Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/038C732E874611EB83B41D39C4F9AE02.roa
File:                     038C732E874611EB83B41D39C4F9AE02.roa (raw, json)
Hash identifier:          Lcu+kV+oiFNO8o5DUiWJ1nnjdCvMx3S981oDbealKG0=
Subject key identifier:   50:2B:64:B5:9E:DA:7F:06:99:53:1F:39:29:0C:79:20:75:37:98:15
Certificate issuer:       /CN=A9113B73/serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B
Certificate serial:       05C8
Authority key identifier: 42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/038C732E874611EB83B41D39C4F9AE02.roa
Signing time:             Thu 01 Jun 2023 01:17:40 +0000
ROA not before:           Thu 01 Jun 2023 01:17:40 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     135351
IP address blocks:        103.214.208.0/22 maxlen: 24
                          144.48.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl
                          rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 23:59:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1480 (0x5c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113B73/serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B
        Validity
            Not Before: Jun  1 01:17:40 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6477f1b3-c5d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c7:8c:01:62:95:0e:7e:82:6e:81:a3:4b:3e:
                    5d:3a:ce:30:6a:e7:b9:42:f2:d1:b1:26:5e:a7:3a:
                    a8:19:1c:82:c2:de:87:90:89:fb:8a:15:67:9c:f1:
                    0d:ef:00:c3:23:fc:39:6d:45:a6:54:91:ea:a6:cc:
                    98:63:34:41:7e:52:e5:59:04:71:b1:20:49:35:e8:
                    c1:c1:30:0d:83:c9:06:27:75:50:5f:f4:5f:69:cd:
                    98:7e:57:00:02:00:9d:e6:dc:3e:80:ad:40:06:dd:
                    5c:98:20:1d:3d:a9:ad:06:72:f9:5c:5a:a3:21:c6:
                    6a:74:58:ef:a9:53:8b:68:23:ad:6f:01:a7:16:01:
                    03:eb:46:50:7e:b4:81:4a:f5:78:21:16:f7:bd:3e:
                    a3:13:68:a9:34:45:8c:b6:22:37:1c:5a:de:5b:5a:
                    93:8b:12:eb:d7:c9:eb:b4:60:7d:39:b6:ab:2b:c1:
                    1a:04:18:79:92:33:b9:4d:65:7c:7a:8f:20:f8:b4:
                    92:9e:04:ea:05:5f:80:04:50:24:a1:38:73:69:00:
                    50:70:82:bd:fc:30:02:5c:3c:81:f6:7d:33:75:28:
                    82:0d:28:4e:81:b5:53:75:73:0d:43:4e:31:60:9a:
                    27:e6:da:75:b6:9f:02:17:fb:8a:ba:fc:6e:49:28:
                    e1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2B:64:B5:9E:DA:7F:06:99:53:1F:39:29:0C:79:20:75:37:98:15
            X509v3 Authority Key Identifier:
                keyid:42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/038C732E874611EB83B41D39C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.208.0/22
                  144.48.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:69:b5:43:25:42:38:76:02:c8:7d:63:81:b5:fa:6b:9f:7e:
         4d:72:15:79:dd:60:7d:55:83:e0:70:15:42:23:d5:b1:f2:33:
         8f:0d:72:20:a5:64:58:b3:82:5f:fa:0c:5a:d3:85:1c:e6:b4:
         ef:ba:bc:f7:e2:d0:8d:65:d9:db:80:a8:f0:66:96:11:c5:eb:
         df:36:79:ac:9b:1b:f2:59:9a:a6:df:eb:67:27:53:4c:4b:5d:
         26:7f:e9:a8:b1:29:5e:41:64:7b:ea:42:72:65:cf:b5:52:92:
         82:b8:f1:47:81:04:d8:01:e7:26:96:2c:44:14:b0:3e:05:95:
         c7:72:74:1c:f7:d7:91:cd:10:dd:95:97:08:52:d3:57:27:52:
         7e:13:25:a8:0b:25:86:64:0a:a2:b0:ee:83:f1:78:80:f4:44:
         77:ad:e6:ec:bd:85:90:3a:2d:9c:08:a4:f8:8c:19:62:2f:43:
         4e:9f:69:a8:d7:31:25:a0:03:7f:a1:58:08:eb:1d:de:62:a0:
         7d:0e:e5:2b:c8:35:98:6f:3a:70:39:e9:57:18:19:15:c9:67:
         3c:66:2b:b6:30:91:77:83:2b:ea:95:58:c4:8e:57:0e:71:2e:
         f2:0a:40:85:ed:06:a1:5b:e0:d5:b2:5b:72:02:e9:5f:5c:57:
         5e:61:32:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 03:18:08 2024 by rpki-client on console-ams.rpki-client.org