Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/679A6FA4E53A11EB8197AD70C4F9AE02.roa
File:                     679A6FA4E53A11EB8197AD70C4F9AE02.roa (raw, json)
Hash identifier:          /7XPGV9y4JP2f7sWVqZgTq9njwreZGcpJpiqynxB6Zo=
Subject key identifier:   4D:CB:62:59:4D:4D:28:E8:6F:70:25:F9:C4:8B:E6:1A:E1:71:5F:28
Certificate issuer:       /CN=A913FE3D/serialNumber=A418672296516254CD4CCAD449251E19D1B6E95D
Certificate serial:       041D
Authority key identifier: A4:18:67:22:96:51:62:54:CD:4C:CA:D4:49:25:1E:19:D1:B6:E9:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBhnIpZRYlTNTMrUSSUeGdG26V0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/679A6FA4E53A11EB8197AD70C4F9AE02.roa
Signing time:             Tue 29 Aug 2023 00:41:50 +0000
ROA not before:           Tue 29 Aug 2023 00:41:50 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     142555
IP address blocks:        103.169.68.0/23 maxlen: 23
                          2001:df6:ed80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.crl
                          rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBhnIpZRYlTNTMrUSSUeGdG26V0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 01:34:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1053 (0x41d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FE3D/serialNumber=A418672296516254CD4CCAD449251E19D1B6E95D
        Validity
            Not Before: Aug 29 00:41:50 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64ed3ece-31fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f6:1d:2b:8e:c7:de:48:08:fc:3d:27:9c:ac:
                    cd:a4:08:79:52:95:41:bb:67:0b:18:ae:49:49:a9:
                    1a:e9:09:29:16:27:fe:de:9f:95:77:2e:76:d7:59:
                    b4:cc:d5:f8:11:36:54:32:87:2b:8e:6c:8c:60:f6:
                    a6:d8:00:41:36:94:53:2c:b7:d9:84:59:bf:62:55:
                    39:05:de:f9:80:18:9b:25:6f:a9:80:96:8b:4f:12:
                    0c:c4:2f:4e:4c:59:ce:54:ba:9f:62:35:71:ae:e4:
                    e4:c1:30:c5:2b:2c:57:b1:2d:1d:8b:18:3f:cf:a4:
                    54:75:2b:c2:0d:86:bb:d5:e5:b0:23:5c:de:df:0c:
                    7e:86:54:a8:3e:f5:71:f1:44:98:fb:ed:13:43:3a:
                    25:68:5d:b1:4d:ce:39:8d:c2:60:b6:f6:1c:71:c2:
                    38:36:31:07:6f:ca:07:c8:7d:e4:97:0b:1b:fd:2e:
                    71:8b:e9:d3:b3:0c:33:17:b5:80:9c:f0:bd:18:2a:
                    6c:a0:83:0d:ae:14:5e:82:7f:39:cd:d7:62:15:54:
                    e7:7d:37:5b:48:63:dc:18:eb:cf:07:20:95:aa:a7:
                    99:88:a2:b0:24:14:6d:25:27:63:24:03:7f:ab:95:
                    ca:48:bb:79:ab:be:65:a4:a9:36:b6:28:68:9c:fb:
                    5e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CB:62:59:4D:4D:28:E8:6F:70:25:F9:C4:8B:E6:1A:E1:71:5F:28
            X509v3 Authority Key Identifier:
                keyid:A4:18:67:22:96:51:62:54:CD:4C:CA:D4:49:25:1E:19:D1:B6:E9:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBhnIpZRYlTNTMrUSSUeGdG26V0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/679A6FA4E53A11EB8197AD70C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.68.0/23
                IPv6:
                  2001:df6:ed80::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:ed:c7:23:3b:aa:81:12:34:4b:46:48:2d:de:54:be:58:1d:
         32:78:e6:2c:89:c0:97:56:09:26:98:a1:0b:a3:ac:1f:d1:2c:
         fd:10:d7:7c:a2:31:8c:d8:10:ee:45:35:5f:67:5f:74:b8:04:
         db:ef:54:8b:3c:c5:fb:21:d0:cd:52:c4:aa:3b:b7:de:5e:ec:
         69:54:10:36:77:ff:5f:21:be:c8:c2:2c:fc:ec:18:a8:f3:b4:
         4c:05:47:61:70:98:2c:4d:52:55:1a:a4:50:58:2d:fb:04:07:
         76:6b:fa:98:41:81:a3:e1:d3:f1:f6:d8:53:fc:ae:1a:d4:7d:
         dd:c1:4f:0b:fe:32:38:6b:3f:96:fc:72:f1:fa:f2:d4:27:f9:
         e4:80:6f:83:58:74:32:2a:43:d4:b2:b9:f0:3b:fb:63:b2:5e:
         ca:57:68:c6:23:e0:f7:5e:ee:b4:25:e2:a5:3f:b5:31:88:ff:
         be:f7:cd:99:ec:59:27:0d:1a:f5:7d:a3:2c:82:ab:da:dc:2f:
         5b:1e:5d:43:99:4a:e9:40:88:46:09:a0:3e:5b:f7:c1:60:9a:
         5a:2c:a0:91:be:cb:5a:ec:78:28:28:a5:54:27:af:48:4c:4a:
         22:0f:03:f3:5e:6c:ca:40:68:58:cd:ad:1c:60:fd:56:4c:6c:
         d1:95:fd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:10:19 2024 by rpki-client on console-ams.rpki-client.org