Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/B15E8BECFF3211EEA8607454C4F9AE02.roa
File:                     B15E8BECFF3211EEA8607454C4F9AE02.roa (raw, json)
Hash identifier:          M9Q8RXEiuL/wyMNZhN9zbPG+N0QQluDkDpfmSIoYCRg=
Subject key identifier:   C2:7E:EA:31:FC:8F:76:51:43:23:51:2E:4D:DC:64:0E:FB:6F:C5:5E
Certificate issuer:       /CN=A91C53FD/serialNumber=21934198E8331061D275B8CFC79458D32FABD6C9
Certificate serial:       29
Authority key identifier: 21:93:41:98:E8:33:10:61:D2:75:B8:CF:C7:94:58:D3:2F:AB:D6:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZNBmOgzEGHSdbjPx5RY0y-r1sk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/B15E8BECFF3211EEA8607454C4F9AE02.roa
Signing time:             Wed 03 Jul 2024 07:47:54 +0000
ROA not before:           Wed 03 Jul 2024 07:47:54 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     137870
IP address blocks:        103.116.16.0/24 maxlen: 24
                          103.116.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.crl
                          rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZNBmOgzEGHSdbjPx5RY0y-r1sk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C53FD/serialNumber=21934198E8331061D275B8CFC79458D32FABD6C9
        Validity
            Not Before: Jul  3 07:47:54 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=6685022a-c7a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f8:c2:33:09:fa:87:6a:a6:49:54:06:5d:58:
                    34:9f:00:1a:65:d5:50:79:37:d2:fe:0b:16:38:7c:
                    83:ae:58:4e:99:cc:c2:65:09:09:03:29:75:8d:c9:
                    36:30:6c:3c:07:b0:3e:89:85:1e:b4:b5:be:5b:31:
                    65:45:ca:23:f8:43:e3:c6:88:9a:67:8e:8c:ea:5d:
                    23:14:95:d0:23:d2:65:c0:56:f1:47:67:2c:e0:93:
                    1b:f6:d6:86:94:b1:b3:9b:c7:c3:e0:69:b4:af:30:
                    af:5f:2d:e7:ed:0f:5d:6d:35:d4:9e:b6:2f:f4:da:
                    e2:26:da:a3:59:b9:91:e6:b0:99:02:4a:77:4c:84:
                    c9:88:03:f9:5a:41:bb:0e:ef:74:dc:c8:df:42:83:
                    b3:cf:b4:d6:ba:74:9c:03:a9:db:e9:ea:1a:8c:b7:
                    82:ef:f5:43:47:dd:d5:07:d1:1b:c9:6d:d7:83:6e:
                    fa:39:9e:00:51:63:d4:73:f2:50:3b:ee:75:9f:6b:
                    b6:c7:09:a5:57:1b:e2:ca:3c:81:64:b7:e0:7d:eb:
                    d0:84:c9:36:67:9e:11:c0:36:60:87:51:8a:d2:72:
                    97:40:18:23:24:ec:57:ea:19:0f:d7:c7:46:2a:46:
                    50:7f:49:e4:a0:4a:70:95:36:54:dd:13:cc:68:0c:
                    df:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7E:EA:31:FC:8F:76:51:43:23:51:2E:4D:DC:64:0E:FB:6F:C5:5E
            X509v3 Authority Key Identifier:
                keyid:21:93:41:98:E8:33:10:61:D2:75:B8:CF:C7:94:58:D3:2F:AB:D6:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZNBmOgzEGHSdbjPx5RY0y-r1sk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/B15E8BECFF3211EEA8607454C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:bf:f7:ef:b6:7c:88:e6:9b:3d:8e:3e:96:ae:70:0b:62:ed:
         51:70:3d:eb:c2:86:36:94:e3:ef:f8:6b:5a:17:33:ca:08:fc:
         38:35:dc:b7:b7:3b:98:22:b3:07:c4:d5:c8:69:20:d2:01:d4:
         65:e2:0c:14:9b:1d:12:3b:ab:0b:5d:65:b3:fa:73:72:f5:8d:
         02:80:a3:7b:fc:45:f7:3a:79:91:73:9e:d2:eb:ba:23:95:03:
         20:b6:12:d1:3a:fa:b7:50:41:70:23:9f:3b:cf:57:69:30:b1:
         1e:35:5c:a7:76:3e:82:7d:ea:d0:6a:72:3e:29:fd:d0:51:40:
         a2:69:d9:41:20:b6:6f:9e:36:1b:3c:e9:33:ea:82:bc:b0:b8:
         27:62:f2:68:d0:57:75:bd:78:88:fe:9e:71:16:2f:db:96:02:
         65:b0:6a:7d:31:09:34:78:1d:53:a1:6a:05:8a:b4:56:8f:9f:
         58:3f:65:17:56:02:8b:c2:b7:e9:e6:4a:9d:3b:23:d6:74:05:
         9b:82:cb:bf:91:aa:3e:de:9b:31:aa:25:d4:0f:e3:d7:90:1d:
         53:c0:f3:a3:dd:d4:b1:62:78:d1:63:d7:a5:ac:12:e3:1d:7f:
         1d:a4:e0:86:7d:27:45:fc:8d:17:12:16:ee:fa:8e:ff:e5:f8:
         a9:f5:e2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:22 2024 by rpki-client on console-ams.rpki-client.org