Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/C09BAC8E860011EABD37250EC4F9AE02.roa
File:                     C09BAC8E860011EABD37250EC4F9AE02.roa (raw, json)
Hash identifier:          uCKaTzHSq8roKOND3QIAWtaboT0I2xNDmaN9cosgyvs=
Subject key identifier:   6A:D8:FA:AF:25:BF:F7:E7:10:93:DE:F7:50:CC:0E:C6:AC:E5:19:C8
Certificate issuer:       /CN=A91C19F7/serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E
Certificate serial:       08EF
Authority key identifier: 4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/C09BAC8E860011EABD37250EC4F9AE02.roa
Signing time:             Sat 04 May 2024 21:59:52 +0000
ROA not before:           Sat 04 May 2024 21:59:51 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     140570
IP address blocks:        103.150.118.0/23 maxlen: 24
                          2001:df3:7580::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl
                          rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2287 (0x8ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C19F7/serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E
        Validity
            Not Before: May  4 21:59:51 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6636afd7-8b38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ce:2e:1c:2d:d9:89:e3:fb:62:bb:b4:76:c5:
                    ad:2c:f5:11:88:22:bb:a7:fd:57:a0:ae:02:da:a6:
                    77:23:ee:08:09:cb:9f:c4:33:87:c5:19:31:78:0b:
                    7e:c8:09:4e:f8:fb:db:e9:10:4f:6c:96:ea:46:37:
                    d0:ab:3d:0a:2f:05:18:1b:5a:f0:0d:c5:fc:a0:b5:
                    65:c6:e4:67:d6:94:53:3a:52:50:32:5a:bc:5f:80:
                    3b:1b:5a:e0:38:3f:24:df:46:dc:9d:56:06:52:ab:
                    39:00:92:59:0c:52:f0:fa:e7:3e:5b:29:ac:ec:8c:
                    ad:ea:79:c1:0e:b0:9b:64:77:20:8e:0a:bf:f1:31:
                    9f:2c:6c:da:69:72:a0:fe:b1:e3:a6:d8:cd:8f:a8:
                    a7:13:e0:6b:c8:fb:e6:ce:43:2d:69:6f:71:71:2d:
                    b9:60:49:9e:39:ac:7f:ba:3f:94:7b:72:81:30:fd:
                    c4:6a:7a:a7:a1:2a:ad:94:9b:9a:04:5d:1d:e5:26:
                    e7:6c:7c:9a:c5:e1:2b:9c:39:71:05:b6:d1:8e:ac:
                    b2:a5:9e:dd:f0:0c:4c:48:2a:bb:5c:12:a4:25:86:
                    da:28:bc:3c:7b:ae:bf:15:1f:99:fb:2e:a6:09:1e:
                    43:c1:14:a8:d5:12:e9:8f:65:f7:d4:5b:92:36:5e:
                    95:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D8:FA:AF:25:BF:F7:E7:10:93:DE:F7:50:CC:0E:C6:AC:E5:19:C8
            X509v3 Authority Key Identifier:
                keyid:4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/C09BAC8E860011EABD37250EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.118.0/23
                IPv6:
                  2001:df3:7580::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:f0:24:4d:f4:1b:19:92:cb:44:01:bd:31:4c:61:c2:00:e5:
         37:bc:bd:c3:48:84:82:96:56:c3:d1:14:ae:b7:fa:05:80:c3:
         58:68:73:90:81:f8:68:19:12:aa:e5:b9:b1:a3:67:32:ab:57:
         40:5a:56:57:af:b7:50:5a:3e:b7:68:4d:f8:e4:0e:c6:60:9b:
         d9:69:76:83:d0:97:c3:14:14:cd:6c:4c:b1:5f:fa:da:8a:6b:
         fa:69:d0:8c:de:7d:f6:99:3c:15:e7:a5:b0:20:0f:26:f7:73:
         7e:ac:35:4b:87:6c:24:94:05:e0:dd:a1:be:f4:41:ed:86:e2:
         c9:ec:34:77:cd:35:d7:37:d2:93:cd:ce:0e:82:24:39:84:6b:
         16:74:14:3d:9a:b7:87:6e:b3:a2:9b:29:06:b8:9f:af:f3:d5:
         ba:00:73:cb:a9:75:30:30:e7:ef:62:73:99:f7:e3:26:4b:3b:
         66:49:60:5b:c7:a9:b4:4c:53:ec:e2:96:b3:f3:af:1b:2a:0c:
         40:8a:44:ed:88:33:77:72:37:72:95:d2:53:ef:ae:d6:7b:a2:
         a8:5e:52:1e:34:13:6b:77:c6:ce:8d:16:b4:cd:fb:35:48:5c:
         55:a1:aa:65:82:fd:09:54:66:34:11:fe:80:95:28:1c:3b:1e:
         96:17:d2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:34:58 2024 by rpki-client on console-ams.rpki-client.org