Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/EF3517E8099311ECAD398842C4F9AE02.roa
File:                     EF3517E8099311ECAD398842C4F9AE02.roa (raw, json)
Hash identifier:          WLnc9S4f9qHS4f2SHwwlmbxkC+IRwbCNUEVt/wAYlAA=
Subject key identifier:   8D:92:0A:E3:8F:06:5B:25:04:76:36:98:08:37:D5:EB:6F:62:D6:99
Certificate issuer:       /CN=A918A341/serialNumber=4722165A290C0FADB038E8CD2C63AEC71E8F83EC
Certificate serial:       03E5
Authority key identifier: 47:22:16:5A:29:0C:0F:AD:B0:38:E8:CD:2C:63:AE:C7:1E:8F:83:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RyIWWikMD62wOOjNLGOuxx6Pg-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/EF3517E8099311ECAD398842C4F9AE02.roa
Signing time:             Tue 31 Oct 2023 01:13:17 +0000
ROA not before:           Tue 31 Oct 2023 01:13:17 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     142644
IP address blocks:        103.171.212.0/24 maxlen: 24
                          103.171.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.crl
                          rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RyIWWikMD62wOOjNLGOuxx6Pg-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 02:54:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 997 (0x3e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A341/serialNumber=4722165A290C0FADB038E8CD2C63AEC71E8F83EC
        Validity
            Not Before: Oct 31 01:13:17 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=654054ac-36ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:63:21:59:70:6b:08:db:7f:e3:47:df:18:21:
                    8c:e6:af:02:55:b6:56:bd:6a:27:5c:17:77:8c:79:
                    d7:f3:5d:c7:bf:61:ad:4d:f4:9c:4e:02:90:d9:45:
                    84:d5:1d:25:23:01:f8:3c:0a:fe:c3:50:3f:e3:75:
                    06:37:78:b6:f4:93:1c:67:c1:6d:f0:9a:d1:32:ff:
                    39:51:c7:c9:a8:01:9d:cf:95:83:5a:2a:f8:59:7a:
                    bf:30:e1:6e:c9:34:f5:45:4d:cb:0a:b1:2c:68:a3:
                    c9:89:88:65:3a:d4:f8:ee:11:42:7c:8d:fd:3f:e3:
                    d3:e3:a8:e6:21:93:80:15:80:92:4e:b2:1e:f9:c9:
                    49:07:47:2e:df:a9:6a:da:45:ab:dc:d0:56:d4:85:
                    5e:6c:a9:dc:21:6b:c2:ff:ff:50:e1:b8:e2:79:f7:
                    a3:41:56:1b:13:95:3a:d8:f7:2b:27:6a:88:0a:a1:
                    7b:09:9f:66:38:a7:6a:a7:74:73:a9:ea:35:fa:bf:
                    3e:37:ba:6b:d8:00:a9:02:e6:c2:54:cb:c8:18:89:
                    3b:f8:3d:0f:c5:41:60:1e:84:65:4d:43:0c:e3:63:
                    3a:2a:7c:5c:b5:75:12:f7:0f:7e:1e:84:a5:7f:57:
                    09:eb:4f:05:70:13:fe:b3:c7:3b:8d:ac:53:0e:a7:
                    18:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:92:0A:E3:8F:06:5B:25:04:76:36:98:08:37:D5:EB:6F:62:D6:99
            X509v3 Authority Key Identifier:
                keyid:47:22:16:5A:29:0C:0F:AD:B0:38:E8:CD:2C:63:AE:C7:1E:8F:83:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RyIWWikMD62wOOjNLGOuxx6Pg-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/EF3517E8099311ECAD398842C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:9f:50:c5:c8:f9:09:ad:8f:d4:6f:ce:e5:5f:43:ed:59:78:
         cf:98:ac:27:bb:3a:d4:cc:d0:d9:0f:5d:8e:23:0f:c4:87:21:
         f6:d3:86:c9:c0:5d:ef:c2:54:c7:cf:9a:ce:85:fb:2b:cc:3c:
         aa:1a:93:9f:ff:1f:45:33:6b:bf:26:36:e2:49:11:b9:dd:37:
         ae:82:89:b6:fa:2c:db:0a:b5:65:33:f4:82:8b:8e:f5:be:96:
         26:d7:02:93:1c:95:f7:c1:2a:31:54:b5:46:41:0f:80:9f:f7:
         ad:3f:a0:3d:85:cb:f9:b2:bd:64:5e:c6:90:d6:d6:36:c1:e2:
         ca:ef:e9:e6:3d:06:d4:26:aa:f9:d0:ef:95:07:51:ab:bf:50:
         4c:97:c0:41:d4:83:7c:bf:9d:32:08:6f:ed:d1:c5:5a:a8:79:
         1c:37:a7:c1:82:1f:34:d5:41:f6:36:61:af:1d:ce:eb:c9:ec:
         81:2c:f3:a7:aa:8c:69:2a:40:4c:de:fa:a8:3f:31:ac:62:d6:
         5d:17:50:c3:2b:f5:6e:3f:5b:8c:7a:55:8d:19:dd:42:ae:ad:
         37:0d:85:84:c5:20:94:5f:45:c5:70:20:70:f8:c5:10:ea:a3:
         96:75:ef:a9:31:80:df:4b:9b:20:1e:02:46:24:46:65:f2:8e:
         d2:b8:aa:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:59:03 2024 by rpki-client on console-fra.rpki-client.org