Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/7664C566BE6D11EE99A9E384C4F9AE02.roa
File:                     7664C566BE6D11EE99A9E384C4F9AE02.roa (raw, json)
Hash identifier:          J0X863hvnPaJB+YqbSd16WKt6GmxnqfAMWDcyGO6bYQ=
Subject key identifier:   26:62:0E:A9:D8:3D:BB:1D:5E:B7:12:88:7E:50:4E:BE:D0:FC:F5:BC
Certificate issuer:       /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Certificate serial:       58
Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/7664C566BE6D11EE99A9E384C4F9AE02.roa
Signing time:             Mon 29 Jan 2024 06:13:04 +0000
ROA not before:           Mon 29 Jan 2024 06:13:04 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     139660
IP address blocks:        103.135.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl
                          rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 06:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
        Validity
            Not Before: Jan 29 06:13:04 2024 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=65b741f0-07e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2e:d3:f4:6d:65:eb:c7:4e:8c:8e:f7:01:e6:
                    f9:ab:5d:c2:b8:34:9f:52:d4:59:0a:21:e7:a9:7b:
                    66:4a:43:23:9b:aa:28:ef:e4:84:65:a6:1b:01:86:
                    47:5d:dd:98:9d:8f:2d:d3:96:65:81:bc:f7:59:76:
                    52:66:67:2e:d2:7c:f5:2c:4f:de:fe:d6:25:f7:9e:
                    0d:31:f9:9f:f6:7e:f3:13:d9:65:52:95:92:97:32:
                    2a:b9:9b:08:ef:85:b8:63:8c:c3:56:2a:5b:6d:bc:
                    ab:fd:ab:bc:1b:92:10:5c:06:51:46:d5:99:f7:f0:
                    e5:9a:cd:dc:4b:4e:0a:b7:12:a4:8f:8c:8c:f5:0d:
                    63:1a:7b:c8:fc:4c:0c:b5:49:c2:6d:2b:5a:26:2b:
                    db:71:50:0a:58:3a:34:1d:4c:87:26:39:ce:13:42:
                    20:c1:ef:60:d1:f4:85:92:1c:66:9c:12:84:4b:ea:
                    bb:a1:c7:86:3e:fb:fa:c5:9a:d1:fb:ae:9c:62:15:
                    44:b1:5d:0e:b3:22:3b:f2:7d:e2:0a:2b:10:a6:9a:
                    b2:a4:90:ca:5b:b9:c2:4c:08:14:15:84:31:d9:ae:
                    53:37:67:09:de:82:80:8e:90:6c:02:97:cb:b6:a4:
                    75:f3:db:0f:12:6c:6e:49:32:09:d4:17:c6:61:e4:
                    77:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:62:0E:A9:D8:3D:BB:1D:5E:B7:12:88:7E:50:4E:BE:D0:FC:F5:BC
            X509v3 Authority Key Identifier:
                keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/7664C566BE6D11EE99A9E384C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:b4:13:d4:54:1c:f5:2a:a5:32:37:70:cb:b8:03:e9:cc:37:
         72:6f:54:62:b3:18:c6:23:fe:3b:7b:57:30:4d:52:a8:89:e5:
         5c:eb:c1:44:ac:30:bd:9e:90:d0:81:6b:90:12:46:56:bf:dc:
         70:21:4c:b1:13:f9:2d:48:fc:01:2b:5a:81:d2:0d:b8:d5:f2:
         ab:8f:29:c0:28:66:38:86:f0:e9:e4:39:9d:94:78:37:95:39:
         5b:49:50:ab:ea:10:22:ea:22:33:71:c4:d1:9b:be:43:0a:d0:
         33:66:59:23:8a:de:f0:9d:8e:59:18:d7:a8:c9:77:58:1c:6b:
         65:7e:63:1e:74:7f:8f:fe:e6:3a:52:04:7e:30:77:c2:f9:71:
         a1:2f:55:dd:ea:80:9c:28:df:39:e2:fb:31:df:50:cc:7c:c9:
         e0:56:d2:eb:a3:ec:62:24:86:bc:df:8f:85:0a:27:4d:0d:84:
         d1:58:79:fa:4a:16:e3:b5:9d:88:47:87:ad:d2:88:98:82:30:
         c7:93:7d:17:e6:c9:b8:b1:26:aa:8d:f1:57:27:7e:f9:0c:f4:
         ed:c2:04:09:fc:99:b7:f7:cc:a0:3c:f7:41:97:5d:db:d5:24:
         4c:3b:56:e0:51:a9:49:cf:ab:30:0f:2f:8b:a5:0a:4e:d4:ee:
         48:ec:12:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 07:55:38 2024 by rpki-client on console-fra.rpki-client.org