Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/A83E51EC45F611EDBA9D6062C4F9AE02.roa
File:                     A83E51EC45F611EDBA9D6062C4F9AE02.roa (raw, json)
Hash identifier:          EqhmN9adTHMLhbtfwGN3BFVZjDVghXr2ZIvmAXphnYM=
Subject key identifier:   DD:30:7E:E7:32:4E:B2:3F:99:AF:76:DC:F6:FA:14:A4:E3:49:57:80
Certificate issuer:       /CN=A914A5BB/serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A
Certificate serial:       C2
Authority key identifier: D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/A83E51EC45F611EDBA9D6062C4F9AE02.roa
Signing time:             Tue 17 Oct 2023 04:15:33 +0000
ROA not before:           Tue 17 Oct 2023 04:15:33 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     8075
IP address blocks:        103.58.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl
                          rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 May 2024 04:40:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A5BB/serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A
        Validity
            Not Before: Oct 17 04:15:33 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=652e0a65-70d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c8:c9:de:af:5a:33:21:34:5b:27:dc:1c:f0:
                    51:25:89:7c:71:b6:b2:21:34:5c:7e:5e:89:30:27:
                    18:44:87:43:9b:ad:46:6a:ac:7d:ad:61:d1:01:8f:
                    34:40:5b:a6:be:07:de:de:a7:36:9c:da:e7:d4:d7:
                    7e:bc:3d:72:8c:1d:ac:64:48:60:a0:c1:0d:b3:88:
                    8c:7d:52:73:c3:ea:8e:fd:96:af:03:5d:08:59:77:
                    48:4f:88:0d:ac:5e:21:a0:f1:ed:c2:39:16:4e:0d:
                    8f:39:81:e0:30:51:42:5d:dc:96:1d:8c:c8:3d:8b:
                    96:eb:bb:e8:0e:d3:4c:26:3c:46:28:43:f3:83:71:
                    be:d6:3b:ce:f9:a6:e9:33:9c:aa:e7:38:5f:50:99:
                    50:f1:dd:47:2e:bc:b5:71:e1:a7:c1:8e:1a:c9:7f:
                    33:d2:3b:16:0d:c4:e8:55:c7:c9:3f:2a:70:b3:59:
                    de:80:4a:59:0e:8a:d2:68:be:e8:d2:64:94:a5:01:
                    10:d0:ea:59:46:2e:fc:80:da:96:ba:38:bc:c8:79:
                    75:39:2d:f5:7e:8e:60:7d:b3:99:74:37:49:11:f3:
                    a9:ae:08:b5:f1:c7:67:1d:f5:69:d6:84:c8:78:3b:
                    3e:18:b9:b2:89:4d:14:ef:8c:c6:ed:6d:1f:03:68:
                    fc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:30:7E:E7:32:4E:B2:3F:99:AF:76:DC:F6:FA:14:A4:E3:49:57:80
            X509v3 Authority Key Identifier:
                keyid:D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/A83E51EC45F611EDBA9D6062C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.58.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:8d:0e:79:bf:1e:a3:3a:91:fa:b6:e2:3d:a5:7b:fe:98:24:
         bc:97:96:1c:d5:8f:5e:8f:9a:da:8e:79:36:dc:c7:a6:80:0f:
         c9:b1:b1:4b:3c:be:a0:b3:83:92:20:a5:6f:d5:ea:68:b3:92:
         27:ec:20:bb:17:a3:1c:e8:6c:ab:62:72:f2:7a:59:fa:21:ec:
         cc:f9:56:13:03:8c:d5:9f:46:c3:21:ce:0e:c8:f8:7b:17:0e:
         d7:b3:4e:ee:55:8f:70:61:7d:79:75:61:ba:91:68:5e:85:40:
         d6:07:28:50:87:cd:09:1e:37:ea:81:23:a7:e6:32:a8:12:11:
         df:d7:91:2d:a6:c7:87:4d:cd:39:9a:8a:15:b8:54:5a:cb:86:
         46:e0:aa:18:90:5a:9f:e5:29:5d:e0:9b:4f:b9:09:59:c3:31:
         7d:62:34:7f:7b:8a:5e:66:2a:c3:75:ac:8b:04:95:09:f6:d1:
         5c:33:28:07:91:c3:6b:f8:0b:a6:fa:ac:16:fe:78:0f:da:91:
         9b:e7:d9:d5:1e:3c:4f:81:f2:a6:58:71:97:c0:d2:00:0d:fa:
         5c:81:50:a7:c4:ba:ac:e4:e9:e6:94:96:a0:29:3d:b4:90:ab:
         d5:88:b5:8c:c0:45:93:0c:80:a6:32:5c:a7:56:8a:b7:81:35:
         b9:1b:79:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 05:40:02 2024 by rpki-client on console-ams.rpki-client.org