Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/D479653E5F2911EDB481A53EC4F9AE02.roa
File:                     D479653E5F2911EDB481A53EC4F9AE02.roa (raw, json)
Hash identifier:          +DHv0TsS0BTgWMTGKL7AqwoeixABhUbNIevclE5IwxI=
Subject key identifier:   EC:4F:A4:7D:4B:9A:57:A0:6B:CD:B4:39:B5:84:AD:21:6B:0D:E3:DF
Certificate issuer:       /CN=A913814E/serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1
Certificate serial:       60
Authority key identifier: CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/D479653E5F2911EDB481A53EC4F9AE02.roa
Signing time:             Tue 09 May 2023 05:07:36 +0000
ROA not before:           Tue 09 May 2023 05:07:36 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     135405
IP address blocks:        103.217.156.0/24 maxlen: 24
                          103.217.157.0/24 maxlen: 24
                          103.217.158.0/24 maxlen: 24
                          103.217.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl
                          rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 05:18:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913814E/serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1
        Validity
            Not Before: May  9 05:07:36 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6459d518-94ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ed:b8:1d:d3:03:ee:c0:8c:92:fd:ed:43:1d:
                    8f:91:b1:4a:a2:ed:3b:29:f5:27:6d:7d:7c:b2:7a:
                    77:2d:3f:d6:e2:b6:17:88:77:51:d5:6b:ee:19:a1:
                    3f:d0:2d:a0:fb:89:cb:4c:d3:72:1e:77:a5:39:d9:
                    74:3f:f8:b1:5c:dd:0b:62:37:d7:70:6f:36:05:d4:
                    4a:42:12:e7:b0:6c:1a:74:a5:67:1f:39:3d:67:3f:
                    6d:d5:1d:fc:13:8b:2f:f2:9d:7c:5f:1e:84:04:3d:
                    99:3b:0e:36:93:ee:a4:43:16:15:ec:30:3a:2b:e4:
                    d3:37:c7:55:b0:0f:44:10:59:d6:49:9b:85:58:04:
                    41:81:c7:e2:4a:19:e9:c2:dd:5a:07:fb:8c:8e:0a:
                    64:be:4c:5f:64:d1:1c:47:dc:90:9c:6b:a2:18:0b:
                    2b:1c:39:80:a1:50:71:7c:5f:12:f6:67:f6:79:44:
                    bb:2b:44:64:74:4a:b4:89:4e:40:34:08:1b:62:15:
                    d2:fb:5e:30:3a:39:4c:6c:c7:f4:2c:15:db:9f:81:
                    5b:6f:44:9a:49:b7:53:81:81:dd:4c:30:ec:94:94:
                    f8:52:08:25:0d:fe:1b:7b:8f:ef:a5:4f:29:12:af:
                    10:5c:6c:de:1d:79:19:e3:00:3e:a2:37:15:6e:01:
                    6e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4F:A4:7D:4B:9A:57:A0:6B:CD:B4:39:B5:84:AD:21:6B:0D:E3:DF
            X509v3 Authority Key Identifier:
                keyid:CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/D479653E5F2911EDB481A53EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.217.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:39:2b:8e:78:10:66:35:45:b1:fa:0c:25:40:d0:48:54:e5:
         4b:34:aa:fe:e3:92:41:eb:c6:0a:05:4f:43:c9:42:67:1a:d6:
         83:26:71:3a:0a:7f:67:ca:e8:92:b9:e2:16:08:d4:b9:08:19:
         2b:24:46:78:36:ca:fa:cb:59:c5:23:d7:80:cc:2a:ff:39:fa:
         d4:d7:15:0a:77:03:ff:fb:8f:20:7f:a8:91:3b:b7:d4:91:e5:
         99:15:12:a2:43:4b:96:e8:8d:11:c0:56:52:95:ec:36:c1:d7:
         07:d4:64:3e:57:10:0f:c8:0c:82:64:dc:23:aa:ae:05:02:e5:
         bf:b8:de:31:67:b0:fe:5d:df:bb:b3:ef:08:39:0d:ca:db:6f:
         ac:c2:c9:cd:63:35:48:44:e8:4d:77:d0:26:46:14:6d:14:93:
         17:48:bb:56:56:be:e0:fb:63:3c:a3:23:09:1b:34:83:52:78:
         18:5b:bf:b4:ac:a4:c6:53:29:33:97:57:77:81:12:aa:dc:38:
         d1:eb:78:79:27:f1:af:58:a1:58:9b:a5:90:40:d3:91:04:3e:
         46:2b:b2:7f:c2:09:3a:e3:bd:14:f8:0f:d3:4d:50:4b:81:cd:
         44:dc:28:c8:5d:32:70:c2:9d:7d:3e:92:2b:bc:4e:4a:13:fe:
         0b:1d:85:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:18:05 2024 by rpki-client on console-fra.rpki-client.org