Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/4625A21A68B511EA9EF7951AC4F9AE02.roa
File:                     4625A21A68B511EA9EF7951AC4F9AE02.roa (raw, json)
Hash identifier:          LqgFZ6aFQBxDfZoGmnMBCaXwoiVQWgH8NS8kz6eOvUM=
Subject key identifier:   B2:02:66:E4:A5:91:82:F4:71:1F:14:9C:80:A8:4E:A1:C0:03:93:18
Certificate issuer:       /CN=A9110C2F/serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73
Certificate serial:       3337
Authority key identifier: B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/4625A21A68B511EA9EF7951AC4F9AE02.roa
Signing time:             Sat 24 Jun 2023 15:10:51 +0000
ROA not before:           Sat 24 Jun 2023 15:10:51 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     38229
IP address blocks:        103.77.64.0/22 maxlen: 22
                          2401:dd00::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl
                          rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 May 2024 15:03:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13111 (0x3337)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110C2F/serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73
        Validity
            Not Before: Jun 24 15:10:51 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=6497077a-7a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bb:1b:83:16:21:80:13:fb:17:cc:b9:54:a7:
                    15:5b:7f:be:90:9d:2f:d3:62:4e:6c:13:d9:e4:ba:
                    94:6c:66:4e:5d:b0:d0:40:65:53:7a:e0:8f:61:0b:
                    be:b3:c0:29:93:e6:c6:61:91:3b:7f:54:51:fa:35:
                    d9:1f:4e:16:68:2f:73:cc:a6:9d:0c:1b:d7:29:03:
                    a3:99:f8:67:64:bc:fe:0d:9b:d5:35:4e:e0:32:4b:
                    a3:78:61:4f:ef:b8:9f:5b:c5:d4:de:40:f4:8f:e0:
                    a8:85:a3:7f:b2:2b:da:70:ba:b0:8c:a5:65:80:a7:
                    d4:3d:d5:55:ef:99:76:a8:48:5b:e6:68:eb:6e:56:
                    f9:3f:30:7c:02:b4:ed:5d:be:a6:c1:7e:7b:f7:a2:
                    a0:c2:6f:58:b8:51:3f:ba:37:47:cd:ce:94:e5:24:
                    c2:09:4c:76:05:bc:51:ef:85:b3:20:98:c9:00:29:
                    72:5d:b3:2d:5f:65:bf:4e:87:c6:42:7f:f1:88:e5:
                    86:58:9e:79:9c:13:66:f1:64:0c:25:b7:f5:57:52:
                    54:8d:71:90:91:79:85:bb:7f:22:aa:7d:9b:48:d7:
                    51:a5:b5:35:67:80:cd:c4:27:0f:70:af:88:ac:e1:
                    cc:a8:ea:7b:8c:3f:0c:ff:78:38:79:6f:cc:17:cd:
                    12:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:02:66:E4:A5:91:82:F4:71:1F:14:9C:80:A8:4E:A1:C0:03:93:18
            X509v3 Authority Key Identifier:
                keyid:B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/4625A21A68B511EA9EF7951AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.64.0/22
                IPv6:
                  2401:dd00::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:41:f5:5b:e8:d7:ff:5c:7c:03:fe:03:74:fd:62:1e:a1:2d:
         ec:9f:cf:89:c3:ba:26:ae:05:e1:6d:fc:39:a3:de:91:8f:e6:
         62:f2:de:20:03:e8:ab:a5:45:5f:e3:0c:7e:cc:0d:e3:d7:2f:
         e2:6f:a2:84:33:b6:30:66:18:11:b9:61:82:bb:ab:28:6c:ce:
         24:00:b8:e7:f8:68:bc:4f:3d:c4:d7:f6:3b:ae:d2:4c:e1:28:
         64:e0:8f:c0:15:28:82:2a:6e:ec:4c:84:83:75:93:64:3e:d9:
         40:f8:f5:1b:2f:3d:69:c7:0c:e7:6a:6e:3f:db:b1:dd:2f:f1:
         f1:a3:2c:b1:28:b1:e5:6d:77:5d:81:07:49:58:b6:89:25:b6:
         1b:55:af:c7:a6:ac:dc:42:c4:72:b3:fd:fb:f0:1d:51:68:20:
         b3:29:5c:17:26:66:0d:4d:6c:3a:42:f1:54:28:d4:a6:b5:94:
         c2:1c:f9:40:4b:82:37:bc:8f:46:8f:5c:a3:cb:6c:f3:b9:fb:
         9e:4e:dd:16:44:a7:34:67:97:2a:a7:c8:6a:7b:c3:9a:33:21:
         95:72:15:25:2e:ba:a8:1a:38:78:4e:b8:5d:7f:f4:b7:7c:90:
         34:b3:6d:f5:81:a5:b7:22:0a:d9:b5:66:f2:fe:de:3e:7f:8c:
         4e:44:b5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:23:06 2024 by rpki-client on console-ams.rpki-client.org