Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/6BA11A56807911EBA6F1A955C4F9AE02.roa
File:                     6BA11A56807911EBA6F1A955C4F9AE02.roa (raw, json)
Hash identifier:          iZtU7p2H+nbvolRW4eT5L4QU3hEP3JYUgVmrgZqLQNM=
Subject key identifier:   18:56:3F:9C:D4:17:F7:59:C5:44:CF:74:2F:E1:D1:C6:24:51:60:7C
Certificate issuer:       /CN=A91E7222/serialNumber=11B44556B79627853F4031ED6DD57284056EFF53
Certificate serial:       0553
Authority key identifier: 11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/6BA11A56807911EBA6F1A955C4F9AE02.roa
Signing time:             Sun 03 Dec 2023 00:12:27 +0000
ROA not before:           Sun 03 Dec 2023 00:12:27 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     133161
IP address blocks:        103.253.118.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl
                          rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 00:22:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1363 (0x553)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7222/serialNumber=11B44556B79627853F4031ED6DD57284056EFF53
        Validity
            Not Before: Dec  3 00:12:27 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=656bc7eb-c22d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fa:fb:75:df:ee:2a:3b:17:34:43:a3:d8:e5:
                    4b:8c:d9:a3:b1:af:16:4f:d8:39:68:74:01:33:7a:
                    c9:2e:30:ac:0e:99:b0:99:5d:62:2f:d5:4c:6a:27:
                    4b:4d:ab:8d:13:86:8c:d0:88:90:33:85:23:f4:86:
                    dd:df:15:c8:77:24:39:ef:b4:f6:e5:28:cf:36:86:
                    42:3e:c1:54:fb:7a:d6:26:38:d2:e1:db:29:e5:42:
                    1c:5e:04:1d:cb:b6:14:91:8b:b9:ce:ca:cc:21:75:
                    f9:aa:60:9f:6d:2f:00:9c:39:c8:b4:f8:be:51:fa:
                    c7:06:03:6c:26:0c:e6:fb:43:2f:84:05:eb:14:56:
                    2b:8b:0d:6f:1f:67:c1:8a:a0:1d:0b:5c:67:06:4b:
                    f9:e2:f9:e4:9f:f4:51:a6:d4:a3:1e:f9:f9:d1:06:
                    84:d3:84:39:45:92:7a:eb:25:74:41:1b:ba:a5:d5:
                    8e:06:2e:2f:7b:cf:f2:63:a7:1b:8b:45:0a:f4:98:
                    12:a6:1b:e1:dd:0a:c1:fc:df:12:ef:b3:18:5b:0a:
                    c4:6d:e4:68:81:d9:66:fa:9c:e0:8d:b1:eb:67:4c:
                    15:c2:06:14:d4:f8:dd:60:32:c3:d7:a3:eb:b4:98:
                    07:1d:40:78:f7:63:d6:99:c3:c7:5b:7c:49:f4:75:
                    41:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:56:3F:9C:D4:17:F7:59:C5:44:CF:74:2F:E1:D1:C6:24:51:60:7C
            X509v3 Authority Key Identifier:
                keyid:11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/6BA11A56807911EBA6F1A955C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.253.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:ba:f1:95:3a:36:93:0a:10:b6:00:0a:04:8b:1f:c6:fe:55:
         cf:9b:14:b0:12:e9:5a:ee:81:c5:61:bf:c4:88:08:97:10:46:
         a1:f1:56:6b:f7:c6:cd:78:7f:41:97:eb:32:0a:12:78:56:82:
         0d:6a:28:d7:62:c6:66:c3:45:9d:a1:da:bb:04:8f:e9:f7:03:
         43:fd:13:88:fa:88:84:09:5c:d2:a6:cb:5b:86:b6:d2:fa:3d:
         55:93:ba:84:a5:b8:3d:0c:7d:0c:94:2d:ac:77:a8:7f:c3:56:
         ab:f2:30:a8:2c:a4:12:9a:97:32:17:6b:49:45:e6:64:ee:cf:
         24:0a:75:cb:06:cf:08:74:7f:57:7a:25:44:b5:61:57:0b:4c:
         23:cb:48:1f:9c:5b:3a:bb:79:d5:a6:78:ae:03:68:42:f1:10:
         15:8b:e0:dd:c0:46:85:78:59:d4:28:02:ea:c3:de:16:13:df:
         e5:04:47:9b:2f:6c:dd:ca:d4:b1:8b:af:8f:7c:9e:78:87:0b:
         64:b5:01:56:d2:c3:2c:72:41:18:0b:5c:e1:a7:b0:4a:36:0e:
         c3:b3:77:c8:ea:5e:22:11:46:ee:57:d7:a2:eb:29:a9:c4:c2:
         cd:3c:5f:06:f5:5f:c3:ee:4b:6c:42:ca:14:88:40:fb:5e:83:
         b3:04:70:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 02:01:05 2024 by rpki-client on console-ams.rpki-client.org