Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/46493600A91511ED9E2AC948C4F9AE02.roa
File:                     46493600A91511ED9E2AC948C4F9AE02.roa (raw, json)
Hash identifier:          iEB6DV8RI7bxD9fHnYHW6Ce+qF781wbAtJi85ByWjQw=
Subject key identifier:   FE:27:0A:D9:C9:F5:25:57:24:B5:40:E8:3F:FE:52:9A:3A:D4:34:DD
Certificate issuer:       /CN=A913C40D/serialNumber=8C3814723FC755E9A9BA1BC335664A519BBC1CEE
Certificate serial:       038C
Authority key identifier: 8C:38:14:72:3F:C7:55:E9:A9:BA:1B:C3:35:66:4A:51:9B:BC:1C:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/46493600A91511ED9E2AC948C4F9AE02.roa
Signing time:             Sat 09 Dec 2023 01:53:27 +0000
ROA not before:           Sat 09 Dec 2023 01:53:27 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     55020
IP address blocks:        43.251.224.0/22 maxlen: 24
                          103.43.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.crl
                          rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 02:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 908 (0x38c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C40D/serialNumber=8C3814723FC755E9A9BA1BC335664A519BBC1CEE
        Validity
            Not Before: Dec  9 01:53:27 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6573c897-57af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f1:f5:41:56:96:73:a3:c8:98:6c:34:73:c1:
                    3c:be:73:a5:9e:1e:e2:2b:d4:73:e5:76:cd:45:43:
                    86:8a:d7:1e:0d:05:aa:cd:dd:1b:0e:e0:6a:cb:43:
                    39:7a:99:56:35:ea:2b:63:8c:4f:ad:0a:b4:78:f2:
                    7b:02:bb:57:1e:67:7f:c4:ff:42:3a:6f:74:47:1a:
                    37:60:32:93:af:f2:e1:66:ad:37:e4:db:c9:ec:87:
                    c5:aa:10:54:27:87:94:24:23:31:4a:ce:3b:79:4f:
                    b1:c9:a1:cd:a2:47:cf:55:27:b0:e6:88:9a:0d:7b:
                    7c:8c:79:8e:99:af:e8:aa:6d:64:10:be:0c:50:88:
                    8c:92:39:83:99:83:30:87:e7:cb:69:a9:ab:b7:17:
                    95:4d:51:e4:5c:6c:5c:b3:c4:93:21:6f:58:c1:ce:
                    f8:2c:4d:1d:9d:17:94:55:f8:05:b3:ce:c3:78:4f:
                    25:db:eb:ea:68:ce:39:bf:5c:f8:36:bb:f8:17:d2:
                    a9:a6:d8:98:46:48:a5:9f:9f:d5:84:b8:a5:ce:93:
                    c3:4c:d0:71:5a:e3:ff:dd:b8:bd:f3:7a:39:f9:a0:
                    92:b0:47:fd:5b:02:40:19:37:ea:e5:e9:d2:da:62:
                    1f:ae:8e:68:5b:da:fa:6f:a1:a2:7a:f5:7d:44:8e:
                    5b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:27:0A:D9:C9:F5:25:57:24:B5:40:E8:3F:FE:52:9A:3A:D4:34:DD
            X509v3 Authority Key Identifier:
                keyid:8C:38:14:72:3F:C7:55:E9:A9:BA:1B:C3:35:66:4A:51:9B:BC:1C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/46493600A91511ED9E2AC948C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.251.224.0/22
                  103.43.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:33:a6:a8:c9:ed:85:df:67:b4:14:96:05:bb:ec:a8:d4:87:
         57:0f:72:0b:2b:85:cd:40:13:0d:ad:c4:44:95:f0:5e:d4:86:
         f4:f2:ca:59:e9:7d:16:bc:a7:93:f6:a3:46:94:58:80:3a:e8:
         4f:b2:26:92:04:a5:0d:0e:95:f9:30:c4:f2:06:bf:a7:39:49:
         c6:ed:97:fb:6b:c4:98:98:63:b1:4b:54:81:8b:99:b9:7b:d1:
         ac:b1:55:5a:a5:64:fd:65:76:48:6a:e6:a0:84:77:c3:5d:e3:
         18:b5:b3:ed:d1:75:61:98:6a:75:67:f5:f3:49:85:94:af:8a:
         d1:19:36:5d:fb:91:ef:36:2c:5c:c8:73:84:50:ab:e5:f2:1f:
         66:5d:92:06:06:8b:ab:f3:0d:ca:23:48:b9:64:24:fc:dc:a4:
         3e:00:79:15:32:0f:19:af:6c:a1:02:23:82:3f:ac:46:98:9c:
         08:2a:90:51:f7:88:e2:18:a6:e6:aa:d2:52:da:d5:39:d2:2e:
         c9:2c:74:69:9e:e7:75:fd:bd:47:83:d9:75:e7:ba:31:a9:79:
         e8:6a:3f:6b:1e:a6:77:0b:28:56:68:35:ed:fd:ef:70:48:af:
         27:b9:46:6e:42:22:4a:a2:5d:26:06:3a:74:ea:27:52:20:4c:
         f0:5c:cb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 03:47:42 2024 by rpki-client on console-fra.rpki-client.org