Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/74897CC0622A11EBA8BA0B7EC4F9AE02.roa
File:                     74897CC0622A11EBA8BA0B7EC4F9AE02.roa (raw, json)
Hash identifier:          LHDbj/hV/cUaeJllia6zIhntNzxDgCaw+1JA8dG5siY=
Subject key identifier:   D5:AF:4A:5C:0D:3F:82:24:E2:11:A8:1A:13:35:58:F3:B3:9A:63:11
Certificate issuer:       /CN=A91300ED/serialNumber=7CA750CC099077D4B43290A76283AB7BF0B64A68
Certificate serial:       05D4
Authority key identifier: 7C:A7:50:CC:09:90:77:D4:B4:32:90:A7:62:83:AB:7B:F0:B6:4A:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/74897CC0622A11EBA8BA0B7EC4F9AE02.roa
Signing time:             Thu 14 Mar 2024 23:42:29 +0000
ROA not before:           Thu 14 Mar 2024 23:42:29 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     141701
IP address blocks:        103.162.58.0/24 maxlen: 24
                          103.162.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.crl
                          rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 23:20:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1492 (0x5d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91300ED/serialNumber=7CA750CC099077D4B43290A76283AB7BF0B64A68
        Validity
            Not Before: Mar 14 23:42:29 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65f38b64-e26b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d1:ca:c1:9f:12:59:b7:3e:c2:ad:d8:0d:e6:
                    20:94:ed:27:8d:39:fc:06:99:a4:3b:3d:bf:07:d9:
                    c3:e0:e6:d3:2f:96:4e:57:9a:b6:12:c9:dd:a4:be:
                    c1:af:92:8b:c2:be:71:96:b2:da:0c:da:eb:fd:ab:
                    97:7f:f6:a8:d6:3b:2c:c5:ae:37:a3:14:f0:c0:19:
                    47:fd:dd:f6:4a:2b:d7:3b:33:7a:09:b3:d9:03:13:
                    36:e9:c9:1f:e2:f5:97:ff:fc:85:39:71:6d:87:f1:
                    a7:32:9e:b5:9c:bd:f5:a4:02:3a:21:ec:b5:ab:ca:
                    f3:d3:e8:b1:6d:09:99:ce:ea:d5:b6:fb:43:d4:97:
                    77:92:5f:a7:40:66:53:10:c5:e4:3e:19:f2:78:bd:
                    8d:04:25:6f:1e:06:be:80:4b:85:be:11:f5:78:f5:
                    89:ce:e9:74:00:03:87:29:84:f3:88:ad:89:f3:4d:
                    37:1f:f5:21:cb:5f:a5:25:dd:a5:6b:b2:43:49:8b:
                    d6:84:de:9a:83:c3:18:de:7a:b1:75:65:06:f6:22:
                    b7:db:6b:e3:84:20:a9:1e:e0:5a:69:bc:55:9f:a5:
                    2f:04:a5:0e:73:f2:9f:76:3b:5a:c7:e1:eb:7c:e2:
                    68:93:ef:df:0d:b7:0e:1a:a8:c5:ef:69:48:a7:38:
                    34:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AF:4A:5C:0D:3F:82:24:E2:11:A8:1A:13:35:58:F3:B3:9A:63:11
            X509v3 Authority Key Identifier:
                keyid:7C:A7:50:CC:09:90:77:D4:B4:32:90:A7:62:83:AB:7B:F0:B6:4A:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/74897CC0622A11EBA8BA0B7EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:fb:c7:1b:06:8a:e2:b2:c3:24:11:2f:5d:62:1c:50:8b:03:
         99:d1:d3:57:dc:3a:d7:53:7a:5b:d4:02:80:ff:46:d7:77:ca:
         ad:e1:03:60:5a:43:3e:91:00:b0:5e:3c:cb:f3:e2:ce:c1:42:
         5e:27:14:95:7e:6b:1f:82:18:dc:8e:66:13:c4:01:fe:8d:a4:
         85:6c:67:33:f7:48:97:b8:a1:d6:a1:4f:24:66:3a:9f:35:a0:
         60:5c:a2:b4:1e:f3:3f:b5:7d:9a:fc:93:be:b4:ec:4b:b5:9f:
         07:f6:a4:3a:95:4e:33:93:0b:00:2b:38:f0:02:2d:d2:80:13:
         fe:c2:1a:37:01:f7:9d:6c:1e:dd:95:b0:cb:d8:d4:27:88:8a:
         0c:fd:aa:ea:16:83:22:84:c1:25:9a:7d:30:de:98:ef:9c:6c:
         a1:ef:6c:cd:cb:96:e0:1c:58:8c:28:3f:c4:8a:76:cb:73:48:
         f9:6a:f7:42:67:36:bd:2a:39:8a:8e:30:56:2f:fd:09:3d:30:
         b2:a3:8c:30:07:ed:38:4d:88:12:c8:c8:97:e1:f5:f3:16:b7:
         c4:5c:59:08:95:98:e3:70:d3:f1:0f:c0:1b:04:97:97:cd:f7:
         0b:30:90:c1:e5:13:07:fe:46:4a:02:ab:63:5d:18:35:77:f4:
         e5:b1:ef:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 00:53:15 2024 by rpki-client on console-ams.rpki-client.org