Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/5A233B60424611EE9C25DD48C4F9AE02.roa
File:                     5A233B60424611EE9C25DD48C4F9AE02.roa (raw, json)
Hash identifier:          NBHmMK+XJgQM9iWpIwm96p3Ked1Xy2GcXAbx4iEqjsY=
Subject key identifier:   DE:25:E3:9F:AB:57:7E:BD:91:82:CF:53:7E:98:21:61:8A:4F:A6:22
Certificate issuer:       /CN=A916A763/serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3
Certificate serial:       C8
Authority key identifier: A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/5A233B60424611EE9C25DD48C4F9AE02.roa
Signing time:             Thu 05 Sep 2024 05:48:13 +0000
ROA not before:           Thu 05 Sep 2024 05:48:13 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     151675
IP address blocks:        103.6.122.0/23 maxlen: 24
                          2001:df2:d6c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl
                          rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A763/serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3
        Validity
            Not Before: Sep  5 05:48:13 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66d9461d-0ce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:aa:2d:7e:66:86:10:54:90:a2:86:2b:4f:6b:
                    0b:80:e1:83:07:e1:4e:60:e3:70:f0:73:a0:a9:8c:
                    bc:fa:72:91:06:43:d0:c9:73:5a:76:c0:96:2a:9d:
                    67:bb:de:4c:7e:64:58:c4:48:48:f8:7d:69:b9:43:
                    19:20:1c:ab:15:58:f0:48:1b:f7:80:fc:d4:70:ab:
                    bd:45:77:db:6f:05:79:e3:03:cd:83:eb:3f:11:fb:
                    58:0d:81:c0:78:a3:07:02:0c:86:13:6e:ef:0a:b6:
                    39:fb:c9:6d:02:1c:24:6e:43:8d:40:62:a6:64:cc:
                    f9:b2:19:89:ea:3e:ad:22:7c:c6:22:69:e1:57:a6:
                    38:d3:88:59:17:dc:42:22:8c:ec:63:01:98:96:8e:
                    74:bc:59:e0:4d:7f:a8:81:82:cd:1b:97:f9:c8:38:
                    ed:b3:46:b6:25:d4:be:31:78:29:80:04:f5:95:f7:
                    bc:96:6f:26:eb:d1:f2:7c:ee:1c:99:47:3b:86:0a:
                    37:c7:2a:8d:69:46:a5:0b:47:3c:4e:06:8b:b6:be:
                    f5:d8:87:8a:3c:a7:b9:97:1f:bb:b0:90:7a:4f:57:
                    eb:28:47:e2:94:09:0a:15:c4:b7:f6:0c:ec:24:c8:
                    ff:44:60:6f:d2:5f:e6:30:a4:71:e3:82:6e:85:90:
                    b9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:25:E3:9F:AB:57:7E:BD:91:82:CF:53:7E:98:21:61:8A:4F:A6:22
            X509v3 Authority Key Identifier:
                keyid:A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/5A233B60424611EE9C25DD48C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.122.0/23
                IPv6:
                  2001:df2:d6c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:62:c9:84:8c:36:bb:ad:2a:6f:d5:28:a3:cd:0d:5c:b4:1e:
         97:9d:54:04:9c:40:34:2b:36:4e:df:ee:90:87:35:2a:eb:0b:
         c4:87:0a:d2:e7:0e:0b:ed:2d:28:db:be:29:31:25:61:72:0d:
         ab:7e:74:5e:ce:5b:56:2f:12:d4:11:39:73:0b:cc:90:f4:26:
         27:32:16:6a:f1:aa:87:59:1b:93:bb:87:36:17:3a:83:9c:c9:
         2f:53:80:fc:e5:2d:66:f5:09:e4:12:51:ac:10:b2:ad:6a:cb:
         86:fe:da:cf:79:ce:2c:ae:1b:87:62:fa:1c:d0:94:9a:21:91:
         47:98:d3:cf:30:06:ea:b9:ad:21:24:19:f6:1c:d4:63:53:0e:
         07:78:a5:2b:ed:c0:da:91:95:48:0a:03:bf:99:6b:bb:a5:0c:
         a3:21:ae:a5:91:68:03:cb:c0:c0:59:cc:b0:b0:4d:12:48:ae:
         dd:85:83:0e:d7:31:fc:20:39:38:4a:86:52:ae:55:cb:c8:e0:
         1b:fa:11:fa:c2:04:41:c0:a1:b3:86:84:0c:8a:39:e0:1c:f3:
         19:ff:57:bf:ed:aa:e0:10:cb:43:77:8e:73:35:be:ef:c6:ca:
         41:17:8c:be:de:d2:d5:e8:bd:71:b6:57:8d:bf:d3:38:4b:73:
         55:d8:de:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:50 2024 by rpki-client on console-fra.rpki-client.org