Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/F814A546C01411EA912AC365C4F9AE02.roa
File:                     F814A546C01411EA912AC365C4F9AE02.roa (raw, json)
Hash identifier:          CSrekpMbUtQxRsDfHQqz7muBflhWUtCH6yCR/F332RE=
Subject key identifier:   C5:C9:EB:6C:1D:FD:EB:B8:FD:B6:37:D4:6A:98:F1:11:98:BB:4F:B1
Certificate issuer:       /CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
Certificate serial:       0739
Authority key identifier: D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/F814A546C01411EA912AC365C4F9AE02.roa
Signing time:             Sun 02 Jul 2023 21:27:41 +0000
ROA not before:           Sun 02 Jul 2023 21:27:41 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        103.16.56.0/24 maxlen: 24
                          103.16.58.0/24 maxlen: 24
                          103.16.59.0/24 maxlen: 24
                          103.16.101.0/24 maxlen: 24
                          150.242.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl
                          rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 02 Apr 2024 21:56:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1849 (0x739)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
        Validity
            Not Before: Jul  2 21:27:41 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64a1ebcd-3d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9e:14:27:c8:ac:0f:1a:d1:12:83:1a:08:2d:
                    e8:01:87:dc:65:c3:88:df:ab:c8:74:bc:78:1f:8f:
                    d9:db:dc:61:bd:ec:c0:9e:b3:84:7a:be:f2:dc:f9:
                    8b:58:41:1b:51:71:5e:e0:40:13:df:6d:f2:2a:3e:
                    43:f6:ed:ff:32:ac:52:93:08:82:4c:09:ca:5c:d6:
                    9a:d5:01:64:91:a4:be:f1:6e:c2:aa:e8:e2:48:4d:
                    b6:ab:f9:4c:c0:cd:55:bb:34:61:f6:32:2b:4f:f7:
                    58:53:5e:e2:0e:22:a1:76:65:39:a2:10:78:3a:39:
                    58:c1:c1:0c:56:b8:fd:66:2f:2a:f7:2e:06:0f:50:
                    40:c0:01:c2:a4:9b:21:64:43:f3:cc:1a:10:d8:5b:
                    6a:ce:9a:e6:8b:3f:2b:d4:fb:e3:af:7e:54:92:96:
                    5b:64:fd:e8:98:fd:d2:5c:3a:6e:43:9c:fe:4d:d3:
                    8d:d9:4a:75:b5:77:18:fa:65:db:b5:d4:ef:fa:c6:
                    fb:20:f0:dd:6f:11:15:fa:5e:a5:d3:33:23:a3:6e:
                    66:ad:a0:5f:f4:3f:1f:c4:6d:f5:36:b2:a6:14:75:
                    6c:8c:bb:27:e6:78:6b:88:62:7e:68:3a:5b:fd:11:
                    cd:5a:75:1b:b2:74:37:6f:43:3a:4d:8c:5d:6d:a6:
                    ff:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C9:EB:6C:1D:FD:EB:B8:FD:B6:37:D4:6A:98:F1:11:98:BB:4F:B1
            X509v3 Authority Key Identifier:
                keyid:D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/F814A546C01411EA912AC365C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.56.0/24
                  103.16.58.0/23
                  103.16.101.0/24
                  150.242.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:89:de:95:ad:3c:0c:c8:9f:d4:f4:96:1e:99:51:ca:cf:ac:
         2c:86:1f:4f:d9:d7:c9:9b:0f:79:2c:c4:37:77:0b:2d:59:34:
         9b:f2:b3:5a:73:c0:82:d9:0a:19:44:da:86:56:56:60:b6:98:
         c8:30:f8:77:3f:a8:ce:8d:47:d9:ce:ba:1f:58:be:bb:3e:06:
         4e:d9:c2:6e:d3:02:a5:6e:1b:a4:3a:64:f4:aa:9d:0d:a2:4c:
         75:fd:fd:5e:51:ee:f7:9d:c5:0b:94:24:13:df:12:66:4b:d5:
         c7:24:ee:49:c5:33:5c:4e:39:fd:21:fe:b5:4c:19:1b:83:28:
         b7:0c:45:1e:b0:16:da:75:31:b6:ba:53:96:30:08:a2:98:bf:
         e5:c2:8d:fb:67:13:fe:5b:03:75:d6:ad:bd:0c:04:f0:0d:f2:
         93:53:fd:39:7e:3e:f9:19:4f:bc:73:77:e6:e3:6f:85:b2:03:
         f3:e4:90:6c:42:f8:e6:68:0f:06:03:e2:e0:0f:bd:82:27:05:
         f0:41:13:91:ed:22:26:ca:55:df:89:72:34:4d:1e:04:94:6a:
         a4:44:69:f2:71:38:ef:9a:44:d9:4f:d9:45:27:38:fa:c8:57:
         c4:a1:2f:d6:5b:35:31:cb:cf:52:02:02:a5:26:4f:e8:07:e4:
         85:50:c6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 26 23:50:10 2024 by rpki-client on console-fra.rpki-client.org