Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/7203E112568C11EEA2DD9914C4F9AE02.roa
File:                     7203E112568C11EEA2DD9914C4F9AE02.roa (raw, json)
Hash identifier:          IfSW9ioeAo445UJXRu1BnE+a/WQJ1kswyRlF9uL7XZc=
Subject key identifier:   1B:D3:65:AB:7C:10:75:FB:0E:ED:BD:BB:5A:C9:C5:FE:EC:50:6B:34
Certificate issuer:       /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
Certificate serial:       40
Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/7203E112568C11EEA2DD9914C4F9AE02.roa
Signing time:             Tue 19 Sep 2023 01:32:50 +0000
ROA not before:           Tue 19 Sep 2023 01:32:50 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     209043
IP address blocks:        103.120.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl
                          rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 07:51:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
        Validity
            Not Before: Sep 19 01:32:50 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=6508fa42-5f86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:db:6e:01:6e:5a:f8:b5:50:34:ad:20:6e:5b:
                    88:08:4f:ed:9c:12:ef:d5:5f:0a:26:dc:a5:b9:75:
                    33:f3:32:38:02:ff:80:44:02:e3:88:55:d8:51:4a:
                    01:11:7f:c2:7f:7c:fa:2a:f2:9d:bd:51:8d:06:d1:
                    db:32:8e:54:44:92:73:fa:97:8b:cb:87:04:5a:f8:
                    bb:63:75:cf:71:56:e7:d7:c2:41:2a:46:53:eb:4c:
                    47:a1:88:23:4e:3d:05:f7:c9:74:49:1a:04:0d:c6:
                    df:53:c7:ba:66:4c:ca:37:d6:4a:35:c7:b1:89:83:
                    b2:41:69:5f:79:63:34:9a:d4:ba:b9:9e:a0:d5:ec:
                    7c:12:d5:e9:c6:df:11:ae:fb:07:a8:b2:46:d2:65:
                    ae:8d:ac:85:90:b2:68:3c:ec:e0:5b:fa:77:9f:9c:
                    9f:49:8e:d3:bd:09:1e:a8:0e:bf:dd:08:39:b3:24:
                    9e:d2:14:9f:2d:04:00:0a:4f:ee:b3:8f:79:86:55:
                    5c:57:51:c5:e6:1f:74:25:92:87:19:a8:4f:20:f3:
                    8f:35:93:71:c3:41:40:0e:fa:51:8b:b5:7a:3b:88:
                    d8:62:39:54:36:e2:ff:64:d6:49:04:a9:8f:4c:f6:
                    56:51:7c:31:a3:d8:03:7f:f1:73:be:7a:11:e1:bd:
                    57:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D3:65:AB:7C:10:75:FB:0E:ED:BD:BB:5A:C9:C5:FE:EC:50:6B:34
            X509v3 Authority Key Identifier:
                keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/7203E112568C11EEA2DD9914C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:29:2e:4c:5c:7e:5a:de:67:e5:ff:8c:09:a1:8f:39:37:7e:
         0a:f9:14:01:39:2e:f2:ae:04:17:30:75:3f:71:41:d0:67:ab:
         bf:54:fe:34:f4:44:bf:fe:3e:86:4c:02:86:8e:e9:f2:5e:5f:
         b3:66:8d:ee:9f:fb:5c:f8:8f:c6:2f:70:39:0b:89:10:a6:75:
         dc:41:b6:36:83:34:20:5b:bc:bd:e0:26:3c:d9:81:8c:cf:d0:
         9b:88:f4:64:1f:f9:2c:2b:57:3a:4d:dc:70:c7:b6:42:59:b1:
         7b:3a:7e:24:20:c4:48:2f:36:69:11:e4:b4:5e:13:9c:19:a0:
         9c:24:54:80:8c:74:89:3c:88:08:10:c8:35:1b:0e:c2:50:0b:
         bc:fe:a9:07:34:c4:6f:b6:14:5e:85:a8:f7:72:74:ea:38:7e:
         42:3a:e5:fd:1f:46:23:83:8f:28:51:34:17:2c:51:4a:3e:2f:
         31:9d:91:cd:88:1c:67:34:23:35:5b:f9:1a:77:3c:58:fb:e4:
         a4:73:4b:aa:fa:f7:93:6d:29:0d:da:75:6f:b0:69:37:b7:f1:
         9d:70:3e:3d:66:55:74:c2:8f:77:60:59:ed:59:4e:3b:9e:9d:
         a5:1b:8d:fc:90:f4:1a:8a:f1:ff:52:45:18:01:6f:65:54:01:
         07:b6:4c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:47:07 2024 by rpki-client on console-ams.rpki-client.org