Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/B1CE8816650411EEBE8D4512C4F9AE02.roa
File:                     B1CE8816650411EEBE8D4512C4F9AE02.roa (raw, json)
Hash identifier:          vq3Qsq5FWypMfTGvqhBSyTeswX8b81oUzefM/xyfZH0=
Subject key identifier:   7C:46:73:06:A2:C4:AE:43:E3:79:A8:BB:22:A6:BD:ED:15:45:2A:FF
Certificate issuer:       /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Certificate serial:       0218
Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/B1CE8816650411EEBE8D4512C4F9AE02.roa
Signing time:             Wed 13 Dec 2023 16:19:43 +0000
ROA not before:           Wed 13 Dec 2023 16:19:43 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     18013
IP address blocks:        103.97.176.0/22 maxlen: 24
                          103.242.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
                          rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 536 (0x218)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
        Validity
            Not Before: Dec 13 16:19:43 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=6579d99f-7477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:16:92:c3:e8:71:7d:dc:4a:01:dd:1a:f6:92:
                    2d:85:09:c9:ed:2b:af:9f:c2:e4:04:61:f8:31:7d:
                    f3:4b:bc:cd:0b:6d:2b:30:28:23:17:05:78:9f:92:
                    4c:76:7b:a2:33:f1:78:92:65:3a:61:31:1b:3f:2e:
                    bf:53:4b:ae:b9:d3:87:c3:25:b1:be:46:7d:68:84:
                    33:47:2e:b0:98:0e:2d:4e:9e:ac:12:69:0a:6c:1c:
                    e1:64:c0:5c:e8:66:c8:eb:d8:3a:f6:f5:1a:14:bc:
                    f2:7f:76:5c:6b:48:bb:07:ce:a0:7e:2f:b2:68:78:
                    c5:51:11:a2:8a:04:ad:99:72:81:cc:08:9c:75:3f:
                    7a:b4:fa:65:e5:b0:ca:e8:01:43:37:c3:ee:12:ac:
                    74:4c:8b:49:e1:c2:bb:0c:37:7e:c6:7a:66:ef:20:
                    9a:03:c1:4a:20:27:c5:a1:62:69:d2:01:0c:92:d5:
                    15:af:b6:f5:c4:9e:a7:f5:a5:d6:70:49:2a:dd:c2:
                    a1:a8:f4:eb:01:1c:e7:fe:6a:b6:35:1b:64:47:29:
                    5a:89:d7:d9:64:eb:30:d6:fb:53:1f:46:f8:30:d0:
                    9f:e7:74:b9:af:09:ae:cb:11:5a:3c:d5:e4:19:08:
                    06:50:91:a2:59:86:12:fd:41:56:77:8f:ea:42:72:
                    89:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:46:73:06:A2:C4:AE:43:E3:79:A8:BB:22:A6:BD:ED:15:45:2A:FF
            X509v3 Authority Key Identifier:
                keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/B1CE8816650411EEBE8D4512C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.176.0/22
                  103.242.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:db:cf:c5:66:3c:b4:94:80:d8:87:93:93:1f:e5:44:b7:62:
         04:d7:f3:ec:8c:98:7f:4a:60:d1:b1:5d:15:36:7d:84:bd:26:
         be:b4:df:0c:a0:25:8b:04:5b:1e:e9:5c:35:d0:04:50:d3:17:
         e0:78:3b:dd:78:2d:f6:9f:a1:07:54:bc:20:91:a5:11:8a:7e:
         4b:79:98:84:35:de:8d:1b:60:0f:a8:7f:5b:5a:76:23:f1:b4:
         40:0e:27:48:53:70:ea:6b:2e:78:b6:f3:e7:22:84:6f:e9:32:
         f7:e8:aa:3d:25:65:74:65:bd:dd:10:33:65:67:a2:6d:ea:b3:
         cf:3a:9e:d6:41:f6:85:9e:d2:f3:d1:4f:72:97:09:ad:b6:c9:
         05:ea:dc:a4:70:e1:96:f7:2f:3a:11:48:7f:7a:09:74:87:6c:
         db:9c:e5:50:07:a6:aa:e5:cb:80:89:b9:fc:1c:a8:fb:68:79:
         91:5d:27:1a:ed:fe:be:cb:9c:06:6e:2e:db:8f:9c:55:05:68:
         72:32:72:d6:b7:ff:16:15:27:eb:f5:f8:60:d7:9a:39:21:a8:
         c3:64:8c:30:60:2b:2d:57:4c:8c:fd:87:1c:cd:98:af:0e:23:
         ea:9a:4a:07:67:68:3f:23:28:c4:bc:09:f5:94:6a:37:55:85:
         42:14:5d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 04:41:54 2024 by rpki-client on console-ams.rpki-client.org