Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/AC623530A86211ED9ED67945C4F9AE02.roa
File:                     AC623530A86211ED9ED67945C4F9AE02.roa (raw, json)
Hash identifier:          2Op07hi0gck3bTcEY5wlvO1s8jP0w84WuRoBbdBbkUY=
Subject key identifier:   CF:B4:11:A6:CB:4D:B8:A9:CC:3F:84:99:61:8D:27:D7:AE:90:A2:15
Certificate issuer:       /CN=A912D20C/serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2
Certificate serial:       B2
Authority key identifier: 33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/AC623530A86211ED9ED67945C4F9AE02.roa
Signing time:             Mon 15 Jan 2024 04:55:10 +0000
ROA not before:           Mon 15 Jan 2024 04:55:10 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     150753
IP address blocks:        103.67.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl
                          rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 05:36:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D20C/serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2
        Validity
            Not Before: Jan 15 04:55:10 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65a4baad-df25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ca:38:ee:9a:d4:4f:99:37:6d:0b:4a:b4:5f:
                    5d:97:59:fd:ea:2f:e0:e5:42:a1:2b:4f:06:3f:61:
                    32:32:4c:65:d1:bd:ee:87:fe:7c:60:e1:8f:b5:ed:
                    7e:d7:6f:58:bf:64:a5:77:9c:04:71:8d:79:09:ac:
                    45:28:0b:96:bf:32:ae:9c:e1:61:a5:ff:73:53:d5:
                    f8:57:07:e6:cd:2b:35:98:dc:b9:39:8d:f6:55:08:
                    06:c9:cc:2b:c7:ec:5d:dc:d8:a7:78:1b:68:00:f5:
                    0f:8b:6c:06:33:f1:3b:fc:1b:63:38:a7:51:35:e4:
                    b6:9e:6e:af:79:0f:41:d6:3c:c0:25:8c:b3:5b:38:
                    d3:f1:ec:12:14:b4:ae:41:8e:17:0a:da:52:9b:b6:
                    a6:8c:2e:7f:76:fb:66:6e:9d:e6:1c:f6:2b:0a:ad:
                    9c:d7:7d:b7:85:55:86:17:6d:3e:1e:95:26:af:7a:
                    43:87:63:7a:72:7a:2d:ad:1e:96:27:7f:c2:29:16:
                    88:b3:38:5b:d0:a0:3d:b4:16:13:d2:f8:46:af:7b:
                    4a:06:1a:97:7a:61:7c:0d:92:ec:0c:6b:fb:f6:aa:
                    ad:b9:ac:6f:5e:3b:bd:38:4e:58:e9:e5:e6:3d:d8:
                    54:f1:ee:8f:ba:57:83:af:d5:35:93:8d:cf:32:46:
                    63:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B4:11:A6:CB:4D:B8:A9:CC:3F:84:99:61:8D:27:D7:AE:90:A2:15
            X509v3 Authority Key Identifier:
                keyid:33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/AC623530A86211ED9ED67945C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:de:56:0d:56:f1:88:13:d6:26:fb:04:c8:e1:a4:df:e9:71:
         6a:f0:bf:d7:89:2e:99:7b:37:e6:5a:87:75:25:33:c3:61:0d:
         2e:94:f1:9e:1f:79:90:63:b1:6e:fc:a0:85:b1:df:69:3c:12:
         fb:cb:e5:87:b0:79:8c:dd:88:fa:a9:4c:d4:09:1d:b1:37:52:
         29:70:2d:88:48:20:79:cb:91:ed:ca:8e:2b:6d:32:7a:14:3a:
         70:e9:01:68:30:45:f6:ad:7e:df:f8:b3:d4:09:ee:6f:f2:d1:
         5b:62:ee:70:1f:4a:c8:d5:7c:39:6f:d5:b7:51:2d:bb:99:59:
         ed:c8:cb:a9:ce:e2:8e:9d:cc:fd:de:6a:35:e8:fc:c8:62:0c:
         ad:ed:95:53:11:09:6a:df:a3:f9:d3:ad:05:6f:52:b3:40:a4:
         fb:d2:bc:eb:e8:e9:fb:37:05:2a:77:3c:e7:8d:bf:6f:34:89:
         52:e9:ad:27:53:4b:fb:2d:e4:69:53:d6:4d:f0:ef:4c:dd:d1:
         19:9f:4b:b0:ea:83:f9:48:cd:ed:97:d8:0f:8a:41:c4:54:cd:
         3a:19:32:cb:6f:93:79:9e:d0:4e:a3:21:44:3d:f7:dd:ea:bd:
         d3:ff:03:9b:5d:16:38:87:5f:c9:c3:d5:a9:b2:29:cd:06:d3:
         91:80:3d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 08:01:36 2024 by rpki-client on console-ams.rpki-client.org