Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/4D962E8AE65111ED90E5833EC4F9AE02.roa
File:                     4D962E8AE65111ED90E5833EC4F9AE02.roa (raw, json)
Hash identifier:          lEiCE2p10mQyaPle/AVLUYsqAZx1ehh1ZxBRoLe3RfM=
Subject key identifier:   D7:AE:26:80:01:88:3B:BD:F8:4D:74:CA:1B:7A:96:CC:0B:6B:FE:D8
Certificate issuer:       /CN=A912A8BC/serialNumber=D5C35FA779B22199609C3EA0A531C5A0D332AD01
Certificate serial:       04
Authority key identifier: D5:C3:5F:A7:79:B2:21:99:60:9C:3E:A0:A5:31:C5:A0:D3:32:AD:01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/4D962E8AE65111ED90E5833EC4F9AE02.roa
Signing time:             Sat 29 Apr 2023 06:07:30 +0000
ROA not before:           Sat 29 Apr 2023 06:07:30 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     151204
IP address blocks:        103.69.94.0/23 maxlen: 24
                          2001:df2:57c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.crl
                          rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A8BC/serialNumber=D5C35FA779B22199609C3EA0A531C5A0D332AD01
        Validity
            Not Before: Apr 29 06:07:30 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=644cb422-1fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:be:9c:96:ec:7c:c8:4e:df:23:f0:21:f9:5b:
                    00:5c:1c:1f:e8:53:db:82:ed:b9:b9:a4:25:a5:bd:
                    bb:4a:6c:5b:03:9a:86:9c:25:0b:63:c9:f7:7c:fa:
                    1d:40:35:99:93:ed:0d:62:62:27:f1:66:b5:aa:80:
                    93:96:9f:15:7f:5b:e4:16:60:9d:90:19:91:d0:49:
                    40:df:f3:81:01:69:22:be:4d:40:58:4e:d0:db:b0:
                    c4:01:8a:79:2c:10:a8:1c:41:32:3d:40:cf:9f:4d:
                    f2:c2:b6:96:7e:eb:73:cd:7b:8a:bc:f7:6f:a4:c9:
                    0f:fd:d3:05:5b:69:ad:8d:b4:27:db:76:ad:17:57:
                    89:a0:9a:f9:f6:48:fc:19:93:4b:61:14:2b:08:61:
                    39:2a:d8:d6:96:ee:3b:9a:12:e5:5a:b9:fe:21:7f:
                    98:71:30:8f:a1:e8:46:9a:46:d2:fd:75:e6:93:51:
                    1d:b2:53:b9:20:63:d5:fc:02:66:c5:e4:a4:60:f1:
                    f7:07:1c:17:98:51:f4:07:00:a6:2c:f3:ed:6d:97:
                    29:e2:e9:94:09:e2:16:a3:4e:1d:42:a2:21:bd:1d:
                    ab:42:47:b4:eb:b6:32:95:71:55:81:c3:f9:f4:0e:
                    09:51:28:2a:55:1b:53:f5:7a:f3:8d:70:f3:b0:82:
                    b7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:AE:26:80:01:88:3B:BD:F8:4D:74:CA:1B:7A:96:CC:0B:6B:FE:D8
            X509v3 Authority Key Identifier:
                keyid:D5:C3:5F:A7:79:B2:21:99:60:9C:3E:A0:A5:31:C5:A0:D3:32:AD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/4D962E8AE65111ED90E5833EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.94.0/23
                IPv6:
                  2001:df2:57c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         c6:c2:fa:73:3c:98:7c:2f:60:10:9a:73:6e:29:bc:c4:f8:94:
         0b:ed:9a:b3:e2:92:53:b9:66:6b:5a:a2:18:dd:f5:61:83:47:
         91:34:b1:99:1e:65:f9:ba:34:58:a0:42:f7:bb:49:c9:ac:15:
         61:f1:43:fe:88:3b:d7:f5:c7:bd:e2:58:54:6d:de:8d:aa:58:
         f6:7a:0b:89:8e:cf:fb:e7:96:46:3b:2b:d9:5a:7e:49:31:65:
         c5:3b:23:c1:20:d2:4a:9b:69:4d:ef:00:66:d9:59:3a:83:65:
         d3:7f:76:ab:13:4d:6e:40:fc:22:ab:aa:51:89:2d:d9:2e:94:
         02:67:12:9a:6e:12:34:d6:17:ee:0f:dd:6f:db:8f:b9:6c:c3:
         3d:52:1e:15:68:5b:a9:6c:7d:d3:a5:2b:86:12:e7:37:83:f6:
         37:a2:38:57:65:98:31:d0:76:f1:50:5f:10:7d:01:7a:0d:b4:
         68:d2:85:83:bc:c2:86:dd:3d:27:6f:a9:2f:aa:67:b2:75:12:
         ea:c1:4c:03:54:44:fb:7e:4b:65:51:05:9e:1f:28:11:3a:b8:
         cb:d1:89:0c:fd:ca:8c:b5:c2:b4:c7:c0:7e:23:d3:15:4c:2f:
         37:7c:80:62:0d:cf:13:8a:b0:1b:f2:d6:d2:c7:74:b6:e7:e7:
         d0:06:1e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:40:37 2024 by rpki-client on console-fra.rpki-client.org