Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/C00CB30A87A711EA94E5CF22C4F9AE02.roa
File:                     C00CB30A87A711EA94E5CF22C4F9AE02.roa (raw, json)
Hash identifier:          H7UiCPtCv14knct6AsSW1QeCOme/Hfazm/MFSslpfgQ=
Subject key identifier:   71:88:84:A3:34:A8:F3:61:44:0F:DF:4C:BF:DE:85:8F:D7:63:C3:1D
Certificate issuer:       /CN=A913E504/serialNumber=EB0EBB6651BDD00627396742FF1A0B4EA0FDE2E5
Certificate serial:       175B
Authority key identifier: EB:0E:BB:66:51:BD:D0:06:27:39:67:42:FF:1A:0B:4E:A0:FD:E2:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6w67ZlG90AYnOWdC_xoLTqD94uU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/C00CB30A87A711EA94E5CF22C4F9AE02.roa
Signing time:             Tue 08 Aug 2023 16:54:07 +0000
ROA not before:           Tue 08 Aug 2023 16:54:07 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     136794
IP address blocks:        103.96.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.crl
                          rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6w67ZlG90AYnOWdC_xoLTqD94uU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5979 (0x175b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E504/serialNumber=EB0EBB6651BDD00627396742FF1A0B4EA0FDE2E5
        Validity
            Not Before: Aug  8 16:54:07 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64d2732f-cb3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4b:b4:1d:cf:b2:14:f2:60:63:07:93:7b:2e:
                    7d:b6:e7:88:ed:15:c3:a6:78:d9:16:b1:46:79:a2:
                    7f:c9:43:0c:66:53:02:52:f1:ad:3d:f3:47:37:ab:
                    83:8c:aa:b6:fb:3c:39:25:c7:c6:16:c0:b5:65:2d:
                    2c:b5:3e:ec:d0:61:89:0c:03:15:9c:d0:c2:62:36:
                    b6:be:11:69:39:f3:81:4f:ae:ee:d6:d0:42:b6:94:
                    e0:a9:51:14:1e:22:0a:72:69:91:23:03:77:4e:ac:
                    a5:41:24:b4:fe:99:92:07:b2:60:0c:90:ee:94:62:
                    fc:4d:8d:7b:40:5d:76:31:23:2f:cf:bb:bf:90:ac:
                    18:eb:d1:34:35:86:1f:32:25:79:d9:19:bd:a7:d6:
                    fe:1a:95:49:3e:1c:5c:f3:ff:a7:96:48:50:ec:a3:
                    9f:d3:11:19:e3:d8:1f:24:06:4d:bc:76:02:e2:0d:
                    e5:9c:cc:df:34:cf:c8:93:53:1d:4e:e2:71:13:57:
                    a0:86:3d:23:b5:5c:a3:42:4f:53:78:a6:75:8e:07:
                    5e:4c:4c:2b:8e:26:ee:fd:68:34:4a:48:0f:bc:5e:
                    75:6e:1e:90:93:2f:a6:95:8e:53:97:7b:22:c8:d0:
                    a2:43:f5:1d:cf:8b:27:d9:d9:60:dd:db:82:5b:38:
                    b5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:88:84:A3:34:A8:F3:61:44:0F:DF:4C:BF:DE:85:8F:D7:63:C3:1D
            X509v3 Authority Key Identifier:
                keyid:EB:0E:BB:66:51:BD:D0:06:27:39:67:42:FF:1A:0B:4E:A0:FD:E2:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6w67ZlG90AYnOWdC_xoLTqD94uU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/C00CB30A87A711EA94E5CF22C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:d6:79:d2:b3:eb:99:02:d4:47:75:34:47:2b:ab:ef:48:74:
         54:94:08:21:5c:36:76:6a:1f:42:2a:8e:5c:74:d9:16:ea:6b:
         41:78:32:d1:9c:b4:d9:e1:cc:76:08:63:24:b6:86:77:00:8a:
         12:c8:2b:eb:3c:74:a5:87:e6:26:33:a2:11:b4:37:15:94:b4:
         8b:92:f1:0d:68:32:c2:99:68:04:a0:a0:b8:96:b8:81:e9:dd:
         95:22:d8:e3:a9:99:36:5d:28:dc:9f:64:a3:a4:a5:8f:80:0d:
         07:47:d1:d4:3d:45:9e:3e:b3:45:06:0a:61:3e:bc:07:fd:4a:
         3d:72:40:e1:5e:f7:ce:a9:4a:a1:2d:5a:4a:a6:ea:14:0d:8b:
         a8:1f:be:9d:8c:88:0b:3c:ca:31:5b:67:ba:71:f6:75:61:b0:
         3a:9a:01:f1:d8:ac:9a:b3:19:93:48:3b:c6:3a:51:c4:3c:39:
         6d:ed:df:ea:f8:f2:1f:fb:fe:32:e4:25:2a:5b:f6:d5:97:7e:
         12:7b:89:6d:be:55:da:98:08:03:a1:33:17:35:17:1c:04:6c:
         0b:b4:bf:0a:72:17:06:ba:51:60:1f:31:2b:11:bb:80:b9:08:
         bf:c3:b8:53:8c:73:29:f8:f0:a6:d2:36:b6:ab:8d:af:eb:5b:
         ec:bf:11:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:37:32 2024 by rpki-client on console-fra.rpki-client.org