Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/4ED5A00CFE2611EAA4F3424DC4F9AE02.roa
File:                     4ED5A00CFE2611EAA4F3424DC4F9AE02.roa (raw, json)
Hash identifier:          VIgSvY7k14Jp04yXf8Mc1S+JFtvPqLWek996rtIVIv0=
Subject key identifier:   67:0D:E9:CB:4D:25:9F:38:C3:DC:89:BD:17:6B:36:B7:EF:3A:70:6F
Certificate issuer:       /CN=A914988F/serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094
Certificate serial:       065E
Authority key identifier: 3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/4ED5A00CFE2611EAA4F3424DC4F9AE02.roa
Signing time:             Fri 28 Jul 2023 22:19:12 +0000
ROA not before:           Fri 28 Jul 2023 22:19:12 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     24226
IP address blocks:        103.152.188.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl
                          rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1630 (0x65e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914988F/serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094
        Validity
            Not Before: Jul 28 22:19:12 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c43edf-4d61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4f:9f:9d:98:4b:0d:b1:2b:03:c1:fd:68:2e:
                    ea:2d:26:ec:b4:ce:a6:14:cd:43:73:f7:25:35:a1:
                    52:ac:38:39:6e:d4:ea:d8:15:d8:f5:b8:fe:7d:59:
                    33:1c:8d:e0:70:c5:2f:c5:78:fe:13:46:d5:61:01:
                    2e:1a:2a:e4:cd:42:e5:c7:d7:0e:95:7d:24:48:f1:
                    d0:71:80:35:83:66:4b:78:fe:5e:8d:c6:0d:51:f1:
                    e5:4c:33:7b:d0:00:52:31:99:17:d4:0f:a3:83:48:
                    b1:16:b3:51:19:97:68:df:bf:e9:86:d8:fb:14:a7:
                    8a:75:e6:74:75:60:42:b5:f8:5a:9a:3b:fc:c2:ac:
                    9d:70:ad:f9:1e:6a:f5:02:e4:3f:63:45:32:17:b8:
                    e9:ab:ab:03:6a:f5:b2:50:00:fb:40:11:74:93:09:
                    d4:11:0e:5f:23:8f:e4:b7:cb:70:ef:aa:81:e1:8f:
                    bd:ed:99:33:ce:42:97:c9:e7:44:17:fb:66:a7:91:
                    49:f2:fa:04:d6:b1:f0:90:c6:6e:aa:c7:56:8c:75:
                    b6:6f:90:a0:59:b8:4c:05:3a:5a:36:e1:03:5c:8b:
                    34:7b:81:21:74:55:8e:00:d2:b6:1d:3f:bb:d5:df:
                    84:e7:8f:98:a9:50:dc:3a:bf:bb:ca:dd:3c:bd:1a:
                    70:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0D:E9:CB:4D:25:9F:38:C3:DC:89:BD:17:6B:36:B7:EF:3A:70:6F
            X509v3 Authority Key Identifier:
                keyid:3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/4ED5A00CFE2611EAA4F3424DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:26:ff:82:65:5f:03:b2:79:75:6f:9e:46:9d:1f:20:b1:a2:
         c8:29:9a:a1:71:9d:d1:59:c1:47:e1:9d:2f:f8:ef:3b:95:43:
         65:b5:89:80:f4:a7:0f:9b:e8:e5:cd:e3:20:dd:5f:a9:c5:67:
         d9:c3:61:40:cd:2a:a7:02:33:2d:26:17:d9:d0:87:cc:a9:f1:
         77:4d:1f:bc:ce:77:1b:2f:23:e0:63:a9:1d:fe:21:d1:a5:64:
         9f:82:60:61:09:09:21:3e:90:61:a1:c9:f0:31:6c:6c:9e:7c:
         26:04:4d:aa:eb:0b:82:8c:e7:df:d9:11:63:d3:f7:69:6a:b1:
         96:36:5c:c4:29:fc:7a:7f:cb:ba:78:e5:ea:09:60:4e:79:7b:
         25:9e:c4:ad:c6:7a:a4:cf:aa:2a:d3:af:82:2a:f7:e3:1a:f8:
         00:53:1c:8d:18:c8:2d:0e:11:b9:d1:4d:76:0b:91:89:8f:6c:
         03:c9:17:a7:d7:2d:52:17:28:e3:45:44:5d:48:04:9d:f2:8f:
         76:ef:d5:da:4a:43:2c:38:d5:0d:f9:a8:7e:86:d7:69:5f:2b:
         be:82:9a:5e:21:f3:30:d6:b4:6e:7c:ac:19:f0:d6:70:68:f8:
         f1:70:ea:75:9b:c9:99:a2:23:54:7e:3f:ac:10:bd:07:c3:a3:
         bd:d8:fd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:16:13 2024 by rpki-client on console-fra.rpki-client.org