Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/46B3DF5A46E111EDB39B8526C4F9AE02.roa
File:                     46B3DF5A46E111EDB39B8526C4F9AE02.roa (raw, json)
Hash identifier:          TjnV5mFOYdxb90Wl7rBBpD16GWeK0cHfYitbTARm7mg=
Subject key identifier:   4B:19:07:20:58:83:BB:81:40:C9:6C:9B:C7:A7:AE:CD:E2:F8:CD:70
Certificate issuer:       /CN=A919C1A2/serialNumber=579972E60EA6F46384891AD0E3F41790C80805F1
Certificate serial:       E9
Authority key identifier: 57:99:72:E6:0E:A6:F4:63:84:89:1A:D0:E3:F4:17:90:C8:08:05:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/46B3DF5A46E111EDB39B8526C4F9AE02.roa
Signing time:             Thu 21 Dec 2023 04:35:53 +0000
ROA not before:           Thu 21 Dec 2023 04:35:53 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     137221
IP address blocks:        103.105.74.0/23 maxlen: 23
                          103.105.74.0/24 maxlen: 24
                          103.105.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl
                          rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 04:51:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C1A2/serialNumber=579972E60EA6F46384891AD0E3F41790C80805F1
        Validity
            Not Before: Dec 21 04:35:53 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6583c0a9-8b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:12:ca:0e:6e:32:5a:50:f0:dd:1d:13:b7:45:
                    35:fb:43:5c:b2:a3:82:ef:73:94:f5:23:4d:83:d1:
                    28:01:44:2a:03:9c:ae:df:d1:3b:25:f4:fc:b6:c0:
                    ca:e0:88:90:14:b2:fe:7f:c2:c3:b5:d8:a9:12:61:
                    b2:0b:28:71:ac:20:12:4b:3a:5c:16:bf:01:78:c3:
                    46:73:34:f8:c9:95:4f:7f:ba:96:22:84:37:87:bd:
                    52:7e:1d:24:a9:fe:3d:eb:44:cf:9f:1c:5b:87:ce:
                    29:ad:e9:ad:1f:67:f8:60:9a:3d:38:a5:7c:d2:9a:
                    1f:18:ef:eb:86:cc:7a:f9:b9:92:b6:11:e2:0e:47:
                    b5:66:b8:33:0b:4f:80:a8:6a:94:65:ae:9c:a9:81:
                    c1:66:a0:ad:28:ce:69:c0:e4:88:26:9e:b1:7d:e0:
                    05:2d:a7:ae:3e:41:9e:3e:28:f5:6c:56:48:d5:42:
                    cb:93:bc:c3:8f:d7:fc:e0:c4:61:94:15:26:1d:ab:
                    1a:13:21:21:32:04:bb:a9:10:e9:31:67:3b:82:52:
                    00:04:95:76:4b:6c:de:68:29:02:8d:3a:22:b3:2b:
                    d6:eb:10:9c:5c:ed:33:c4:07:1d:64:db:41:ea:f7:
                    05:24:c7:a8:b9:79:c4:83:7c:ad:45:d9:5e:30:7a:
                    48:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:19:07:20:58:83:BB:81:40:C9:6C:9B:C7:A7:AE:CD:E2:F8:CD:70
            X509v3 Authority Key Identifier:
                keyid:57:99:72:E6:0E:A6:F4:63:84:89:1A:D0:E3:F4:17:90:C8:08:05:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/46B3DF5A46E111EDB39B8526C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:c8:dc:ff:72:7f:6b:08:8d:f7:50:65:cc:d5:0d:0c:4c:78:
         09:a5:69:4d:25:cc:45:f6:8b:c8:ff:2a:ee:bb:3d:5d:4b:b0:
         1b:98:28:4c:69:e7:80:ca:94:d8:96:64:d7:46:cb:20:54:c6:
         95:17:51:9b:52:2c:f9:c5:5d:2d:51:fe:47:25:7d:ad:de:3d:
         34:1e:b2:17:92:8b:3c:a3:39:24:8d:0c:ac:5f:a1:77:c4:33:
         7b:31:34:42:51:64:2b:87:04:b9:30:08:87:a7:a6:06:55:d0:
         0a:86:e0:67:e7:e5:e0:48:56:f7:ca:1a:16:d1:f1:db:12:98:
         30:28:ad:80:a4:5e:07:8b:19:09:1d:0f:ba:7f:d7:ca:01:83:
         9a:b4:28:fa:b0:90:42:06:c5:2b:f1:e6:e9:98:89:6a:5d:e8:
         34:d7:f3:15:15:0a:20:26:e4:7a:55:81:44:6a:41:b2:90:da:
         82:81:b1:46:6e:8c:21:67:90:71:fb:e8:65:2e:31:bb:58:68:
         6f:81:c9:98:fb:98:d3:f4:a8:6b:72:de:2f:40:f6:ab:e9:b3:
         30:15:79:c2:5d:d4:b0:78:1f:0e:eb:4b:35:85:14:18:64:df:
         b3:3e:fc:6c:8f:47:17:42:8b:b4:42:d4:75:58:60:a7:34:56:
         f0:44:0c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 08:02:29 2024 by rpki-client on console-ams.rpki-client.org