Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/5D22BFDE336611EC8336E659C4F9AE02.roa
File:                     5D22BFDE336611EC8336E659C4F9AE02.roa (raw, json)
Hash identifier:          hx0lpnBs2VG+cKMsdHixKAqSaQq6facDC9WLoPcMTUE=
Subject key identifier:   FA:66:D4:A0:C9:61:3E:34:AA:F2:E0:3B:1B:82:E0:8A:BB:CA:69:5B
Certificate issuer:       /CN=A913DC07/serialNumber=ECAA3D15FA8B14DAAAFE2059A4019B20F527F83D
Certificate serial:       034D
Authority key identifier: EC:AA:3D:15:FA:8B:14:DA:AA:FE:20:59:A4:01:9B:20:F5:27:F8:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/5D22BFDE336611EC8336E659C4F9AE02.roa
Signing time:             Thu 27 Jul 2023 01:22:38 +0000
ROA not before:           Thu 27 Jul 2023 01:22:38 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     139720
IP address blocks:        103.167.16.0/23 maxlen: 23
                          103.167.16.0/24 maxlen: 24
                          103.167.17.0/24 maxlen: 24
                          2001:df6:a280::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.crl
                          rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 02:24:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 845 (0x34d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DC07/serialNumber=ECAA3D15FA8B14DAAAFE2059A4019B20F527F83D
        Validity
            Not Before: Jul 27 01:22:38 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64c1c6de-14d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:79:d2:26:fe:24:d4:10:d4:22:6e:a1:f4:9e:
                    a1:20:78:95:d0:9f:ba:61:82:08:da:b2:13:7f:dd:
                    00:a5:10:b6:33:57:98:fe:1b:13:b4:af:c2:37:f2:
                    a3:a0:92:e4:22:77:7d:3a:99:58:44:e8:97:f9:45:
                    5b:9a:9e:65:cd:f1:57:9c:4a:c0:e3:fd:12:0e:f3:
                    af:be:c0:cf:e5:0d:5e:08:8c:1d:e4:d6:ed:df:ca:
                    07:32:c5:4f:b9:d5:6a:47:f4:3f:f6:40:9f:e6:1d:
                    42:89:46:f7:93:d2:8b:dd:7e:8f:80:c0:2f:03:b0:
                    db:61:90:bd:e8:b9:b6:ae:76:b0:3a:c8:79:12:15:
                    5a:bc:ad:63:f1:7f:2b:1d:db:d7:cd:78:e9:15:53:
                    62:71:91:8f:65:6d:83:ae:35:29:75:80:f0:59:22:
                    6a:f3:19:b9:7e:04:89:43:76:84:fc:39:94:e9:77:
                    73:f9:01:1c:5f:7a:2a:bb:a7:36:a8:04:2c:44:52:
                    15:e2:d4:a2:75:40:03:95:13:3a:b7:8e:1a:dc:e3:
                    fd:9e:95:fb:f8:b6:c6:5c:d9:ce:60:18:72:00:1d:
                    a6:c6:ab:43:5b:2f:d6:69:48:5e:63:e5:00:b0:cb:
                    6b:5d:13:a2:89:a3:2c:cb:7d:89:0d:42:99:01:59:
                    b8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:66:D4:A0:C9:61:3E:34:AA:F2:E0:3B:1B:82:E0:8A:BB:CA:69:5B
            X509v3 Authority Key Identifier:
                keyid:EC:AA:3D:15:FA:8B:14:DA:AA:FE:20:59:A4:01:9B:20:F5:27:F8:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/5D22BFDE336611EC8336E659C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.16.0/23
                IPv6:
                  2001:df6:a280::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:ca:0c:8f:13:41:28:ad:15:46:01:15:db:ca:f8:1d:68:05:
         29:2e:07:76:44:1a:74:db:6b:f0:00:cb:ac:97:c7:9a:f6:10:
         a7:43:3f:5c:22:09:d7:18:3b:05:8e:e0:1c:e6:35:5d:85:35:
         7e:a9:a0:db:78:58:96:7d:26:33:22:2d:30:ac:ac:65:f7:8b:
         7e:e9:fe:da:7d:57:40:ae:1c:19:2d:ab:bc:0f:b5:da:49:28:
         fe:d0:70:bf:b5:fb:00:b3:e7:f9:42:af:10:d7:81:6f:5b:0e:
         e3:e9:40:88:77:37:8c:b5:c8:af:7b:f0:8b:a4:8a:aa:fe:55:
         dd:df:44:2f:49:b4:c8:48:7f:68:50:98:71:90:c0:79:01:c1:
         b8:06:e5:80:62:de:9e:68:5f:38:16:cf:3a:c0:ba:0b:5e:d6:
         c0:5c:e3:82:a7:17:8b:e4:97:0e:a1:67:8b:a9:db:31:71:9c:
         30:09:d2:ae:a2:a1:f8:77:04:e4:dc:e6:ef:22:8c:ad:fe:c8:
         0b:a8:7a:5a:35:c3:db:8d:81:d7:10:3b:14:b7:f7:d1:bf:17:
         1b:98:98:43:bd:f2:35:9d:0e:64:38:78:9c:2b:73:48:21:85:
         7a:e2:29:7f:ba:fe:dd:2b:67:a5:2a:4e:87:59:e3:25:a3:81:
         ba:d8:60:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 05:03:49 2024 by rpki-client on console-ams.rpki-client.org