Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/A7493DA6145611ECAA3B5769C4F9AE02.roa
File:                     A7493DA6145611ECAA3B5769C4F9AE02.roa (raw, json)
Hash identifier:          vBMOEhbnWd+xBYIp5Uv0snS8ecDWCVpHFv4isRm25Is=
Subject key identifier:   55:EF:4D:76:8C:9C:9F:84:5F:FD:0F:4D:DC:3B:3A:0F:1C:BA:0D:6F
Certificate issuer:       /CN=A911D51C/serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D
Certificate serial:       03BF
Authority key identifier: 3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/A7493DA6145611ECAA3B5769C4F9AE02.roa
Signing time:             Mon 09 Oct 2023 01:13:21 +0000
ROA not before:           Mon 09 Oct 2023 01:13:21 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     147022
IP address blocks:        103.173.30.0/23 maxlen: 24
                          2001:df7:8b80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl
                          rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 02:59:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 959 (0x3bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D51C/serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D
        Validity
            Not Before: Oct  9 01:13:21 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=652353b0-a96f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cd:3c:17:72:e7:f8:84:bd:dd:ea:ca:59:13:
                    a4:f8:a7:18:b7:ae:f4:a9:c8:cb:12:e6:ca:bf:65:
                    30:2a:c7:3a:42:b2:73:52:7f:82:5b:a0:d0:37:5e:
                    50:7d:93:22:e1:4c:92:b4:d6:f6:ae:f3:f5:31:7b:
                    6a:c2:99:9e:3c:5c:8e:b0:7e:30:de:06:39:9c:fe:
                    26:a6:40:f3:28:78:e8:cb:95:97:15:d9:b6:90:14:
                    36:7e:dc:35:58:5a:a1:fe:98:20:7a:a1:89:13:7f:
                    42:85:13:b3:49:1a:36:c0:6e:fa:0c:4a:38:bc:8f:
                    65:4a:ac:a1:6a:8f:72:e1:10:23:a9:61:66:1d:69:
                    fd:8b:fa:c2:ae:4f:b1:ad:9b:c7:5f:9c:b2:c1:9f:
                    af:f5:f6:8a:0e:0f:92:9c:39:4c:58:4e:3a:fb:bc:
                    83:f9:f8:3e:1f:ce:f3:18:f3:18:72:37:80:41:81:
                    73:f0:a3:49:a3:a2:cb:9c:52:c5:08:59:e8:07:2a:
                    00:3e:eb:43:0c:5c:87:03:2d:18:a8:90:39:ba:dd:
                    ca:00:cb:ce:91:57:e6:9d:ee:c6:bb:56:2f:4b:3e:
                    06:48:ef:5b:7f:2e:80:9e:27:0b:c2:b1:37:f9:73:
                    1d:ec:21:f3:9d:60:40:73:fc:93:f0:98:9b:c8:4b:
                    e2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:EF:4D:76:8C:9C:9F:84:5F:FD:0F:4D:DC:3B:3A:0F:1C:BA:0D:6F
            X509v3 Authority Key Identifier:
                keyid:3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/A7493DA6145611ECAA3B5769C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.30.0/23
                IPv6:
                  2001:df7:8b80::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:22:87:71:2e:1f:0c:84:c5:5e:55:11:67:c2:79:ea:e9:98:
         20:90:bf:a8:2a:af:70:3e:64:4e:8d:40:28:22:25:4e:3e:53:
         ba:a4:46:e4:4a:8f:cb:b8:8a:5b:7c:3f:7b:87:d3:1d:ad:3a:
         23:be:db:b2:c5:2d:4e:98:0f:2d:ca:69:84:50:a7:4b:9c:f9:
         3e:cc:10:e9:17:12:b6:b1:a1:1f:27:e0:f7:a7:f9:27:20:1a:
         9a:17:af:8e:f1:d7:a2:ac:ce:9f:50:e4:e6:45:43:cb:f4:7d:
         59:96:cd:6b:6f:ab:f7:bc:21:64:76:6f:f8:aa:c1:c1:27:42:
         2e:40:d3:52:54:71:e3:d9:60:3a:ed:cc:8f:9d:58:eb:6c:1f:
         8c:57:fa:28:76:7e:55:c9:26:c7:b5:d1:04:89:0e:b6:cb:aa:
         f5:0c:8c:1c:4c:c5:16:f7:c5:3a:4a:84:24:64:08:f9:5b:2d:
         1b:8b:a1:e9:0f:2b:a9:a3:cf:52:41:a0:40:d9:35:25:c6:3d:
         7b:0f:5c:46:59:fa:00:68:e4:1a:ea:55:82:f2:12:d4:b2:30:
         19:c6:bb:96:a9:37:73:31:2e:a8:6f:68:b9:bf:a8:f9:16:38:
         49:5b:dc:01:22:10:01:fa:a4:d8:16:19:bb:bf:ca:d2:d6:73:
         93:bf:4c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:07:21 2024 by rpki-client on console-ams.rpki-client.org