Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/4A30B41CC09F11EEB2E48256C4F9AE02.roa
File:                     4A30B41CC09F11EEB2E48256C4F9AE02.roa (raw, json)
Hash identifier:          6CbYeGlMHWXdRnPvFBNIYVUzG6hSH7sytwhXDvb3oGY=
Subject key identifier:   32:C7:22:FF:B0:22:0C:CA:13:97:43:26:5E:14:A1:5E:08:0B:A0:ED
Certificate issuer:       /CN=A914A2C1/serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF
Certificate serial:       02
Authority key identifier: A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/4A30B41CC09F11EEB2E48256C4F9AE02.roa
Signing time:             Thu 01 Feb 2024 01:14:47 +0000
ROA not before:           Thu 01 Feb 2024 01:14:47 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     151678
IP address blocks:        103.23.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl
                          rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 07:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A2C1/serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF
        Validity
            Not Before: Feb  1 01:14:47 2024 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=65baf087-72e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d8:30:ff:32:80:b1:30:0b:f9:1b:8c:f2:cb:
                    c3:41:74:82:01:e0:f1:39:8c:61:84:6a:68:b2:f9:
                    cd:0d:99:de:c3:57:f4:a2:c5:bb:60:79:b9:bd:2d:
                    80:ea:9e:3b:d5:2c:c5:20:57:8f:a4:27:76:88:2c:
                    38:b7:23:26:1f:1c:3c:cf:cf:d7:54:50:bf:4e:73:
                    c1:ee:40:7c:6c:f1:82:6d:fa:ab:62:af:ef:52:fc:
                    57:56:cf:73:c7:b3:49:ca:db:72:14:15:e9:67:13:
                    ce:6e:2e:12:03:ed:8f:f4:89:e5:55:bf:61:3c:ab:
                    c7:e3:1b:6c:af:ac:b6:1b:2c:cc:ec:db:da:f1:2f:
                    99:e5:b1:c4:eb:cb:94:a5:a8:c9:08:56:46:2a:fd:
                    03:e0:d8:3a:57:0d:d9:9e:ac:be:b6:6e:92:af:c9:
                    ef:8b:be:53:80:0a:11:f5:cd:01:f1:ea:ee:e0:de:
                    82:5c:5d:98:a1:63:88:db:37:52:8e:51:a6:b2:71:
                    23:1e:6a:80:fa:05:3c:cd:2e:a3:55:a8:67:8d:42:
                    02:07:4e:9c:c7:7f:14:12:41:b2:c4:c8:da:ec:d0:
                    50:4c:8f:56:03:7d:55:db:f4:f4:7a:55:78:07:44:
                    1c:0a:09:44:5f:61:f1:97:f5:31:0f:be:67:b3:43:
                    e6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C7:22:FF:B0:22:0C:CA:13:97:43:26:5E:14:A1:5E:08:0B:A0:ED
            X509v3 Authority Key Identifier:
                keyid:A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/4A30B41CC09F11EEB2E48256C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:bf:ea:27:71:74:2c:5c:0b:66:a4:b8:c4:1a:0a:6c:c7:3d:
         b3:4e:7f:bb:49:0b:03:87:ee:05:92:0f:52:8c:38:f8:c6:d3:
         18:f8:3a:bd:8e:e3:66:83:0a:08:43:9d:b3:97:37:c3:92:ee:
         6e:ee:cc:5c:cf:17:2d:4e:23:24:00:6c:5c:e0:8d:85:31:8f:
         a8:54:54:5e:83:41:d0:8a:7d:d5:36:9a:ee:0e:63:48:8c:e0:
         f3:2b:18:4a:f0:e3:50:0f:31:84:5e:83:94:5c:6a:55:2b:0f:
         62:3c:c2:e0:65:0b:73:43:24:0f:90:71:b6:8b:66:aa:55:27:
         7a:e3:8f:a5:a3:c9:6f:5e:1d:2f:e8:68:64:e6:b9:4b:19:e1:
         eb:25:8b:4b:07:20:ee:a6:8a:27:b5:71:79:1d:3e:3d:57:fa:
         17:c9:d8:f5:96:e0:cc:72:19:c0:2f:0b:b9:ea:23:ae:38:6c:
         7f:cb:51:20:af:2f:bd:67:35:45:68:b0:0e:fe:8e:85:db:d6:
         5c:21:42:31:8c:50:4b:4d:f2:92:31:fd:23:f9:ba:60:10:05:
         a7:90:3e:48:c3:1b:ba:d6:a0:bd:fa:5b:d7:ad:b5:3f:58:33:
         68:28:c5:4a:27:d9:fa:2d:8f:70:41:01:34:45:29:d1:d2:0f:
         1d:5c:12:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 08:42:02 2024 by rpki-client on console-fra.rpki-client.org