Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/E1FC5A5E303311EA8796D584C4F9AE02.roa
File:                     E1FC5A5E303311EA8796D584C4F9AE02.roa (raw, json)
Hash identifier:          W550Vt7cxRSJxbOZsCIkWRdZVJbHyD8sS0xpTJCdOUg=
Subject key identifier:   57:0D:AB:34:14:88:03:FD:70:6C:F1:09:0B:9D:8C:6D:FF:8A:FB:89
Certificate issuer:       /CN=A91384FB/serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD
Certificate serial:       0A80
Authority key identifier: 27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/E1FC5A5E303311EA8796D584C4F9AE02.roa
Signing time:             Thu 22 Feb 2024 20:08:28 +0000
ROA not before:           Thu 22 Feb 2024 20:08:28 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        103.147.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl
                          rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 20:10:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2688 (0xa80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91384FB/serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD
        Validity
            Not Before: Feb 22 20:08:28 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65d7a9bc-4086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:86:3a:38:0a:1e:ce:cb:45:6d:3f:82:1f:cf:
                    ef:77:09:eb:7c:92:2c:5e:6f:28:a2:bc:b3:a4:9d:
                    9e:e6:75:c1:8d:45:fc:01:00:cd:36:9e:57:85:83:
                    c2:d3:94:58:83:b7:0d:9b:12:39:8f:c8:41:17:e4:
                    74:3f:8b:87:37:c2:b3:b4:b5:a5:99:41:b2:97:fa:
                    d6:77:57:5b:8c:54:2f:23:ea:d4:eb:59:85:30:d5:
                    ed:28:fc:62:73:2b:65:37:c6:bd:07:00:cf:1b:59:
                    45:4c:78:7a:ce:cb:22:84:58:ad:a5:f3:71:99:73:
                    05:e7:15:11:2a:de:7f:cd:95:82:fb:f8:a5:68:4c:
                    63:64:3f:bb:fd:76:2f:17:a1:6f:a9:fb:fd:b3:33:
                    69:56:9c:c4:c9:a2:20:2d:7b:bb:03:76:1c:46:ad:
                    c9:5b:a3:06:1a:74:2e:cb:e6:21:ae:4b:0d:6d:2d:
                    87:a6:0c:b8:0e:85:19:e5:2b:88:07:b3:ce:25:72:
                    05:88:1c:36:6d:d4:de:aa:b6:31:56:26:0e:2a:5f:
                    f0:71:96:a0:e5:a6:cc:88:43:e0:fb:d0:f7:cf:ef:
                    1b:dd:43:b1:79:bd:51:92:6f:45:af:fe:a7:96:ff:
                    6b:8e:0f:d6:2f:bb:2b:29:61:d9:ce:6f:55:7f:24:
                    39:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0D:AB:34:14:88:03:FD:70:6C:F1:09:0B:9D:8C:6D:FF:8A:FB:89
            X509v3 Authority Key Identifier:
                keyid:27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/E1FC5A5E303311EA8796D584C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:5c:90:ce:81:81:a4:fa:1c:85:da:44:81:21:86:f2:80:09:
         7e:70:aa:7d:c7:30:44:3e:69:88:b1:47:bd:7d:03:b0:e3:b9:
         26:d5:42:16:46:c4:56:d9:2f:91:43:fb:dc:e4:2a:ef:a0:89:
         24:a6:80:82:66:1e:61:cd:e0:15:4d:72:d4:d3:d6:46:31:1b:
         51:33:54:92:38:3b:ab:23:4b:66:6b:a8:10:79:06:3a:00:2d:
         6a:61:86:94:d4:77:d7:31:04:d8:24:11:11:dc:6f:bc:47:e8:
         9b:a5:d4:4b:07:b5:ca:d4:68:ee:19:8d:98:ff:89:9d:69:33:
         6b:26:65:76:a7:a6:b1:1a:37:5d:89:5d:ae:df:ba:46:93:d6:
         f4:48:9f:61:65:0b:e7:75:7c:b6:f6:3b:6e:31:04:40:09:75:
         8c:15:af:38:10:1a:a6:10:8b:e9:6b:d9:dc:4e:4a:ea:c3:69:
         d1:90:f4:d4:3a:5b:65:79:df:4c:56:b4:6b:ef:a9:95:3d:c0:
         00:1a:64:cf:c9:98:53:57:2d:b4:01:08:91:3f:a9:0d:73:66:
         84:f7:1e:bb:9f:64:c1:64:5b:30:a8:aa:2f:79:ae:0a:99:c8:
         c6:2d:b6:aa:8f:54:ed:eb:52:90:72:d7:d0:d2:d4:fe:4c:9f:
         6d:33:cd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 23:10:07 2024 by rpki-client on console-ams.rpki-client.org