Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/D663158A6E2C11EEBFE28628C4F9AE02.roa
File:                     D663158A6E2C11EEBFE28628C4F9AE02.roa (raw, json)
Hash identifier:          C3x2ElCQcsL3UhOEMewm20AmrEZaFDr91zw1vCkXk+Y=
Subject key identifier:   F5:9E:22:20:1E:C0:66:23:56:6E:CB:CE:18:C2:16:D6:6B:01:51:21
Certificate issuer:       /CN=A914B813/serialNumber=107618E36C91DBED0C8745295D0149842787AF83
Certificate serial:       02
Authority key identifier: 10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/D663158A6E2C11EEBFE28628C4F9AE02.roa
Signing time:             Thu 19 Oct 2023 03:08:55 +0000
ROA not before:           Thu 19 Oct 2023 03:08:55 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     4764
IP address blocks:        103.61.97.0/24 maxlen: 24
                          103.61.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl
                          rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 08:47:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B813/serialNumber=107618E36C91DBED0C8745295D0149842787AF83
        Validity
            Not Before: Oct 19 03:08:55 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=65309dc7-660f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:99:cb:c9:5b:f8:03:75:f3:3e:d8:c8:2b:21:
                    d8:cb:43:d8:75:4c:8f:b2:76:92:fc:7b:4f:53:5f:
                    4b:1d:9d:81:a8:81:e5:c5:b4:5c:a8:08:54:79:90:
                    5a:ee:a4:24:8e:52:76:2c:ca:36:b6:74:53:b4:6b:
                    b8:31:8e:17:42:9d:60:27:1d:36:e1:58:93:84:b7:
                    50:28:b0:62:c5:42:c6:7a:b2:0a:26:2e:ef:f3:92:
                    7b:ba:40:8f:e8:e2:d4:56:ef:1a:22:82:53:21:d3:
                    cf:b3:38:61:95:97:16:ed:09:66:a6:c3:c5:af:5f:
                    ab:a9:96:31:8e:c5:b0:ab:6e:34:31:fe:59:1c:85:
                    93:85:6d:5e:c5:7c:9b:7a:db:30:3d:7a:f9:b8:9f:
                    b4:d6:64:cf:29:f5:51:13:a2:7d:94:9c:9e:39:86:
                    df:f3:3f:04:27:0e:71:c3:5b:80:c4:3c:da:9c:f6:
                    0b:f4:49:63:0b:bc:85:b7:fb:2b:22:4b:4f:25:3b:
                    88:de:a3:be:a0:4d:95:0d:b9:99:90:c6:0c:61:98:
                    3e:05:c6:38:4e:32:e1:d1:88:d7:48:eb:b3:ab:53:
                    b2:43:24:73:d3:09:ff:8d:4f:29:57:7c:e9:d6:31:
                    c3:9d:36:e0:9d:bb:80:39:e9:70:ce:52:e6:29:6f:
                    54:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:9E:22:20:1E:C0:66:23:56:6E:CB:CE:18:C2:16:D6:6B:01:51:21
            X509v3 Authority Key Identifier:
                keyid:10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/D663158A6E2C11EEBFE28628C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.97.0/24
                  103.61.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:33:92:57:9b:5b:9a:03:f9:cd:65:89:92:98:80:9d:c4:74:
         1f:ac:a1:eb:07:8b:bc:f1:d5:c5:41:0b:99:5a:ad:d5:88:e4:
         5d:23:e0:48:10:c0:7f:32:e7:e3:0a:13:06:5d:41:7c:9d:25:
         6c:b6:60:7e:17:dd:b4:b1:7f:67:bb:9a:f5:0b:2d:ea:15:bd:
         5e:1d:62:37:a0:68:14:a7:4b:b0:32:22:b6:65:de:61:21:aa:
         fb:eb:7c:1d:9c:70:c0:b3:c1:3e:13:79:57:43:6d:cd:14:78:
         1c:f9:bf:e0:58:b0:20:a9:30:4f:0d:76:9d:20:c7:db:41:28:
         ab:93:cc:94:c1:25:06:8e:88:d6:d9:6f:e9:e7:4c:3e:31:eb:
         a8:04:94:dc:24:fd:3d:20:40:50:18:c8:52:65:74:76:a4:6e:
         5e:2e:5a:8e:7e:8d:a9:47:0c:b9:e3:b2:02:d2:c0:16:ed:c8:
         d8:ef:67:78:ff:bd:49:19:9f:fe:34:94:0e:3d:14:69:4d:e1:
         ea:c2:d3:f3:b1:cb:24:6d:4b:31:8f:f1:3a:20:89:6e:70:3f:
         ca:1a:38:29:67:e2:a0:14:75:1a:fe:f5:45:92:44:c9:23:56:
         93:4f:c5:7b:d3:42:f9:37:87:a8:32:78:a9:64:4e:7d:3a:57:
         e1:33:e5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:47:12 2024 by rpki-client on console-ams.rpki-client.org