Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/FC07CE5C3A7C11EBB38FF025C4F9AE02.roa
File:                     FC07CE5C3A7C11EBB38FF025C4F9AE02.roa (raw, json)
Hash identifier:          Tqs2BwBQN3aw7diwsiZGDcrNhdesKMfXDb80Fkkbg3w=
Subject key identifier:   C6:52:50:9E:42:88:BF:AB:A1:38:4E:F1:70:9C:B1:6A:17:26:BF:0C
Certificate issuer:       /CN=A914ECA4/serialNumber=D4ED338A5E2087D82EF4C2F64599B4111272E5E0
Certificate serial:       0603
Authority key identifier: D4:ED:33:8A:5E:20:87:D8:2E:F4:C2:F6:45:99:B4:11:12:72:E5:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/FC07CE5C3A7C11EBB38FF025C4F9AE02.roa
Signing time:             Thu 30 Nov 2023 23:51:16 +0000
ROA not before:           Thu 30 Nov 2023 23:51:16 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     141420
IP address blocks:        103.158.226.0/23 maxlen: 23
                          103.158.226.0/24 maxlen: 24
                          103.158.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.crl
                          rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1539 (0x603)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914ECA4/serialNumber=D4ED338A5E2087D82EF4C2F64599B4111272E5E0
        Validity
            Not Before: Nov 30 23:51:16 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65691ff4-890e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d3:73:f2:3b:c2:de:ed:e9:44:f2:60:b0:a4:
                    2c:3f:28:42:81:77:db:43:e3:f0:01:7c:29:a2:1c:
                    ca:4b:5c:08:ca:88:aa:2a:31:80:70:bb:01:3e:17:
                    13:15:d0:06:66:f8:a9:3c:af:ee:b6:94:9e:f4:d7:
                    fc:d4:5a:48:38:22:c3:24:e6:d8:c9:88:c1:c9:32:
                    76:0e:18:14:d2:c7:b2:4c:e7:46:d6:b9:d0:99:92:
                    db:fb:22:68:54:96:d1:19:3b:b0:ba:5e:33:5c:cb:
                    61:42:93:65:6e:fb:81:8b:95:23:eb:0a:f3:9b:b4:
                    50:94:99:4f:d9:cb:0e:5f:00:dd:cc:e4:5c:6b:5a:
                    b5:c3:06:3c:32:27:a1:a5:91:dc:31:12:e2:69:4d:
                    14:d8:5a:e2:29:92:e2:ad:7d:c5:f1:a3:8c:16:94:
                    50:a4:10:1d:cf:f6:ac:8c:c1:54:28:ca:05:7a:35:
                    74:0e:a8:f1:cd:34:f9:df:ab:61:d4:28:c0:fb:48:
                    48:8c:a5:0c:40:97:06:d0:c9:04:7a:57:3e:c1:b6:
                    e6:d7:15:55:d4:92:34:02:69:99:2e:4c:e5:8e:29:
                    4f:fb:48:1a:dd:ae:a1:7d:91:88:60:45:ab:a5:ed:
                    6f:2b:d5:7b:a0:36:07:30:8a:a4:07:20:35:58:0e:
                    4b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:52:50:9E:42:88:BF:AB:A1:38:4E:F1:70:9C:B1:6A:17:26:BF:0C
            X509v3 Authority Key Identifier:
                keyid:D4:ED:33:8A:5E:20:87:D8:2E:F4:C2:F6:45:99:B4:11:12:72:E5:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/FC07CE5C3A7C11EBB38FF025C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:a1:cc:eb:04:26:b6:00:51:0b:77:74:77:42:72:02:da:e3:
         cf:ca:1a:de:f9:a6:27:dc:30:1b:7f:9c:6f:15:e1:ed:90:2a:
         d8:0d:ac:9b:49:c4:75:16:f1:36:83:b9:be:df:34:7d:20:53:
         a4:f7:7b:74:6e:71:8e:f1:4d:23:c1:43:44:89:51:77:dd:98:
         a0:c2:2c:20:df:c5:3a:f6:4c:e2:11:ac:50:8c:97:8f:5b:82:
         37:4f:89:a2:9f:a3:ed:83:45:7f:fc:39:ea:11:62:ce:79:b9:
         9c:b9:c5:53:bd:ab:48:3b:23:1d:bc:b6:82:09:6e:0e:d6:9b:
         27:63:97:28:f2:d6:71:39:df:00:76:86:b1:0d:11:89:3e:1f:
         92:8f:cb:ea:3c:83:8a:60:c9:30:e1:05:fd:86:ee:97:37:61:
         d0:5a:cb:76:2e:18:ed:e6:8e:81:77:07:9f:7e:8d:30:3b:9a:
         a0:aa:30:17:f8:f5:8d:1e:e4:b9:b5:22:71:98:8c:d6:d3:e6:
         3d:43:1d:12:b2:62:40:51:12:06:7e:b4:94:74:84:8f:b1:b8:
         0c:0f:bb:7b:49:d2:0b:8c:e7:da:67:26:e1:42:74:49:90:90:
         91:b3:86:29:35:b4:33:15:e2:5c:88:54:56:a8:74:d6:aa:21:
         66:38:01:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:16:13 2024 by rpki-client on console-fra.rpki-client.org