Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/B4D8E692267111ECA0546981C4F9AE02.roa
File:                     B4D8E692267111ECA0546981C4F9AE02.roa (raw, json)
Hash identifier:          Gwiv3tjl+SxOTkswgRBizEMIncZp/R+hxnqXvpGHn58=
Subject key identifier:   93:49:60:54:7C:E4:EF:1D:33:C6:17:49:32:C1:63:57:71:33:05:63
Certificate issuer:       /CN=A919E3FB/serialNumber=5EB098EF4D5655CC66B6AF81C3CDE4062D802F3B
Certificate serial:       03A1
Authority key identifier: 5E:B0:98:EF:4D:56:55:CC:66:B6:AF:81:C3:CD:E4:06:2D:80:2F:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/B4D8E692267111ECA0546981C4F9AE02.roa
Signing time:             Tue 31 Oct 2023 01:33:12 +0000
ROA not before:           Tue 31 Oct 2023 01:33:12 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     147180
IP address blocks:        103.173.174.0/23 maxlen: 24
                          2001:df7:a280::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.crl
                          rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 03:10:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 929 (0x3a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E3FB/serialNumber=5EB098EF4D5655CC66B6AF81C3CDE4062D802F3B
        Validity
            Not Before: Oct 31 01:33:12 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65405958-f811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:70:c1:63:a3:7b:61:aa:5a:c8:ed:cf:7b:1b:
                    8f:4e:28:4f:8a:59:00:67:94:7d:a3:30:fc:6f:80:
                    db:01:08:fa:b7:8c:cf:dc:8a:b1:d1:8f:7d:df:80:
                    c7:68:21:0d:20:5e:23:39:35:3d:e3:72:2f:87:19:
                    e0:29:6a:88:77:dc:b6:44:0d:a0:e5:b7:b1:5b:b5:
                    b4:1e:ad:e1:20:0d:27:b3:c2:5d:81:7b:89:c9:cc:
                    51:e8:34:f3:81:0d:7e:fb:80:6f:92:3f:94:46:9f:
                    f5:80:a6:6e:15:87:2a:ec:a7:2d:9c:67:80:c0:21:
                    01:50:96:08:13:37:df:68:8d:ee:7c:a7:62:59:85:
                    16:2d:5d:ca:7e:ae:70:52:24:d1:cd:5e:f8:e8:1b:
                    07:e4:50:17:43:3f:7f:91:ef:6f:ed:c6:4c:cd:59:
                    07:3a:c4:e7:fb:54:29:b6:e1:15:94:45:45:a4:95:
                    f9:24:c9:8b:96:fe:f6:7c:d2:66:b1:a3:99:19:27:
                    5b:47:d6:52:fc:48:dc:bc:e1:83:13:b3:88:9d:92:
                    6e:88:41:4a:25:2e:65:0c:4e:2d:fe:46:73:12:e1:
                    5e:b5:1b:c2:08:49:ed:ad:dc:b0:87:e4:ce:d7:16:
                    7a:0a:7e:86:33:e4:01:06:a1:3b:e9:13:97:41:2e:
                    8c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:49:60:54:7C:E4:EF:1D:33:C6:17:49:32:C1:63:57:71:33:05:63
            X509v3 Authority Key Identifier:
                keyid:5E:B0:98:EF:4D:56:55:CC:66:B6:AF:81:C3:CD:E4:06:2D:80:2F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/B4D8E692267111ECA0546981C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.174.0/23
                IPv6:
                  2001:df7:a280::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:f5:fe:57:cd:3a:a6:fe:e2:1f:42:bb:49:de:a6:07:87:0b:
         63:ef:06:36:18:6f:01:dc:4c:90:22:2b:d0:d1:8d:a8:50:63:
         de:3a:f2:7e:4a:7e:14:f3:65:c5:02:dc:04:41:3e:63:a1:04:
         19:58:ba:58:eb:6f:a4:2f:a5:a0:77:3a:4d:c2:db:8e:53:25:
         9f:39:7c:42:38:f5:29:26:90:b7:e3:b9:5e:18:a6:6a:90:d5:
         b2:b4:25:f1:ce:d4:61:d0:ed:80:78:16:6a:09:c9:bc:e0:db:
         56:6b:ea:1d:4c:d8:97:10:9e:33:6d:54:57:ea:16:fd:6c:e1:
         bf:fc:69:e8:dc:c1:d0:0b:90:87:e5:1f:24:6f:cd:8b:b8:97:
         a8:27:16:47:de:1e:98:85:ef:98:a5:24:2b:b9:b2:0d:45:85:
         4c:fd:a6:5e:11:4e:00:c9:38:03:c8:d9:b4:67:72:9b:a8:9e:
         05:0c:2a:84:56:68:27:46:97:f6:b1:f8:e2:f5:13:ce:05:8b:
         4f:d3:6b:57:1b:f1:47:b6:58:81:6e:14:d4:1f:e2:33:72:97:
         ef:18:b4:bc:ad:5b:b3:3f:8e:3c:ec:82:17:2c:ab:56:bc:35:
         1b:2e:4a:fd:3b:2a:56:56:b8:11:3a:00:6c:d9:4e:c7:fb:13:
         25:78:30:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:07:29 2024 by rpki-client on console-ams.rpki-client.org