Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/CC636E14FFE011EDA35F8946C4F9AE02.roa
File:                     CC636E14FFE011EDA35F8946C4F9AE02.roa (raw, json)
Hash identifier:          psus1/4bbucX9THpFB8Hw9SwkUBh/0EUpXDJZVDZZIE=
Subject key identifier:   5C:47:D8:9E:B7:69:CF:9F:09:70:4A:AF:70:32:4D:7A:1B:1C:11:D1
Certificate issuer:       /CN=A914334E/serialNumber=20098FB43BD90AC032DD50C9FAE7DABA20A0829E
Certificate serial:       DA
Authority key identifier: 20:09:8F:B4:3B:D9:0A:C0:32:DD:50:C9:FA:E7:DA:BA:20:A0:82:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/CC636E14FFE011EDA35F8946C4F9AE02.roa
Signing time:             Mon 18 Mar 2024 07:53:47 +0000
ROA not before:           Mon 18 Mar 2024 07:53:47 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     150750
IP address blocks:        103.83.30.0/24 maxlen: 24
                          103.83.31.0/24 maxlen: 24
                          2401:8ae0::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.crl
                          rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 04:58:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914334E/serialNumber=20098FB43BD90AC032DD50C9FAE7DABA20A0829E
        Validity
            Not Before: Mar 18 07:53:47 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65f7f30b-01bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b0:3b:6f:93:0f:27:d6:f6:b8:39:eb:68:bc:
                    84:82:ff:a5:4e:3d:75:b8:de:09:b3:74:c9:19:b2:
                    1a:68:e8:05:dc:1a:a7:d2:17:e2:2c:16:6b:10:09:
                    7b:63:63:a3:e0:ac:27:69:d7:fc:9a:31:93:ae:67:
                    6a:8f:bd:ee:3b:40:1c:4a:8a:e2:18:92:92:67:d0:
                    c7:1b:b8:ca:d8:32:6c:94:2e:7e:b8:7a:de:fc:f2:
                    54:d0:22:b4:52:6c:0f:4f:17:73:ef:cf:e7:7e:e8:
                    6d:38:0b:71:5f:6e:ac:87:fe:26:a9:1a:73:0a:31:
                    71:69:3f:07:9e:f2:cb:9d:21:62:05:e1:38:81:b3:
                    de:56:36:bb:72:a1:6e:84:8b:4f:2a:f6:b1:d7:76:
                    b3:34:e1:f4:79:c1:dd:49:6e:14:78:90:05:5a:3f:
                    23:bf:eb:81:9e:1b:01:12:b1:4e:b5:de:a1:fe:bb:
                    79:56:1b:74:8a:28:cf:37:02:f0:f7:cb:89:2d:67:
                    e2:4a:db:b0:7f:9d:b1:ca:11:09:4f:a6:fe:2c:1d:
                    ba:f4:d7:f5:87:37:28:f5:be:f5:4f:04:9d:3a:9e:
                    2c:c8:7d:e9:0f:01:d0:37:5c:58:53:35:40:df:fe:
                    27:79:59:25:c1:b5:2b:05:b9:86:32:94:be:2b:bd:
                    e9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:47:D8:9E:B7:69:CF:9F:09:70:4A:AF:70:32:4D:7A:1B:1C:11:D1
            X509v3 Authority Key Identifier:
                keyid:20:09:8F:B4:3B:D9:0A:C0:32:DD:50:C9:FA:E7:DA:BA:20:A0:82:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/CC636E14FFE011EDA35F8946C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.30.0/23
                IPv6:
                  2401:8ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:97:87:de:ff:27:57:00:af:4a:fc:1e:11:bb:7a:e1:de:dd:
         02:b4:80:c2:cf:c1:d4:25:c4:ee:f4:1b:e6:84:5a:62:73:5d:
         dc:68:8d:05:54:7f:ff:b7:cb:30:74:b8:49:a3:4b:9e:4d:a7:
         03:c2:e1:00:fa:e4:c3:cc:e4:db:fc:63:b6:ad:41:eb:8d:54:
         0d:45:b5:19:1a:6c:ee:c7:10:5c:c6:60:b6:47:8d:da:60:5a:
         28:2d:af:9e:74:fc:cf:16:72:8d:d5:36:c3:4b:0e:0f:62:77:
         b3:88:52:6d:aa:93:cd:49:81:4f:8a:fa:0b:a5:f3:d6:90:31:
         70:8c:4d:30:5f:be:6b:4a:24:2b:29:60:c9:eb:d1:95:1b:bf:
         8a:0d:46:40:fd:c4:d1:3d:8b:43:b5:51:5f:bc:e6:12:73:72:
         75:d8:46:d7:b0:8c:71:08:8a:d2:26:c2:38:09:16:f0:6c:55:
         f3:8d:94:b4:83:56:d6:78:40:71:df:37:56:6b:41:3b:b6:f3:
         eb:f0:ea:51:79:36:ec:2b:8b:b4:45:8f:fc:01:1d:67:29:a0:
         9f:21:d8:bf:df:5e:da:6d:d3:b2:13:27:e7:05:3c:0e:cf:93:
         45:7a:86:21:a0:98:b3:ee:ef:d5:a5:60:ac:f5:a9:b4:81:3a:
         db:25:1e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 06:54:28 2024 by rpki-client on console-ams.rpki-client.org