Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/83882F7AF83B11ECB4154E31C4F9AE02.roa
File:                     83882F7AF83B11ECB4154E31C4F9AE02.roa (raw, json)
Hash identifier:          EhSHrFVVtHL5lFFl+aVbUcLo1qXdi3FAtdOJlX814u4=
Subject key identifier:   09:65:56:AE:B2:64:EB:CF:97:65:AE:36:6D:66:99:BB:6E:A5:B0:D7
Certificate issuer:       /CN=A911E6CA/serialNumber=76B9D339FACD62B47E93E8884DE850396DBCEFB4
Certificate serial:       09F3
Authority key identifier: 76:B9:D3:39:FA:CD:62:B4:7E:93:E8:88:4D:E8:50:39:6D:BC:EF:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/83882F7AF83B11ECB4154E31C4F9AE02.roa
Signing time:             Thu 08 Feb 2024 20:38:31 +0000
ROA not before:           Thu 08 Feb 2024 20:38:31 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     55492
IP address blocks:        103.136.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.crl
                          rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 20:49:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2547 (0x9f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E6CA/serialNumber=76B9D339FACD62B47E93E8884DE850396DBCEFB4
        Validity
            Not Before: Feb  8 20:38:31 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65c53bc7-ec80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7d:22:da:e6:81:72:a0:f4:f1:b2:c3:0f:67:
                    8b:e6:8b:41:47:e7:e3:d4:70:09:7e:9f:b2:92:6a:
                    7b:8c:27:9c:f4:f4:36:ea:2b:a6:66:3a:67:3f:df:
                    c8:e1:0e:1d:1b:e6:c8:cf:ee:70:e1:a4:49:fa:fa:
                    f3:7f:18:c6:71:ff:ff:b3:bb:02:b4:b7:b1:15:7e:
                    04:d1:6e:c3:88:04:20:e0:da:ef:5f:a8:ea:e0:d5:
                    c2:7f:3f:ec:62:20:b9:6a:60:cb:59:11:02:06:30:
                    df:65:5b:69:8d:d7:ea:54:a6:f2:db:ad:d9:0d:02:
                    1f:66:af:74:4a:11:51:44:58:8f:6d:ef:fd:dd:d6:
                    aa:0d:88:30:31:a0:fe:43:4e:06:8a:bf:62:65:24:
                    08:44:0b:cf:a5:2b:9d:0e:e4:18:72:96:b8:1b:22:
                    f7:aa:25:d5:f8:b8:1e:52:3f:e4:2b:6c:46:ea:d3:
                    2d:37:d9:fa:d8:75:fe:03:7f:2e:61:54:8c:76:56:
                    dd:90:72:8a:fd:b0:fc:cc:43:70:88:d4:c9:c9:dd:
                    9b:32:53:9f:6e:09:db:82:d4:51:67:9b:e1:54:82:
                    f6:d7:93:50:52:1b:13:c1:0a:ad:e2:47:94:fb:fb:
                    4c:99:b6:2e:a9:9e:31:8b:7e:d4:af:64:26:12:6e:
                    6e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:65:56:AE:B2:64:EB:CF:97:65:AE:36:6D:66:99:BB:6E:A5:B0:D7
            X509v3 Authority Key Identifier:
                keyid:76:B9:D3:39:FA:CD:62:B4:7E:93:E8:88:4D:E8:50:39:6D:BC:EF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/83882F7AF83B11ECB4154E31C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:a4:0f:3a:24:7d:bc:fc:a2:c8:1f:c1:aa:96:33:a4:06:f7:
         a5:f3:ee:fc:22:c1:e2:0c:13:77:50:70:04:4b:55:a8:80:f0:
         b8:0d:8b:51:49:90:62:22:c5:66:68:a9:95:05:4f:93:d4:fb:
         21:1b:d0:c8:ac:44:a4:ed:8d:f0:58:08:fc:56:6b:56:c5:cb:
         10:8a:7c:d2:09:35:7b:16:88:9e:ca:fb:81:8f:57:cd:4e:bc:
         ed:cc:d9:e8:26:3f:23:c6:b0:eb:a5:27:93:df:eb:30:39:90:
         a2:0a:fa:05:41:1d:85:15:6f:5c:2f:7f:b7:d0:6e:72:cd:a3:
         8a:f3:35:6a:74:b5:2b:52:2d:57:6c:49:31:3d:46:b8:06:20:
         39:79:3c:9a:05:63:35:d8:b9:42:7d:3a:1f:bc:a8:76:e3:92:
         16:74:0e:87:7b:6d:f9:ae:c9:eb:10:24:19:07:c3:96:d2:c9:
         83:b4:e1:7f:17:20:2a:f0:5d:f4:ce:96:0a:90:ad:f7:2d:30:
         24:84:64:54:73:4c:09:30:83:00:ce:92:89:06:8c:7b:a7:97:
         54:5a:6b:a7:67:d7:33:0e:7e:93:42:da:0a:db:2d:59:ba:9c:
         fa:28:9d:0b:59:73:8b:06:8c:a4:b3:5e:59:43:fc:8c:f8:a1:
         f7:c8:70:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 22:51:16 2024 by rpki-client on console-ams.rpki-client.org