Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/5D65041A1BD711EEB9597921C4F9AE02.roa
File:                     5D65041A1BD711EEB9597921C4F9AE02.roa (raw, json)
Hash identifier:          vHrgNX9aGSMmw36LvoyaFMqRdBF/bukZvyTby0Vnz6E=
Subject key identifier:   99:63:FA:33:B8:D6:97:61:22:29:E5:94:B7:39:2A:21:20:A0:AB:95
Certificate issuer:       /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial:       052F
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/5D65041A1BD711EEB9597921C4F9AE02.roa
Signing time:             Fri 13 Oct 2023 00:53:01 +0000
ROA not before:           Fri 13 Oct 2023 00:53:01 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     146952
IP address blocks:        103.48.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
                          rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 00:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1327 (0x52f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
        Validity
            Not Before: Oct 13 00:53:01 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=652894ed-cc52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e1:c6:c7:2b:64:84:43:55:8e:13:ff:dc:a2:
                    7e:6a:d8:c4:d6:5d:f5:51:dc:9a:c9:fa:fb:88:51:
                    f2:9e:65:85:05:b2:79:00:02:70:99:6f:85:c2:10:
                    e4:17:b5:3c:df:e2:45:fb:91:8a:46:60:64:f0:0c:
                    4d:6d:e6:e6:14:62:71:34:09:17:08:5b:bd:28:5f:
                    82:e3:75:d9:a3:3a:37:d7:b7:da:d4:8a:7c:57:8f:
                    48:83:c4:9d:ae:76:13:73:84:37:60:71:fb:ff:57:
                    c6:ac:71:27:e0:5a:70:43:bb:ce:79:fb:3b:35:16:
                    9a:e4:27:a7:3d:78:79:d7:52:bf:df:c0:f1:82:3c:
                    9d:bf:d6:e3:6c:21:31:e4:6d:92:0f:f0:b2:e4:98:
                    b2:ac:ec:45:04:33:d3:87:49:2f:c8:7c:5c:e6:c8:
                    b9:fa:5e:1e:cd:0e:61:38:a4:1c:5f:92:5d:e7:b8:
                    8a:c9:d7:19:22:74:a4:1b:0f:a9:1e:8a:a8:3f:c4:
                    81:29:b4:63:f5:8f:ff:22:28:c1:84:3e:96:87:6d:
                    34:d8:86:c2:3d:ca:bc:08:4d:2e:8e:51:f2:78:e4:
                    2f:f4:2e:c0:02:25:a5:4f:c1:2b:dc:b8:1d:68:f0:
                    a3:6e:4d:bf:82:99:14:31:7c:ec:0d:21:58:bc:6f:
                    12:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:63:FA:33:B8:D6:97:61:22:29:E5:94:B7:39:2A:21:20:A0:AB:95
            X509v3 Authority Key Identifier:
                keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/5D65041A1BD711EEB9597921C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.48.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:3f:a8:f5:b1:c0:01:92:95:71:43:47:53:d9:9c:8c:fd:7f:
         d6:d5:2b:dc:9c:35:3b:25:d6:94:13:4f:b1:40:18:b6:21:23:
         cd:70:65:fd:63:00:05:d6:30:5d:0c:93:a9:6e:79:1c:5f:b7:
         9b:97:04:bb:a5:6f:37:32:aa:bd:38:00:02:be:cd:c2:4e:46:
         e6:05:5a:bb:72:8d:04:3b:5a:2f:2d:0f:cd:02:9a:d4:a0:50:
         9d:ce:a7:71:e3:f5:1f:d9:00:bb:8e:61:33:7e:ed:62:9f:2c:
         9e:28:07:fd:15:8b:48:a0:48:8f:6e:2e:84:66:4e:bc:fd:22:
         88:ce:50:24:7f:a2:1f:e3:49:61:0e:a8:24:a9:30:fd:a3:44:
         56:22:90:c6:bf:4c:29:c3:50:b0:4e:bf:9e:31:13:09:9e:51:
         db:36:b4:dc:a9:4d:92:e8:5a:cd:51:34:be:b3:49:e8:e3:19:
         a0:15:7e:52:f9:cc:7e:e9:a1:7c:8e:6e:82:a3:8c:72:d3:25:
         b5:e8:fc:d3:5c:9f:12:58:11:ca:ba:1c:bc:0b:87:37:77:64:
         57:28:43:b5:cf:23:37:66:78:e4:f7:a0:46:9f:43:27:db:e4:
         c3:36:1e:bb:fa:8b:c2:73:ed:66:4a:85:8a:b0:9e:cd:25:ed:
         11:0d:22:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:38:37 2024 by rpki-client on console-fra.rpki-client.org