Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/99244E94FE0211EEB1F40344C4F9AE02.roa
File:                     99244E94FE0211EEB1F40344C4F9AE02.roa (raw, json)
Hash identifier:          Rg0JDlVpf5av9xgphUcwW8L/umN7c++X0aMQPmcAyBg=
Subject key identifier:   BE:12:51:7D:FF:A6:DC:15:4E:AD:06:80:19:F7:5B:74:9B:5C:46:F1
Certificate issuer:       /CN=A91CE959/serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2
Certificate serial:       12
Authority key identifier: D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/99244E94FE0211EEB1F40344C4F9AE02.roa
Signing time:             Fri 19 Apr 2024 04:09:21 +0000
ROA not before:           Fri 19 Apr 2024 04:09:21 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     151622
IP address blocks:        103.47.176.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl
                          rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 08:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE959/serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2
        Validity
            Not Before: Apr 19 04:09:21 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=6621ee71-e405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f0:b2:35:b9:15:3c:2b:1c:ed:42:9e:b5:93:
                    ec:21:6f:a6:ea:56:22:49:b0:19:8e:e4:3d:84:9d:
                    97:3b:05:b6:d2:0f:94:33:01:0b:18:68:52:41:e5:
                    9e:07:ce:0d:ae:0f:fd:9f:0c:bc:fc:c8:02:52:6a:
                    c8:88:d5:2c:e5:0d:79:4b:6d:ad:d9:ae:28:be:f0:
                    70:6a:df:41:59:57:63:0a:02:fe:90:22:e1:1b:37:
                    78:23:cb:ae:18:77:67:c0:20:3d:74:f6:e4:8b:fa:
                    6f:a3:b8:2f:d8:d2:47:5b:3c:79:0f:21:6f:40:6a:
                    bd:8c:ab:3c:43:1f:f6:6a:00:07:6d:d4:93:ac:15:
                    25:a4:f1:08:2f:5c:56:40:ad:d4:b6:90:59:8e:7f:
                    15:5d:8a:06:50:eb:59:9b:7c:0b:88:52:9a:34:66:
                    5f:15:4a:a9:d4:1c:83:c8:50:69:df:e7:07:c1:99:
                    c2:d0:cd:e3:6d:08:d8:d2:6f:bc:c1:4b:a8:3b:5c:
                    69:0f:ce:50:32:5a:90:aa:5c:82:22:5c:d3:1d:a1:
                    71:22:95:4e:b2:9c:d7:19:ca:95:19:03:67:aa:05:
                    c3:7b:bd:9c:16:f8:9e:a6:b0:57:36:66:0c:f4:ed:
                    9d:dc:aa:55:d7:79:cb:f9:d0:07:4c:6f:e9:94:0c:
                    0f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:12:51:7D:FF:A6:DC:15:4E:AD:06:80:19:F7:5B:74:9B:5C:46:F1
            X509v3 Authority Key Identifier:
                keyid:D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/99244E94FE0211EEB1F40344C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.47.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:28:af:4c:11:43:48:d5:e8:3a:a4:da:c1:7b:11:60:03:e1:
         f6:2b:cd:8d:f9:82:59:57:83:a2:69:e9:4e:ac:55:ea:04:39:
         fb:d9:01:95:8c:83:1d:6c:f5:ba:84:86:59:62:1a:e1:13:2b:
         bf:88:84:38:7c:21:b6:61:16:d3:0b:d8:f9:4b:7a:66:d5:5c:
         a7:2d:a7:ef:a9:5d:8c:45:25:cd:33:c2:1b:51:6e:5f:33:f1:
         89:3d:1f:c0:d5:c2:d1:ff:b8:46:d0:e1:42:a0:45:62:df:23:
         6d:92:82:89:72:4a:04:c3:b5:de:7d:fe:62:29:5c:04:8d:c3:
         ca:de:0c:47:45:91:8e:1a:c8:c7:9c:f3:e8:6a:39:28:6a:80:
         41:fb:de:29:5d:7f:e1:33:6c:15:7f:7b:c9:16:5d:9a:9c:c9:
         cf:8d:b3:86:6b:40:f6:7d:4b:70:ef:c8:59:34:2f:ba:56:23:
         5f:04:d4:c4:07:e2:f1:84:d1:8d:68:d3:03:56:a9:fa:67:f2:
         76:82:2d:78:93:85:be:36:e9:65:85:46:33:93:87:79:73:c4:
         44:73:39:50:65:fa:83:74:94:5d:47:57:2f:32:d7:74:72:3c:
         16:86:2e:30:88:ca:a3:c5:ca:fc:1d:dc:40:4d:63:60:6b:6e:
         dd:99:69:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:47:32 2024 by rpki-client on console-ams.rpki-client.org