Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913BEF9/4E02D68C99D811ECAB6C5C6FC4F9AE02/97D0D31C312211EE99BC615CC4F9AE02.roa
File:                     97D0D31C312211EE99BC615CC4F9AE02.roa (raw, json)
Hash identifier:          19j9T3UauArRfohREtA36x0Ywj4Hu6p1y93I7oKQ3DM=
Subject key identifier:   0D:25:DC:1A:C7:DE:10:C6:F3:21:8D:42:21:59:12:B6:44:95:94:8C
Certificate issuer:       /CN=A913BEF9/serialNumber=0555D04D6AA7CD08907385B9EFAF7FECE6C35E18
Certificate serial:       02EB
Authority key identifier: 05:55:D0:4D:6A:A7:CD:08:90:73:85:B9:EF:AF:7F:EC:E6:C3:5E:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BVXQTWqnzQiQc4W5769_7ObDXhg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913BEF9/4E02D68C99D811ECAB6C5C6FC4F9AE02/97D0D31C312211EE99BC615CC4F9AE02.roa
Signing time:             Wed 01 May 2024 04:06:49 +0000
ROA not before:           Wed 01 May 2024 04:06:49 +0000
ROA not after:            Thu 29 Aug 2024 00:00:00 +0000
asID:                     151626
IP address blocks:        103.182.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913BEF9/4E02D68C99D811ECAB6C5C6FC4F9AE02/BVXQTWqnzQiQc4W5769_7ObDXhg.crl
                          rsync://rpki.apnic.net/member_repository/A913BEF9/4E02D68C99D811ECAB6C5C6FC4F9AE02/BVXQTWqnzQiQc4W5769_7ObDXhg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BVXQTWqnzQiQc4W5769_7ObDXhg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 04:09:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 747 (0x2eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913BEF9/serialNumber=0555D04D6AA7CD08907385B9EFAF7FECE6C35E18
        Validity
            Not Before: May  1 04:06:49 2024 GMT
            Not After : Aug 29 00:00:00 2024 GMT
        Subject: CN=6631bfd8-dfc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d4:c2:ba:53:ab:8e:38:44:80:93:e8:8e:50:
                    8a:2b:e2:06:ad:6f:bb:8e:10:b3:1d:83:d2:31:a6:
                    b5:e3:93:92:7b:f2:25:48:6e:e9:cc:a7:bb:49:16:
                    b0:8d:51:b6:7c:c0:de:0f:9c:78:2a:84:17:99:13:
                    02:b1:cd:15:4c:e7:aa:4d:04:5b:7a:96:a9:66:55:
                    52:23:b1:3c:74:fa:d2:54:2b:b2:fb:b1:ec:4c:fc:
                    ac:90:6c:16:d4:18:ce:d1:fe:b1:94:8a:8c:a0:b7:
                    73:aa:37:72:42:ba:37:f6:d6:34:f2:c8:86:08:f8:
                    88:fb:c7:7a:f1:d1:0e:10:17:bb:be:b0:6c:eb:31:
                    3c:d2:b1:35:c4:17:37:82:1b:97:71:30:fd:e9:50:
                    dc:bf:2e:68:64:10:92:0f:e2:de:e4:38:22:b3:38:
                    7a:5f:e9:25:4c:10:1b:ab:ee:66:1d:d5:27:b5:d6:
                    6b:35:c4:7c:06:0a:ac:1d:cf:a3:0e:84:7d:bd:26:
                    b7:ce:b5:9b:f3:2c:0c:fe:bd:68:8b:49:6d:f8:1b:
                    e5:5c:93:48:4b:bc:20:fc:22:65:5b:66:d6:33:e2:
                    71:78:eb:0d:51:18:08:8a:28:6a:a6:ea:ca:81:90:
                    2d:2b:f4:0d:56:fc:64:75:4a:67:d0:e4:b8:7e:ae:
                    6f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:25:DC:1A:C7:DE:10:C6:F3:21:8D:42:21:59:12:B6:44:95:94:8C
            X509v3 Authority Key Identifier:
                keyid:05:55:D0:4D:6A:A7:CD:08:90:73:85:B9:EF:AF:7F:EC:E6:C3:5E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913BEF9/4E02D68C99D811ECAB6C5C6FC4F9AE02/BVXQTWqnzQiQc4W5769_7ObDXhg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BVXQTWqnzQiQc4W5769_7ObDXhg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEF9/4E02D68C99D811ECAB6C5C6FC4F9AE02/97D0D31C312211EE99BC615CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:a2:5a:df:a6:96:16:50:4c:e8:78:f1:f8:70:2d:62:91:89:
         4f:b1:d7:d7:62:7c:79:4b:42:e2:22:e8:6f:af:8f:b1:c8:9c:
         e7:9f:f9:18:a9:c4:71:46:5c:72:19:f3:aa:a8:57:95:fb:10:
         67:50:d3:e5:9a:6e:65:b3:f2:da:59:5f:6f:f6:7a:4d:7d:3b:
         05:b5:9b:62:b6:a0:9d:53:07:63:b7:cb:d6:d0:ef:00:fc:d3:
         99:a0:ef:f8:ec:86:03:f7:5b:dd:8f:f6:77:85:37:51:09:4a:
         71:d2:60:05:d6:fb:15:1c:60:1b:cf:20:2d:19:5e:c2:38:64:
         bd:00:bf:97:d5:0c:69:1c:46:69:75:77:c0:bb:61:f7:65:54:
         5f:91:ee:8f:73:7e:a1:17:18:5b:09:f8:c8:01:cf:25:a3:e5:
         08:5f:62:43:dc:88:92:f4:11:49:36:e7:e5:49:57:56:c1:29:
         d6:2f:b7:51:99:60:c1:91:70:94:b6:ed:d8:00:6c:eb:51:01:
         82:a7:8e:41:cd:6c:0f:0b:61:e5:3d:1f:99:8b:b3:1f:10:e8:
         88:d0:4b:59:2d:72:c4:5f:ce:9b:3f:37:15:ce:bf:f8:3d:1e:
         dd:95:26:06:a5:4a:12:c5:1e:88:40:3e:7f:7c:b4:d7:a2:be:
         3d:ae:08:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:59:01 2024 by rpki-client on console-fra.rpki-client.org