Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CDB51BDC739411EEB8BAE858C4F9AE02.roa
File:                     CDB51BDC739411EEB8BAE858C4F9AE02.roa (raw, json)
Hash identifier:          FVc+Sos0lXq1MiQFeOoSRSuVh0geTqtj+9pKzhJVR3Y=
Subject key identifier:   24:CC:E7:65:BD:31:15:E4:B7:55:C6:2E:BD:E1:C8:28:28:19:B1:9C
Certificate issuer:       /CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Certificate serial:       03
Authority key identifier: 62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CDB51BDC739411EEB8BAE858C4F9AE02.roa
Signing time:             Thu 26 Oct 2023 00:15:44 +0000
ROA not before:           Thu 26 Oct 2023 00:15:44 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     58511
IP address blocks:        103.22.144.0/22 maxlen: 22
                          2401:3900::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
                          rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 07:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
        Validity
            Not Before: Oct 26 00:15:44 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=6539afb0-14ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:41:80:e1:63:af:c7:b2:21:7b:f3:ea:0f:64:
                    49:ef:6a:40:45:bf:1c:4b:d0:c1:09:f0:bd:7b:5e:
                    07:65:28:e6:c6:d3:07:73:34:e0:7a:09:72:43:de:
                    73:54:27:51:8b:98:7c:0b:78:d7:69:e8:79:ec:45:
                    c0:73:cd:06:7b:7d:9f:13:1d:33:70:73:70:a1:29:
                    7b:da:e7:d8:ec:39:3d:aa:12:32:f5:b9:cb:cf:86:
                    b8:6d:4d:68:ec:af:56:10:3b:ae:03:31:36:38:34:
                    6f:91:d6:26:b6:08:8f:7d:79:13:96:b8:49:20:16:
                    06:43:79:df:7c:da:ec:3d:16:07:a8:f0:08:ac:32:
                    18:28:6d:a6:27:67:8a:d9:13:59:db:6e:d8:1b:ad:
                    05:df:9e:99:ac:89:7f:a4:87:e9:65:40:1c:c9:bc:
                    0d:80:c1:45:25:25:b4:94:19:35:e1:45:d6:85:7c:
                    4b:0c:14:f6:bc:31:a1:79:aa:46:41:f0:b4:8f:99:
                    86:9d:61:f6:1e:7c:ec:f1:0c:7f:b6:86:8d:24:bc:
                    09:90:f3:72:0b:d2:18:41:b5:82:dc:e2:aa:95:e5:
                    93:f1:25:18:1f:67:93:ea:76:e9:2f:e5:7d:50:55:
                    d9:d8:e2:05:52:d0:d7:d8:98:2e:0a:2c:a0:d7:6e:
                    2b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CC:E7:65:BD:31:15:E4:B7:55:C6:2E:BD:E1:C8:28:28:19:B1:9C
            X509v3 Authority Key Identifier:
                keyid:62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CDB51BDC739411EEB8BAE858C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.22.144.0/22
                IPv6:
                  2401:3900::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:5c:29:98:32:c1:ed:01:39:aa:f3:f9:77:bb:e3:c2:83:5c:
         41:17:06:0e:82:d2:5f:96:4a:05:50:e7:a5:40:80:0b:0b:e0:
         ad:78:e2:b3:a6:91:f5:7c:fa:95:57:e7:f4:66:0e:f0:89:6d:
         34:79:10:ed:39:2c:3c:ac:f4:b0:6c:a9:e4:9f:9d:5d:5e:45:
         ad:24:75:ea:ec:87:3e:c0:98:b6:86:fe:1e:d3:b7:6d:b0:bf:
         f8:13:5f:52:3e:aa:34:5e:95:e6:70:bf:be:6f:66:9e:07:81:
         a9:0f:c0:12:8e:da:5c:d9:93:f5:c7:33:6d:7d:28:97:6a:1c:
         aa:67:8e:7c:9e:ed:5b:63:14:f1:cc:27:db:57:04:66:ec:c3:
         74:d2:a9:23:e8:a2:7f:5a:a0:92:48:98:6d:99:c4:b5:02:6e:
         75:82:72:f8:43:b3:6d:97:cc:94:a3:df:c1:9b:6c:dd:d5:a1:
         a2:3a:39:20:80:82:c6:e1:ae:d1:b9:3d:e6:95:70:42:a8:fb:
         ba:ff:04:e0:88:6a:73:83:b6:e7:13:b5:86:53:9f:b9:10:c3:
         a4:a7:4d:33:d8:c5:06:b3:38:65:cb:89:57:30:ea:e0:02:2f:
         2c:c2:6d:b2:5f:e0:1a:65:8a:89:17:ec:47:e7:76:95:10:3d:
         68:62:fc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 08:01:35 2024 by rpki-client on console-ams.rpki-client.org