Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/5475C39A5F7111ECA813E17DC4F9AE02.roa
File:                     5475C39A5F7111ECA813E17DC4F9AE02.roa (raw, json)
Hash identifier:          +D56I4b7nWl9oFXCZLe1V1DGfoh8L2BH9bwrOgGWI6U=
Subject key identifier:   B0:40:C1:01:7D:BD:EB:EF:DA:6F:A4:C6:CE:89:A9:D5:F4:30:34:1A
Certificate issuer:       /CN=A9142A17/serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD
Certificate serial:       036D
Authority key identifier: 39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/5475C39A5F7111ECA813E17DC4F9AE02.roa
Signing time:             Sat 27 Apr 2024 03:16:01 +0000
ROA not before:           Sat 27 Apr 2024 03:16:00 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     206092
IP address blocks:        103.163.220.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl
                          rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 02:47:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 877 (0x36d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A17/serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD
        Validity
            Not Before: Apr 27 03:16:00 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=662c6df0-c528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:de:31:1f:9a:13:d7:13:db:73:e7:9e:45:d5:
                    91:be:a8:3f:06:ee:90:b0:b5:4b:76:fa:c2:9e:77:
                    c5:2d:cb:86:d7:5e:9a:12:12:44:c0:ba:b0:74:c2:
                    82:93:2b:70:cf:fe:52:ed:2a:c2:4f:7a:63:d2:5f:
                    f4:75:47:f6:29:c4:3c:bf:5e:4a:ac:21:14:49:13:
                    67:71:c3:0c:ae:fc:fb:ae:42:7c:24:cc:84:1f:d9:
                    c3:79:0a:20:77:58:47:35:c0:2b:0d:bd:63:ba:d8:
                    24:60:01:c6:8b:22:19:a8:1b:2b:d9:6b:c9:5e:5c:
                    71:42:bf:6b:ed:91:9b:bd:80:79:d9:0d:3a:6e:76:
                    e8:48:ac:6c:21:c3:f9:4b:37:ed:77:c2:42:16:96:
                    95:e3:8e:3a:ef:2c:3a:a6:39:95:b5:c0:4a:bc:eb:
                    2e:08:8f:b8:7a:8f:e6:1c:c8:1c:b1:b0:5a:32:cf:
                    a1:46:09:f4:a2:69:6c:71:f5:58:fe:a4:09:7e:be:
                    55:ee:ca:0a:67:6f:de:44:3a:85:5d:e2:96:27:66:
                    f3:89:0a:de:50:d7:b8:df:5f:55:91:d7:a6:9f:ed:
                    b5:93:53:42:6b:1a:ea:43:9a:56:3a:ed:27:5c:34:
                    b6:8c:9e:73:e9:3e:d6:29:c5:cc:5d:b5:db:c0:29:
                    eb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:40:C1:01:7D:BD:EB:EF:DA:6F:A4:C6:CE:89:A9:D5:F4:30:34:1A
            X509v3 Authority Key Identifier:
                keyid:39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/5475C39A5F7111ECA813E17DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e1:0e:e8:2a:85:88:6d:56:a8:cd:db:90:83:d4:fd:b4:42:f6:
         b9:1e:56:e7:9d:00:f2:62:3f:08:7f:22:6f:ba:de:53:c5:52:
         9a:d2:3f:22:19:a7:2e:fc:95:bb:8c:4d:df:61:55:df:95:ae:
         c4:d3:2d:97:00:f8:a4:72:d9:7b:1f:86:6b:23:b7:5d:d2:1a:
         18:c7:fd:06:6a:7c:5d:95:47:4a:c6:18:f3:da:c8:95:93:9b:
         4d:61:24:58:fa:d3:d2:4d:7e:ea:d7:f4:ec:f6:ff:0f:7f:a0:
         16:77:01:57:30:78:4f:d1:fb:20:2e:59:28:0c:a9:b2:5e:54:
         e1:33:d6:77:f3:ec:4a:5b:e6:8f:eb:eb:33:14:93:8c:b9:1f:
         56:31:d4:87:2e:df:b3:36:c1:89:0a:4a:53:70:2d:06:dc:63:
         fd:1b:82:ba:d8:fc:45:e2:f8:12:1c:d5:11:19:7c:55:d8:bd:
         38:d0:6c:90:1e:fa:ac:4d:30:0c:e4:60:cb:ca:c0:e4:4f:0c:
         75:8c:10:ff:dd:1d:a2:d1:4f:e5:cb:e8:2e:7b:3c:63:e1:a7:
         34:90:7d:9e:59:99:92:9c:49:53:aa:09:89:24:e0:c1:a9:4d:
         17:48:99:c1:f6:06:d7:bd:1b:e3:4a:c5:df:47:84:64:29:2d:
         59:00:ba:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:49:58 2024 by rpki-client on console-ams.rpki-client.org