Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/C21DA992E83B11EBB3231D5EC4F9AE02.roa
File:                     C21DA992E83B11EBB3231D5EC4F9AE02.roa (raw, json)
Hash identifier:          py2hU/JLNVXJOLcikkxI++3yZ7lCPoif0ARBrnq9Gqc=
Subject key identifier:   EC:89:E8:64:70:27:69:24:23:4F:17:0B:4C:F9:27:F2:90:56:9E:EC
Certificate issuer:       /CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
Certificate serial:       0737
Authority key identifier: D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/C21DA992E83B11EBB3231D5EC4F9AE02.roa
Signing time:             Sun 02 Jul 2023 21:27:40 +0000
ROA not before:           Sun 02 Jul 2023 21:27:40 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     135794
IP address blocks:        45.249.55.0/24 maxlen: 24
                          103.16.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl
                          rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 22:09:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1847 (0x737)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
        Validity
            Not Before: Jul  2 21:27:40 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64a1ebcb-7116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ac:7a:6e:24:20:1c:d9:d2:65:e3:93:33:ec:
                    92:6d:cf:8f:46:ed:1d:8a:e8:ba:7c:35:50:1b:bd:
                    e0:50:fc:90:c1:a5:ce:77:7c:e0:53:9e:45:d8:75:
                    6d:24:ce:09:1b:a5:52:7d:92:8a:c4:c3:01:90:c4:
                    98:cd:12:7e:8d:67:6d:4c:e8:7c:a5:08:50:92:3f:
                    c5:36:c2:6a:e0:e5:ab:77:0d:b5:a4:5d:26:2b:09:
                    b3:76:f7:ee:a4:b7:67:a1:8c:09:6e:cb:ec:13:c1:
                    b7:df:fc:53:21:f7:05:8b:2f:a3:90:92:80:6d:08:
                    ae:1b:c1:df:c1:5a:5d:67:10:0e:12:60:17:2f:cf:
                    cb:ec:5a:80:6d:32:9b:f1:39:71:1e:0a:d5:3f:46:
                    ae:c3:f9:ff:9e:26:aa:56:f4:43:9f:5b:1a:3f:3a:
                    e6:0a:ff:9e:a0:72:5f:33:e9:50:cf:c5:6f:24:98:
                    2b:99:b6:24:43:b5:f6:4e:9f:e8:f1:77:21:46:53:
                    e9:5d:86:65:9c:2f:4f:79:c9:7e:4c:52:d6:84:d6:
                    6a:a5:16:77:c2:27:46:f4:b1:a7:a9:a7:fd:3b:1a:
                    a0:ec:79:09:7a:8f:7c:39:88:20:82:01:e5:21:6c:
                    a7:de:36:af:d6:72:ac:1d:79:4d:be:24:00:2e:48:
                    e7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:89:E8:64:70:27:69:24:23:4F:17:0B:4C:F9:27:F2:90:56:9E:EC
            X509v3 Authority Key Identifier:
                keyid:D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/C21DA992E83B11EBB3231D5EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.249.55.0/24
                  103.16.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:fa:81:89:51:23:53:09:fc:f3:e5:b2:2c:c3:2b:bc:de:74:
         d9:5e:56:25:06:86:8c:5f:d9:6f:1e:83:f4:d5:36:d9:6a:92:
         ad:af:85:2c:9b:61:aa:e2:20:9e:ca:16:4e:0f:15:81:4f:3b:
         48:2e:cb:11:20:79:04:f8:5b:82:3c:e2:c9:9d:b1:0a:99:04:
         e9:94:24:41:a9:bb:c5:70:a1:75:70:4b:ad:8f:8f:cc:2f:de:
         92:53:ae:12:61:99:25:e6:88:fa:0b:47:16:72:f7:dc:b9:7e:
         8a:24:f2:42:5c:3c:ad:35:1d:4e:89:52:fd:e0:90:fd:09:b6:
         03:e4:e5:da:fb:c4:7e:00:d5:7c:39:c7:32:c4:db:ce:15:ad:
         4d:17:a2:e8:05:91:9d:c0:26:b4:fd:e3:b8:d2:f7:68:f6:7d:
         80:1b:40:ca:c4:39:84:8e:60:2b:5b:4f:59:48:a3:d7:5e:2a:
         cb:d9:43:7e:7e:77:06:d4:e9:7e:e1:c5:e5:65:73:04:c2:e1:
         89:28:8a:13:94:a0:74:00:55:35:81:3e:f7:ac:ae:cf:3b:9f:
         68:9b:d2:c2:ef:c6:6b:f1:be:b9:11:80:34:1a:9d:ff:ac:af:
         d9:d5:a8:2e:93:e7:b7:69:da:c1:a8:08:63:17:38:7c:83:9e:
         9d:f4:00:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:05:38 2024 by rpki-client on console-fra.rpki-client.org