Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/A8C501F61B2A11EE84F40B3AC4F9AE02.roa
File:                     A8C501F61B2A11EE84F40B3AC4F9AE02.roa (raw, json)
Hash identifier:          qxnwJg8IFQzglpT6JsIB6JuKL16Bl6FnMy8IuEKj94o=
Subject key identifier:   C0:78:11:1B:19:C3:22:1E:81:91:EB:59:17:67:C8:7B:3F:76:79:D1
Certificate issuer:       /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Certificate serial:       7C
Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/A8C501F61B2A11EE84F40B3AC4F9AE02.roa
Signing time:             Fri 09 Feb 2024 06:08:01 +0000
ROA not before:           Fri 09 Feb 2024 06:08:01 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     14618
IP address blocks:        103.73.186.0/24 maxlen: 24
                          103.73.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
                          rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 06:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
        Validity
            Not Before: Feb  9 06:08:01 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65c5c141-713c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:01:c8:1d:c2:12:c6:fc:f1:17:04:80:f5:9e:
                    3c:f5:c8:dc:fc:2f:47:6c:c6:b3:3c:4d:51:5c:87:
                    86:b1:cf:e9:7b:5a:98:38:97:51:f3:48:0a:ac:97:
                    f5:9c:e5:97:71:76:74:60:0e:8f:85:ba:0c:ba:00:
                    b0:c7:17:d0:bc:1a:d6:a0:27:92:96:ca:58:08:87:
                    d5:ca:68:d5:91:a2:92:f4:88:9f:90:bd:88:9b:2d:
                    cb:f7:94:0d:05:9e:1b:4e:8a:d0:ee:ef:0a:87:15:
                    5c:9e:c3:5c:e6:e5:5e:20:61:01:03:7c:71:5c:e2:
                    6a:d7:97:56:55:5f:70:46:51:68:92:2c:8b:f1:e2:
                    08:fe:b3:85:ba:3d:13:ec:7a:61:3e:00:1c:5e:65:
                    96:01:0a:37:a7:63:9a:af:93:2d:7a:7e:57:f9:f0:
                    0a:e0:40:52:f8:14:fb:d3:1e:52:ff:ea:29:71:6d:
                    8c:5f:24:9e:cb:5b:d5:70:b0:8e:b7:86:73:c0:28:
                    7e:11:3c:e1:3f:d8:62:fc:0b:6a:0d:b1:db:67:be:
                    83:a1:bc:69:94:36:53:11:b8:07:ee:e2:b2:0a:09:
                    ae:d7:c7:aa:48:71:11:af:8b:0c:3a:cb:08:a1:f7:
                    37:b7:17:4b:a9:5b:7d:56:7d:ce:a1:14:da:54:50:
                    25:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:78:11:1B:19:C3:22:1E:81:91:EB:59:17:67:C8:7B:3F:76:79:D1
            X509v3 Authority Key Identifier:
                keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/A8C501F61B2A11EE84F40B3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:d6:5d:5c:a6:cb:b8:cf:5a:cb:47:7c:bc:30:51:78:dc:18:
         46:e5:f4:2a:75:0c:2c:63:af:13:82:80:15:de:af:44:7f:3c:
         f2:57:77:fb:db:89:fe:72:1d:c1:72:3b:e8:81:fd:17:7b:bb:
         06:46:7e:55:94:61:78:4e:95:39:63:c8:a1:b7:59:57:f5:28:
         0b:07:91:4c:d5:2a:8e:58:4e:38:21:0e:83:e7:16:cc:dd:45:
         91:93:95:a5:f4:bd:55:9b:7c:ed:09:ee:3c:60:6f:16:c0:30:
         3d:7d:01:b4:66:f1:1e:2f:5b:58:32:2a:60:92:7c:fa:33:20:
         cb:c9:71:84:30:e9:88:e4:73:94:a4:84:d8:28:46:d7:22:42:
         cc:58:51:39:45:d0:71:d2:b9:c4:ca:d0:dd:0c:c8:63:c5:46:
         54:97:bf:a6:d4:94:12:90:3d:d7:a0:a8:f6:be:2e:6c:54:92:
         4c:46:dc:5d:3b:6d:cb:6e:8f:cb:c6:af:f9:06:41:a7:9f:b8:
         0b:58:c9:dc:9b:92:c5:e1:84:cb:4a:5e:2e:95:6d:bb:c5:71:
         35:4f:dd:66:1d:fe:12:fa:f3:d7:1f:16:89:5b:e2:2b:02:c5:
         b0:38:01:4f:56:9f:5d:10:72:14:ed:aa:d3:01:95:27:3a:82:
         7d:2d:39:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 08:05:03 2024 by rpki-client on console-ams.rpki-client.org