Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/1B299892726F11EEB1217365C4F9AE02.roa
File:                     1B299892726F11EEB1217365C4F9AE02.roa (raw, json)
Hash identifier:          /t+nwTppDZ8C9NhuG+3/6yW+b1AIMxj0muQucwZx3fw=
Subject key identifier:   91:9A:A6:B2:60:D0:69:92:48:89:AB:38:7A:09:67:C8:75:B2:13:E8
Certificate issuer:       /CN=A917A362/serialNumber=E6C46C91D12D585A12B05569621DEE1AD3F8908E
Certificate serial:       06
Authority key identifier: E6:C4:6C:91:D1:2D:58:5A:12:B0:55:69:62:1D:EE:1A:D3:F8:90:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/1B299892726F11EEB1217365C4F9AE02.roa
Signing time:             Wed 25 Oct 2023 06:17:59 +0000
ROA not before:           Wed 25 Oct 2023 06:17:59 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     132890
IP address blocks:        103.130.12.0/22 maxlen: 22
                          103.130.12.0/24 maxlen: 24
                          103.130.13.0/24 maxlen: 24
                          103.130.14.0/24 maxlen: 24
                          103.130.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.crl
                          rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 07:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A362/serialNumber=E6C46C91D12D585A12B05569621DEE1AD3F8908E
        Validity
            Not Before: Oct 25 06:17:59 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6538b317-6228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:51:fc:cc:3a:89:bd:58:f3:32:f4:38:fe:2d:
                    d4:15:8f:4d:61:f1:67:1b:9f:75:3b:8e:da:87:91:
                    dd:ee:15:a2:8e:6d:65:d8:3b:da:d6:2f:91:35:26:
                    3d:5f:95:3f:33:26:27:84:05:45:a5:3f:9f:44:2f:
                    e0:35:dc:17:42:02:77:de:30:74:1e:fd:49:18:cb:
                    a6:f8:67:17:c0:ad:bc:e3:ce:06:cb:fd:89:39:26:
                    b1:6c:bf:5d:6c:d6:57:e8:14:73:50:22:d5:19:ed:
                    54:a0:a6:04:24:b5:c8:b1:a8:23:cd:cb:9d:c3:2b:
                    8e:96:33:6d:4c:cc:7d:b6:7d:e1:45:da:2a:aa:66:
                    bd:e6:f3:c1:eb:e7:37:4f:51:87:7b:ba:8e:1e:88:
                    4a:eb:ae:15:0d:45:b8:2b:77:e8:f6:73:d2:d4:72:
                    0b:fd:b6:b3:a2:5b:e0:8d:2e:0d:63:76:06:96:b4:
                    b5:79:4b:ae:ea:be:ca:d7:1f:eb:91:34:92:67:5a:
                    c6:75:05:cb:74:96:7c:70:f0:9f:dc:b8:95:c5:48:
                    53:03:32:f8:f2:05:20:b7:93:3e:04:92:72:9c:7f:
                    ff:46:45:5e:b7:65:c0:56:67:74:18:23:90:a0:6d:
                    d8:29:79:45:33:61:6f:fe:3c:9f:d6:af:46:3a:ea:
                    39:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9A:A6:B2:60:D0:69:92:48:89:AB:38:7A:09:67:C8:75:B2:13:E8
            X509v3 Authority Key Identifier:
                keyid:E6:C4:6C:91:D1:2D:58:5A:12:B0:55:69:62:1D:EE:1A:D3:F8:90:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/1B299892726F11EEB1217365C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:07:59:83:d1:79:47:c5:26:e5:a2:87:11:4a:18:b5:84:98:
         7b:59:1a:6a:62:4a:6f:8d:22:2b:02:bc:04:6b:42:df:30:b1:
         cf:13:81:20:99:a4:5b:d8:58:b9:ce:14:48:43:bc:14:65:38:
         c1:24:ff:76:85:97:d7:d2:15:f2:b9:fe:b0:1a:8a:8a:60:5f:
         75:61:69:92:60:bc:21:1f:83:bd:7f:ff:08:4b:99:be:3e:b5:
         d7:03:21:b1:9b:8b:63:61:7b:e0:4e:a5:0a:96:6d:89:fe:f1:
         53:77:4e:04:47:cb:7e:06:bb:59:8c:b8:53:96:24:3e:46:a5:
         1d:26:b6:56:76:9a:56:90:eb:33:c4:a1:bf:60:fc:69:56:44:
         97:e2:ec:f5:d5:c2:48:b2:58:6f:c4:8e:2b:86:1d:cb:e5:01:
         d5:01:8b:46:cd:2e:87:d4:8d:22:0a:db:f8:6d:a5:8d:5c:e3:
         a5:cd:2b:13:1f:ce:c8:c8:45:04:f1:82:5b:bd:63:ca:1c:af:
         59:a2:25:6b:db:76:06:66:70:49:d0:d6:04:54:6c:e5:73:89:
         8a:a3:c0:c8:91:cf:94:98:d2:52:a7:d8:0e:ae:d0:83:16:42:
         fe:71:2f:87:b5:bd:fb:92:9a:82:c8:38:39:c4:54:74:88:97:
         32:3b:cd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 10:01:47 2024 by rpki-client on console-ams.rpki-client.org