Route Origin Authorization

$ cd rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/

$ rpki-client -vvf FCA6CE3221DE11EBA27D251CC4F9AE02.roa
File:                     FCA6CE3221DE11EBA27D251CC4F9AE02.roa (download)
Hash identifier:          d+1YJj3fnER92TEvsbEM/U/PoJFgk+GomRK/HsNa9do=
Subject key identifier:   F7:69:88:75:78:24:C5:1C:4B:1A:55:9D:08:0F:A7:C1:3B:3B:33:3E
Certificate issuer:       /CN=A91EF73C/serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7
Certificate serial:       0696
Authority key identifier: C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/FCA6CE3221DE11EBA27D251CC4F9AE02.roa
ROA valid until:          Aug 31 00:00:00 2023 GMT
asID:                     135386
IP address blocks:
    1: 103.151.216.0/23 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1686 (0x696)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF73C/serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7
        Validity
            Not Before: Jul 19 22:28:00 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=62d72ff0-6e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6c:26:a0:75:90:e4:0a:ba:2a:f3:15:5b:aa:
                    0a:3d:fa:99:52:25:09:eb:09:8b:1c:5b:eb:04:bb:
                    95:ed:a2:87:a3:13:4d:82:5c:44:e2:91:e6:b8:e5:
                    92:a3:3c:cc:05:ad:6f:ef:7d:b0:c2:55:4a:fb:95:
                    41:97:01:61:49:4a:ac:68:f3:49:ad:83:e5:73:c7:
                    d4:a0:a3:f3:19:92:d3:a2:c7:35:72:93:af:ab:a6:
                    00:2f:c1:cf:a6:a9:84:83:c8:b9:ec:d4:31:60:30:
                    34:45:74:06:de:8e:1d:26:43:21:13:36:66:c9:08:
                    7e:91:1e:48:8a:77:18:ea:63:7b:79:17:1f:02:c5:
                    c7:d2:48:c6:bc:b7:7c:41:3b:74:7a:18:b1:93:77:
                    be:4f:f8:23:99:ae:96:0a:6a:a2:e9:e5:b2:8a:f8:
                    18:9c:e3:04:d6:21:bb:54:8b:bb:32:46:36:67:36:
                    e8:aa:47:08:37:92:79:fb:e0:ce:ed:31:44:c0:0b:
                    49:66:62:8e:85:7d:22:54:f6:fb:8a:08:c8:6a:e4:
                    8e:ec:31:d3:31:c2:08:98:6f:6a:81:1e:87:ef:1e:
                    31:70:ba:1b:48:62:51:34:03:5c:6a:67:11:5c:f9:
                    bf:ee:11:35:3a:9d:ca:e9:6a:3b:88:57:99:3d:8c:
                    fc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F7:69:88:75:78:24:C5:1C:4B:1A:55:9D:08:0F:A7:C1:3B:3B:33:3E
            X509v3 Authority Key Identifier: 
                keyid:C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/FCA6CE3221DE11EBA27D251CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e3:06:bb:7b:72:6b:a7:ac:8f:9a:c2:92:ef:2a:33:43:45:a2:
         01:ff:05:6d:12:d0:7c:7e:11:82:25:82:66:77:0a:bf:d1:df:
         e4:0f:91:8b:f5:78:e0:56:7b:fe:8a:db:51:be:0b:90:1c:14:
         cf:21:ee:17:22:09:75:0c:34:d4:57:3f:c9:fa:d9:7c:bf:07:
         8f:6a:9c:85:aa:11:27:f2:1d:29:59:4d:c1:5d:4b:43:ce:1c:
         f2:1c:b3:0b:90:a5:1d:69:32:a2:e4:6d:fb:43:c8:99:f1:c0:
         6a:ac:f2:e5:6f:3e:77:3e:e5:3a:1d:2e:10:5d:d9:72:94:a7:
         79:e0:06:11:a7:ed:07:72:b2:2b:3f:ac:f5:03:93:19:b2:44:
         15:d2:d4:12:b8:8c:c9:36:0b:31:eb:d1:ae:ee:25:b8:7d:45:
         a3:2e:83:bd:6d:46:09:76:46:d6:e8:d6:33:81:45:e9:f4:a6:
         24:0a:56:50:17:f6:2d:7e:fc:36:65:76:00:65:ee:dd:b9:63:
         da:9b:88:4b:26:6f:df:b5:55:9a:13:b0:c6:f2:1d:1e:e4:c5:
         43:2c:de:f8:81:3b:47:5e:6e:84:46:65:13:4c:39:52:0b:72:
         5c:55:82:29:e8:af:26:9e:46:56:91:14:96:2a:88:f6:c8:66:
         9c:e8:86:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 3 19:12:46 2022 by rpki-client.