Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/A108A310682711EEAF0F2B0EC4F9AE02.roa
File:                     A108A310682711EEAF0F2B0EC4F9AE02.roa (raw, json)
Hash identifier:          nUmZOGmDy0/0cMkfbFg1Osy5Q1YwcXcVfrWprMnZ5qA=
Subject key identifier:   F2:7F:D2:F7:EF:5F:1E:01:E0:2E:CE:70:03:51:FE:D8:D5:EE:81:A4
Certificate issuer:       /CN=A919EC2D/serialNumber=48BFD80819AF17FBC0875E6206F02822A7B04E98
Certificate serial:       03
Authority key identifier: 48:BF:D8:08:19:AF:17:FB:C0:87:5E:62:06:F0:28:22:A7:B0:4E:98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/A108A310682711EEAF0F2B0EC4F9AE02.roa
Signing time:             Wed 11 Oct 2023 11:16:31 +0000
ROA not before:           Wed 11 Oct 2023 11:16:31 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     142300
IP address blocks:        103.188.92.0/24 maxlen: 24
                          103.188.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.crl
                          rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Feb 2024 13:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EC2D/serialNumber=48BFD80819AF17FBC0875E6206F02822A7B04E98
        Validity
            Not Before: Oct 11 11:16:31 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6526840f-0ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:1b:c9:77:2e:5a:d2:8b:75:d3:32:aa:42:82:
                    94:bf:68:e3:b0:89:1c:2f:8a:54:76:04:f7:b4:77:
                    60:4f:d7:2b:2b:a0:73:e5:54:91:af:11:aa:1b:59:
                    2a:f4:ed:21:49:f9:b6:08:4f:23:d0:62:20:7c:ce:
                    d1:c6:ac:be:15:3e:9d:17:7b:71:99:c0:02:66:c4:
                    2e:bb:de:9d:e6:0c:ec:cb:b5:66:57:8a:ae:38:17:
                    a8:73:2e:08:df:dd:1d:ff:06:dc:f2:ef:2c:b2:0c:
                    7d:33:db:e5:dd:30:0d:2b:7e:14:9d:05:d4:55:fd:
                    86:df:69:69:21:04:dd:6d:cc:26:50:eb:e7:c0:a4:
                    d0:5b:c9:6b:ed:0c:4e:22:61:cf:33:65:5d:cb:02:
                    f9:0c:0a:96:cf:80:d8:50:70:d6:d2:ee:81:ad:d4:
                    9b:0b:4f:c5:65:96:fe:59:eb:03:f6:f6:72:d7:00:
                    89:12:8d:ce:4d:88:ea:09:96:1e:80:be:8f:3a:94:
                    60:ce:79:dc:5c:99:3d:81:da:77:aa:c0:32:ed:d4:
                    49:7e:44:5e:ca:d5:1a:71:b3:0d:b5:ea:d8:dd:65:
                    9c:99:df:19:b7:45:40:b1:85:bb:33:76:47:84:c1:
                    ae:a3:af:98:f8:d3:10:92:5c:8c:31:fb:6f:ec:df:
                    a3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7F:D2:F7:EF:5F:1E:01:E0:2E:CE:70:03:51:FE:D8:D5:EE:81:A4
            X509v3 Authority Key Identifier:
                keyid:48:BF:D8:08:19:AF:17:FB:C0:87:5E:62:06:F0:28:22:A7:B0:4E:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/A108A310682711EEAF0F2B0EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:48:e5:13:0b:a4:a2:3c:02:ce:05:96:e1:ed:4b:df:be:b4:
         07:73:12:19:78:a9:11:ca:64:a2:8d:da:b9:15:9e:9f:e0:63:
         a3:a3:ac:bb:d6:d9:78:51:50:64:6c:ac:6b:2b:1f:fc:e3:ab:
         6f:12:ec:89:26:90:92:42:c8:c4:6b:fc:20:bd:60:ef:a9:cb:
         b6:65:a5:dd:26:29:de:8e:39:16:74:2c:83:7a:88:c0:f8:35:
         d8:74:b9:3c:90:04:43:fe:d2:b4:76:54:72:9b:53:a7:fa:4e:
         bc:21:76:92:27:8b:ed:11:df:5e:55:b2:d2:9c:48:bc:f7:a4:
         f0:b4:cc:08:16:74:fc:5e:29:06:4a:48:e7:23:8d:37:5e:42:
         2a:fd:dc:65:20:63:27:f5:75:9a:c3:86:39:3f:57:15:e1:51:
         b2:16:25:1c:a4:0d:92:df:5c:11:55:98:39:52:69:32:76:20:
         31:4e:a3:1b:95:f8:92:5a:a4:83:ac:aa:86:99:73:2b:a5:df:
         98:c1:7c:a8:39:42:2d:c7:b9:40:f2:50:4d:ab:b0:0e:5d:09:
         10:af:e5:53:b1:5b:b0:de:ec:ff:0c:e1:76:6b:09:1a:d0:75:
         7c:39:56:f8:89:f9:4b:5b:00:a8:d5:2f:61:16:02:7c:d3:1b:
         35:0f:71:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 18:02:50 2024 by rpki-client on console-ams.rpki-client.org