Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/354725E6763311EABAE64466C4F9AE02.roa
File:                     354725E6763311EABAE64466C4F9AE02.roa (raw, json)
Hash identifier:          OBNnHwe4WMlygXPp/yjie30/QyKX7+ncDFYx8Vw872A=
Subject key identifier:   80:FA:27:C5:08:75:DC:2C:74:81:78:4E:C7:33:92:F1:3F:08:AE:E8
Certificate issuer:       /CN=A914E3F5/serialNumber=F1B724E40D85C54F51D621C72F896C9175C9B119
Certificate serial:       08DC
Authority key identifier: F1:B7:24:E4:0D:85:C5:4F:51:D6:21:C7:2F:89:6C:91:75:C9:B1:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bck5A2FxU9R1iHHL4lskXXJsRk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/354725E6763311EABAE64466C4F9AE02.roa
Signing time:             Thu 26 Oct 2023 20:48:30 +0000
ROA not before:           Thu 26 Oct 2023 20:48:30 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     137039
IP address blocks:        103.102.220.0/24 maxlen: 24
                          103.146.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.crl
                          rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bck5A2FxU9R1iHHL4lskXXJsRk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 20:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2268 (0x8dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E3F5/serialNumber=F1B724E40D85C54F51D621C72F896C9175C9B119
        Validity
            Not Before: Oct 26 20:48:30 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=653ad09e-7249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ef:d3:98:e6:1c:eb:2e:f8:e3:93:b0:f3:1a:
                    d5:c4:71:a0:6d:59:1a:93:7a:ae:a0:ee:e0:7b:85:
                    bc:63:c7:dc:91:ec:b1:e4:b9:03:45:b0:52:57:72:
                    62:c0:e2:32:42:b7:cb:81:68:64:d7:32:ca:a5:41:
                    a2:37:21:36:32:84:12:1f:92:ec:8e:b2:26:14:d7:
                    1f:4e:63:b4:f7:68:6e:6b:68:ec:3e:d1:b1:d3:73:
                    45:12:4d:bb:60:32:74:11:39:41:9b:77:2b:cb:62:
                    3d:84:87:ec:07:d7:f9:4a:ef:23:c0:ab:d3:67:fb:
                    2a:9b:35:29:41:dd:d9:82:41:51:d2:58:74:98:a4:
                    f4:75:7c:34:49:d0:f4:2b:cb:95:c3:7f:39:e0:b5:
                    61:c0:2b:7c:e3:d6:24:a4:10:3a:b8:16:10:85:d0:
                    0a:34:d2:4c:7f:91:8f:d5:3e:ba:27:ff:a9:f7:dc:
                    a2:ce:4b:4c:d1:7a:19:87:82:68:d7:3c:8a:95:e2:
                    3f:2e:8e:67:02:34:c7:1c:71:65:48:d3:c4:02:77:
                    33:b3:27:c4:b6:29:81:6e:3b:e7:09:7f:32:89:4d:
                    ef:ac:1e:56:11:60:31:ec:39:83:85:ed:65:0d:37:
                    a8:ab:da:01:dc:db:05:d9:30:49:de:62:10:6b:a1:
                    1e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FA:27:C5:08:75:DC:2C:74:81:78:4E:C7:33:92:F1:3F:08:AE:E8
            X509v3 Authority Key Identifier:
                keyid:F1:B7:24:E4:0D:85:C5:4F:51:D6:21:C7:2F:89:6C:91:75:C9:B1:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/8bck5A2FxU9R1iHHL4lskXXJsRk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bck5A2FxU9R1iHHL4lskXXJsRk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3F5/811B604C763111EA9715F860C4F9AE02/354725E6763311EABAE64466C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.220.0/24
                  103.146.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:b2:f7:68:26:70:f0:3c:0f:94:9a:b3:16:02:1f:86:6c:43:
         48:8f:07:37:84:b3:75:30:c2:98:80:fd:dd:b1:bd:b4:b5:bc:
         c1:c5:02:87:b0:6b:39:20:aa:8f:1f:6a:be:d2:f7:a7:80:1a:
         de:0c:41:a2:3e:7e:2c:cf:d4:3d:9f:76:64:87:4c:c2:a3:05:
         5f:f6:d7:b6:b0:de:4f:90:af:f3:71:79:51:ce:53:c8:bf:c1:
         5e:39:36:f4:a7:a4:78:86:c1:69:7b:c1:50:da:5c:de:b8:bf:
         20:4a:6c:e7:3e:04:de:aa:db:9d:98:dc:35:19:b2:2b:dc:6a:
         17:7a:96:d8:c0:c2:0b:4f:3f:e1:04:d4:78:b0:66:86:63:c7:
         e7:39:ce:79:d1:2b:b3:c4:e2:d7:32:a5:c7:5c:6c:60:ea:1b:
         d8:b2:a0:8e:03:fb:63:ff:7b:ba:17:e6:97:f0:c8:2b:76:84:
         04:82:04:34:0c:a3:f6:02:1d:5d:af:2d:a7:dc:54:d4:e1:da:
         89:1b:fd:9e:33:2b:d8:ec:6d:a4:11:a2:cc:3a:9d:5a:1f:81:
         54:3b:5b:b4:19:28:df:ab:4a:0e:14:38:e2:a9:0a:30:a4:78:
         a5:d5:81:3a:d5:ce:40:c6:21:b3:5f:36:f6:4a:a4:21:26:68:
         47:71:a1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 22:34:45 2024 by rpki-client on console-ams.rpki-client.org