Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/7236C4D8513211EEA8D81765C4F9AE02.roa
File:                     7236C4D8513211EEA8D81765C4F9AE02.roa (raw, json)
Hash identifier:          Q8NxuOuKJ+veMKJky9ZNwKElU9d3kEf3ESfKXVOaTxg=
Subject key identifier:   DA:D5:88:F0:D0:D3:9B:76:CC:AF:B1:AC:3E:4E:58:15:E3:67:57:89
Certificate issuer:       /CN=A913C04E/serialNumber=AADCDB89E54B677C410463799F9586815C40FA4B
Certificate serial:       0F
Authority key identifier: AA:DC:DB:89:E5:4B:67:7C:41:04:63:79:9F:95:86:81:5C:40:FA:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/7236C4D8513211EEA8D81765C4F9AE02.roa
Signing time:             Sun 01 Oct 2023 06:06:22 +0000
ROA not before:           Sun 01 Oct 2023 06:06:22 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     141343
IP address blocks:        103.157.66.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl
                          rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 07:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C04E/serialNumber=AADCDB89E54B677C410463799F9586815C40FA4B
        Validity
            Not Before: Oct  1 06:06:22 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65190c5d-0da7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e1:33:4f:1c:02:79:6e:9b:35:cf:df:92:a4:
                    fd:43:8d:2d:32:de:16:8d:f1:41:09:fe:a2:bc:87:
                    64:06:a6:dd:1f:cf:58:a0:fd:f0:f8:0f:36:43:cd:
                    a5:fe:09:7d:f5:47:81:18:3b:57:42:7b:bf:0c:e8:
                    c1:d4:62:f2:ae:9e:5f:92:a7:2e:58:d8:99:5d:cf:
                    ee:50:c9:9b:d1:5c:6a:3b:39:40:7e:83:0d:a0:4d:
                    6a:92:56:3c:20:81:fa:0f:03:9c:93:00:c4:f7:6f:
                    66:8b:ac:d8:3e:d4:84:9d:96:25:42:53:f0:00:9f:
                    56:8e:8c:9f:f8:1b:54:82:fd:5e:9f:60:1d:ce:0a:
                    dc:0f:a1:c3:71:86:5b:ac:02:a1:b6:0a:04:9a:dd:
                    05:1a:3a:6f:4e:1c:45:b5:dc:87:dc:12:d8:d7:0f:
                    12:61:1f:33:b3:96:3e:08:15:22:d6:14:97:69:95:
                    27:b9:d3:24:a8:34:6d:3f:e0:ad:29:6f:07:ab:46:
                    71:66:5e:72:34:31:83:78:62:be:09:1e:a6:bb:b1:
                    29:65:0c:be:d1:3a:2f:19:a2:53:74:66:09:58:d8:
                    29:75:35:6f:6e:54:62:b9:b8:1e:9d:f5:28:a4:5f:
                    f5:dd:a1:10:b4:13:d0:81:13:64:1f:08:81:56:46:
                    ce:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D5:88:F0:D0:D3:9B:76:CC:AF:B1:AC:3E:4E:58:15:E3:67:57:89
            X509v3 Authority Key Identifier:
                keyid:AA:DC:DB:89:E5:4B:67:7C:41:04:63:79:9F:95:86:81:5C:40:FA:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/7236C4D8513211EEA8D81765C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:d6:e6:a6:bd:5a:d4:4e:93:0a:60:6a:56:a1:1e:be:9e:d5:
         0c:61:cd:3e:ec:07:b6:5b:41:a5:b3:08:52:7d:c5:b5:d8:f3:
         ce:05:35:3e:2b:7e:e9:3b:a3:4d:be:ae:59:d5:ff:5f:8b:e2:
         16:8d:b5:4c:be:7f:95:f1:07:cf:a8:45:04:0a:3f:f8:91:b0:
         a6:53:de:27:69:81:2a:c3:f9:ca:f2:75:00:e0:c9:7a:16:80:
         31:64:9a:8c:bb:b6:da:11:56:e7:b6:03:31:4b:07:87:77:a7:
         ed:9a:1c:a6:88:7e:e7:46:87:f4:e8:f7:fd:7b:3c:a1:2a:66:
         c8:0c:ad:20:22:a0:04:43:59:42:d0:dd:1e:af:23:cd:74:ed:
         18:8b:91:50:3f:f2:d5:c0:45:ff:a3:2b:a6:78:c0:e2:a4:94:
         84:a5:7f:2a:68:ae:69:2d:f6:c3:2d:a9:1d:af:d2:a3:79:83:
         e2:9d:34:00:e1:dc:b2:81:0d:c4:79:1c:d1:62:6d:f9:be:e0:
         cb:85:a5:87:66:76:6c:fa:70:8f:52:2b:3d:48:3f:a7:3b:a8:
         74:82:93:be:22:96:08:bf:5a:4c:14:39:a1:cf:e3:6c:91:4b:
         b4:1e:6f:67:bf:cb:33:e7:34:f5:33:6c:80:7e:6d:16:be:20:
         22:b6:7c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:29 2024 by rpki-client on console-fra.rpki-client.org