Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/B8B720BEF9EF11EDA3C9C234C4F9AE02.roa
File:                     B8B720BEF9EF11EDA3C9C234C4F9AE02.roa (raw, json)
Hash identifier:          XwrfJzBigjNV7r095BgmzZrchD0Deh4NsLwbBugq+38=
Subject key identifier:   58:01:46:08:AD:57:EF:54:11:01:7E:81:33:C3:8A:9E:7E:BB:18:3D
Certificate issuer:       /CN=A913BBE6/serialNumber=9359DD2E1214EB6BA5622AB3C80B6A9216680CCC
Certificate serial:       04D5
Authority key identifier: 93:59:DD:2E:12:14:EB:6B:A5:62:2A:B3:C8:0B:6A:92:16:68:0C:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1ndLhIU62ulYiqzyAtqkhZoDMw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/B8B720BEF9EF11EDA3C9C234C4F9AE02.roa
Signing time:             Wed 25 Oct 2023 00:12:11 +0000
ROA not before:           Wed 25 Oct 2023 00:12:11 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     132042
IP address blocks:        103.5.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.crl
                          rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1ndLhIU62ulYiqzyAtqkhZoDMw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1237 (0x4d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913BBE6/serialNumber=9359DD2E1214EB6BA5622AB3C80B6A9216680CCC
        Validity
            Not Before: Oct 25 00:12:11 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65385d5a-1e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:04:58:e9:71:76:48:c0:bb:b8:c2:d1:5b:6d:
                    f8:74:94:a3:6e:53:7b:01:0e:9e:74:95:1e:9e:1c:
                    28:30:8a:41:cf:7d:9a:9e:8c:15:31:86:47:55:0e:
                    4e:35:0b:87:ba:26:b1:ea:91:85:59:3b:1d:71:03:
                    14:49:4c:66:15:9b:0d:69:e8:d5:9a:9c:74:29:ca:
                    3f:6b:11:06:f8:7e:a3:af:0b:58:c6:22:51:b4:cc:
                    63:e6:e3:f7:cd:ee:20:37:da:1c:5b:d4:9c:1a:1f:
                    29:22:2b:9f:59:42:ad:3a:cb:c4:05:ee:46:b5:92:
                    d2:df:28:c1:79:4f:e1:07:95:77:44:c0:e8:8a:8c:
                    af:79:bb:78:59:fa:42:e5:0c:30:c9:3f:f1:7b:73:
                    0c:c6:50:3d:8c:45:db:71:d7:bd:63:bb:d0:03:58:
                    db:9a:b6:e6:90:0d:2f:46:ea:36:d1:f5:97:71:81:
                    71:2e:3a:ef:c9:87:54:93:69:8c:8c:a0:4d:91:8a:
                    bf:55:96:07:13:9f:61:19:e6:21:8d:a2:84:01:fd:
                    bc:ef:34:71:41:b9:03:c8:78:e7:93:7a:07:3e:94:
                    f2:50:67:61:3d:c9:08:ce:d6:99:54:e8:ef:aa:da:
                    72:13:cf:0e:8a:38:27:a7:f7:41:22:9f:23:a3:9f:
                    c8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:01:46:08:AD:57:EF:54:11:01:7E:81:33:C3:8A:9E:7E:BB:18:3D
            X509v3 Authority Key Identifier:
                keyid:93:59:DD:2E:12:14:EB:6B:A5:62:2A:B3:C8:0B:6A:92:16:68:0C:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1ndLhIU62ulYiqzyAtqkhZoDMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/B8B720BEF9EF11EDA3C9C234C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:fb:cb:24:cd:34:70:11:ea:5e:ec:95:1e:e1:14:90:e3:47:
         9a:a5:dc:8f:16:17:df:b3:c5:29:20:90:21:26:5e:fe:26:0f:
         fb:51:68:05:f3:2d:7f:70:74:a4:9c:06:36:87:a4:03:c1:19:
         09:ae:8f:89:70:bd:cc:72:8d:8c:45:60:84:4b:83:c5:43:85:
         f8:e4:15:f7:52:c0:57:67:f1:d5:95:5a:36:13:cc:30:e7:34:
         1a:84:d8:4b:48:b4:78:d1:63:1d:3e:75:ac:be:ee:a1:00:4f:
         58:ad:61:90:67:78:62:ce:0f:ca:eb:01:f6:1f:75:1f:90:0c:
         63:64:24:56:92:4e:4e:0c:4f:66:58:e9:f2:c2:7c:65:80:46:
         06:95:b8:bf:15:c2:1d:ce:1f:b1:b7:38:33:e2:85:b2:39:28:
         8c:be:69:4f:13:7a:46:c1:84:76:ee:ea:8c:d6:dc:b8:8e:8d:
         bb:75:60:7b:04:51:68:57:35:fb:db:e0:5f:9b:36:82:cb:2a:
         df:e8:a0:b3:1a:e2:97:8b:07:dd:1c:18:30:97:ff:75:d0:86:
         d7:00:e9:d9:db:3c:f6:33:a3:61:47:94:2f:aa:f9:31:1d:22:
         06:7a:85:84:cd:b6:a3:f3:4d:25:df:ef:d1:03:8d:d6:ab:20:
         b2:7e:0d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:09 2024 by rpki-client on console-ams.rpki-client.org