4e:37:e6:f3:01:c2:e8:3f:f5:
                    86:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:04:9E:0A:A3:BE:11:DA:B1:7A:4A:62:11:AC:16:57:00:82:79:36
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/89ACB13E759511EB8124E879C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.170.0/24
                  103.163.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:26:31:2f:53:18:f6:7d:95:74:3b:e9:23:c6:29:91:1a:5b:
         c2:22:6e:3d:8a:d5:3a:87:69:d7:f2:45:40:5a:4b:f6:73:eb:
         32:61:75:d2:b2:43:32:3c:bf:8b:d2:e7:ba:d2:2d:40:7a:60:
         c8:6a:eb:f6:75:0b:44:02:d1:ea:13:a8:de:88:9b:40:68:c7:
         84:35:7d:10:65:d7:e6:e4:e3:c5:69:09:bc:17:dc:d0:a0:a5:
         23:e6:dc:b1:30:d3:56:02:b6:5a:64:e3:bc:21:dc:d4:ba:c2:
         21:9e:99:da:e9:38:e6:28:ab:06:b3:41:ba:65:ca:f4:4f:fe:
         d7:b1:ff:b8:11:4e:9b:ed:9e:12:de:20:de:a5:d2:ae:fc:9f:
         be:cc:d2:14:f1:d4:50:1a:90:f1:9b:76:87:5a:ec:32:7e:d2:
         28:0a:1f:87:1b:bb:c7:0c:c6:67:db:59:d1:cf:bf:6a:1a:6f:
         b9:66:45:91:76:9e:3d:1a:e3:0f:e0:c4:89:a7:22:67:46:d6:
         ec:92:7e:8d:ca:dc:92:9c:97:06:e7:ab:92:ee:7a:b0:a1:88:
         08:80:3f:3c:81:78:4e:57:af:8f:36:6b:8b:a5:e3:97:90:13:
         15:a7:33:d2:20:b6:29:57:6d:63:10:8a:1b:45:d1:a2:92:64:
         4e:55:66:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:38 2024 by rpki-client on console-ams.rpki-client.org