Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/4ABAD810208D11EAA05C7C3DC4F9AE02.roa
File:                     4ABAD810208D11EAA05C7C3DC4F9AE02.roa (raw, json)
Hash identifier:          dJEaJsJJpDHzwdHNo56OaUGpdykcvI+riSarHcmExbA=
Subject key identifier:   E2:15:9B:FF:3B:AD:CF:8D:5F:7D:4C:04:43:E1:E2:E0:EE:2D:10:F7
Certificate issuer:       /CN=A913BC05/serialNumber=2D5A95F2DA4B1F1C70C6462519FC6F58945FCAB9
Certificate serial:       0A82
Authority key identifier: 2D:5A:95:F2:DA:4B:1F:1C:70:C6:46:25:19:FC:6F:58:94:5F:CA:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVqV8tpLHxxwxkYlGfxvWJRfyrk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/4ABAD810208D11EAA05C7C3DC4F9AE02.roa
Signing time:             Mon 02 Oct 2023 19:37:17 +0000
ROA not before:           Mon 02 Oct 2023 19:37:17 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     58427
IP address blocks:        103.5.172.0/24 maxlen: 24
                          103.5.173.0/24 maxlen: 24
                          103.5.174.0/24 maxlen: 24
                          103.5.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.crl
                          rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVqV8tpLHxxwxkYlGfxvWJRfyrk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 19:33:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2690 (0xa82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913BC05/serialNumber=2D5A95F2DA4B1F1C70C6462519FC6F58945FCAB9
        Validity
            Not Before: Oct  2 19:37:17 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=651b1bed-234b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f2:0d:fd:be:e3:3d:53:f9:7b:0f:f5:ba:88:
                    11:6e:87:c4:fc:9a:ea:f3:12:41:0c:f6:ff:98:26:
                    b2:54:bf:0e:d5:e0:6b:1b:42:5e:a0:9e:4a:a9:97:
                    23:e1:a1:f5:5b:70:67:ee:11:7a:9f:df:d8:fb:dc:
                    2d:05:57:85:7f:59:d8:af:d7:61:02:22:f8:29:ac:
                    84:32:4c:ff:54:a4:fb:9d:a4:6c:a3:34:45:b1:21:
                    8f:53:09:56:da:c5:62:33:3c:f1:44:12:81:ec:5c:
                    8f:ac:83:0c:78:12:a0:d3:7e:75:4d:4e:16:5a:c1:
                    73:e1:be:c1:91:98:be:78:d6:ba:65:50:86:80:e1:
                    34:c9:71:10:b3:68:58:92:d2:a8:3d:07:07:23:05:
                    d2:4b:6a:24:49:c5:c6:a2:17:39:f2:96:2b:a1:92:
                    5c:4f:d6:0c:4f:4e:28:cb:de:a1:8f:9a:49:89:b6:
                    42:24:2b:6b:b1:95:0e:01:6b:b1:3f:d5:d0:36:09:
                    43:ad:a0:01:d5:76:0c:79:9f:39:56:ef:ba:18:57:
                    a8:35:c4:15:f2:9f:35:fd:76:44:3e:df:39:a7:12:
                    a8:e5:74:12:08:62:82:8f:cf:c7:2b:1f:88:e2:66:
                    99:df:13:8d:cf:df:62:98:e2:51:a4:a1:14:64:01:
                    ae:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:15:9B:FF:3B:AD:CF:8D:5F:7D:4C:04:43:E1:E2:E0:EE:2D:10:F7
            X509v3 Authority Key Identifier:
                keyid:2D:5A:95:F2:DA:4B:1F:1C:70:C6:46:25:19:FC:6F:58:94:5F:CA:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVqV8tpLHxxwxkYlGfxvWJRfyrk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/4ABAD810208D11EAA05C7C3DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:a0:ac:ce:95:7e:53:6c:3f:35:58:34:2f:91:e3:ae:4f:06:
         2c:b6:7b:ef:9d:6f:cb:64:21:c6:e0:f2:3a:9d:13:cc:fd:38:
         78:ee:8e:7f:c5:78:a6:53:32:fe:fa:e4:21:a9:60:5e:b0:75:
         b1:66:bb:39:2c:f8:99:ea:a6:aa:6e:26:ea:44:2c:13:67:32:
         3a:98:18:0e:dc:a6:2a:73:b7:d6:db:27:12:8c:70:2e:21:c6:
         2b:20:45:c4:c3:94:bd:76:06:2c:2d:0b:cd:4e:e8:41:0d:89:
         a9:24:35:27:d4:d0:fc:a0:a0:45:af:a7:49:dd:9e:80:60:f8:
         eb:ca:3f:12:6a:98:69:84:7e:e5:0c:89:54:e7:c0:be:0c:3c:
         04:71:cd:1b:95:5a:78:27:23:4e:38:64:81:53:ae:f1:f3:98:
         fc:b6:d9:5a:60:59:d6:39:f7:0e:d8:74:f4:6e:17:ad:43:82:
         cd:4b:ee:00:12:39:76:66:07:37:91:cc:47:29:db:c0:65:ea:
         c9:a1:f1:d5:d6:00:2c:fa:4c:b6:67:b8:db:70:1d:72:97:c2:
         83:5d:16:7a:dd:18:08:8b:4a:ae:9d:7b:74:91:46:80:a8:8a:
         6c:8e:96:4e:37:cd:88:c0:4e:f8:62:a9:79:c7:48:c4:5e:b8:
         c6:94:4d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 20:34:31 2024 by rpki-client on console-ams.rpki-client.org