Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/53D9F48C483911EC8AA7367DC4F9AE02.roa
File:                     53D9F48C483911EC8AA7367DC4F9AE02.roa (raw, json)
Hash identifier:          qSr6lj95A/mraI1SE7jPaKqVk8caHAftnBqBkJ269G4=
Subject key identifier:   37:D2:62:F6:5E:87:76:F7:80:5C:33:25:8B:38:D9:52:1D:30:6A:02
Certificate issuer:       /CN=A919968F/serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED
Certificate serial:       0369
Authority key identifier: 09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/53D9F48C483911EC8AA7367DC4F9AE02.roa
Signing time:             Sat 23 Dec 2023 02:14:07 +0000
ROA not before:           Sat 23 Dec 2023 02:14:07 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     6939
IP address blocks:        103.176.58.0/24 maxlen: 24
                          103.176.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl
                          rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 02:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 873 (0x369)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919968F/serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED
        Validity
            Not Before: Dec 23 02:14:07 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6586426f-f404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3a:52:c2:ea:63:79:4b:f0:5a:0e:c7:87:16:
                    5c:dc:20:7d:3b:2d:d9:49:4a:d7:b1:23:fd:73:8c:
                    42:5a:11:a9:a4:64:7c:7a:84:98:18:e7:39:c8:41:
                    6b:e9:e6:94:1c:1a:ef:70:49:c1:8e:da:be:9d:aa:
                    5b:6b:98:43:6b:27:be:66:82:68:7a:0b:6b:13:4b:
                    7a:f6:7e:58:0b:e3:3d:a2:e7:cb:9c:10:74:60:23:
                    f1:b5:1a:a3:a3:ee:ba:bf:e7:1d:e4:1b:d5:80:b1:
                    2d:61:98:d7:2b:dc:06:9d:8d:d4:0f:2e:a4:ca:cc:
                    30:04:a7:70:02:d9:87:51:51:f7:cd:54:95:ff:8e:
                    56:8d:aa:af:86:b3:2a:02:ef:53:05:a7:bc:ac:a7:
                    15:16:80:17:6c:ae:bd:ac:cd:88:72:8e:b2:ea:d9:
                    84:8f:e6:f7:bc:1c:8c:bc:1c:6d:25:51:90:94:9b:
                    d8:17:bb:56:a2:27:ee:66:11:4a:df:fa:6f:34:a4:
                    fe:41:92:16:ca:cb:4c:ed:3b:0e:3f:b6:ad:4a:6d:
                    44:f2:d9:70:e5:56:39:2c:56:cd:54:00:ee:d7:c9:
                    71:1c:33:f8:84:30:f3:af:20:9e:dc:4c:19:ab:20:
                    5c:2d:82:fd:54:1c:f7:43:52:30:35:0d:3a:1b:1f:
                    e3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D2:62:F6:5E:87:76:F7:80:5C:33:25:8B:38:D9:52:1D:30:6A:02
            X509v3 Authority Key Identifier:
                keyid:09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/53D9F48C483911EC8AA7367DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:db:dd:9f:ab:5c:3d:89:ac:74:d7:dd:d4:18:a4:3b:ee:8b:
         73:90:ed:b4:3c:4d:37:77:b6:65:cd:d2:60:b0:9f:8e:16:98:
         0b:8f:d2:0d:d5:45:33:da:d4:8a:69:29:8d:1c:7b:92:b6:10:
         10:df:eb:b3:5e:a5:ef:24:63:af:cb:d6:ee:87:47:c3:1a:68:
         22:d4:07:ec:5f:6c:95:d9:9e:4f:33:bc:d8:c4:d4:bf:b4:77:
         dd:e3:6b:5d:04:d4:5e:c5:26:2d:de:03:09:92:ef:c7:7a:68:
         46:16:95:84:c1:6d:4e:e8:cc:1e:8d:70:db:e4:11:fb:38:85:
         d0:05:f0:80:e3:b7:bb:1f:b7:0c:fb:e2:4a:bb:bd:4b:08:5f:
         74:a2:9d:fc:d2:10:a9:90:5e:7e:80:30:06:68:ed:05:47:34:
         a4:00:8b:65:8a:19:5c:48:da:76:1c:24:b1:0f:2a:4b:25:ed:
         b3:8b:4c:a4:7f:49:06:71:e9:e1:cb:e2:42:52:9a:60:48:a9:
         f8:53:88:a2:b9:df:b7:71:64:17:01:a7:92:8b:8d:60:b4:a5:
         8b:fc:13:c2:11:2f:26:5e:d6:5b:cb:4d:ec:ca:d4:3b:dd:9d:
         40:f8:39:7f:7b:23:13:79:9c:e9:c6:37:f1:57:2f:67:89:11:
         f5:46:6c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 03:22:00 2024 by rpki-client on console-ams.rpki-client.org