Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/2077E380EBDF11EBB7533A15C4F9AE02.roa
File:                     2077E380EBDF11EBB7533A15C4F9AE02.roa (raw, json)
Hash identifier:          jqOAMW9HJB3+EsMXMEksvEVwBulHyM30N8ZptacmPMo=
Subject key identifier:   63:F5:45:0A:8F:7A:2A:33:64:79:AB:CF:62:C4:50:A7:32:5F:55:CA
Certificate issuer:       /CN=A914FED3/serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233
Certificate serial:       0CB0
Authority key identifier: 69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/2077E380EBDF11EBB7533A15C4F9AE02.roa
Signing time:             Thu 31 Aug 2023 18:26:24 +0000
ROA not before:           Thu 31 Aug 2023 18:26:24 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     48024
IP address blocks:        103.141.182.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl
                          rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 18:52:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3248 (0xcb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FED3/serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233
        Validity
            Not Before: Aug 31 18:26:24 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64f0db50-cc4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:db:ed:58:d6:b1:63:94:5d:82:ce:e1:ab:0d:
                    a0:48:b9:bf:c4:74:fe:11:cf:3e:3a:ac:c9:ae:fa:
                    e1:a1:60:c6:04:aa:d2:64:ea:96:b1:42:82:35:ac:
                    16:99:e6:62:4b:85:15:c1:d4:c5:a3:20:32:de:b5:
                    b8:bf:f7:d5:0a:ce:7e:46:2e:20:70:00:9e:d9:01:
                    7c:c1:75:25:c0:83:91:63:46:87:f8:ec:85:5d:84:
                    ad:39:9c:01:3a:c8:c7:c7:26:34:49:6b:a1:ad:b9:
                    e6:26:bd:4f:b3:54:bd:2f:77:60:07:de:4e:e0:5d:
                    26:53:43:dd:e2:80:a5:48:58:e0:3a:b8:c5:c3:e8:
                    93:36:2a:4a:7d:3d:e1:f3:ef:b9:e3:12:ce:6e:53:
                    95:51:3a:f9:5b:b5:1d:7f:15:eb:df:d0:51:1b:6a:
                    8f:17:bb:57:64:41:10:a6:55:a2:3f:11:b0:1e:17:
                    f5:ea:f6:6b:d4:4d:73:42:99:c9:ac:69:a0:38:1b:
                    31:80:11:73:5b:52:57:48:0f:e7:5d:6a:47:01:dc:
                    c8:d9:e1:65:7f:69:a8:97:54:58:11:9f:b5:42:fc:
                    94:f9:a5:e9:ef:f3:ed:ae:99:3d:76:56:00:fc:db:
                    35:1a:d2:c8:a1:8e:7f:e5:e3:33:5b:f6:98:0c:99:
                    2b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F5:45:0A:8F:7A:2A:33:64:79:AB:CF:62:C4:50:A7:32:5F:55:CA
            X509v3 Authority Key Identifier:
                keyid:69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/2077E380EBDF11EBB7533A15C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:64:a3:9e:cd:ca:3c:8d:18:90:a0:84:7a:bd:e5:4f:f8:01:
         ee:df:67:13:8e:e5:d3:f8:c2:b9:1e:e4:c2:70:77:15:46:04:
         ba:50:08:50:58:43:3f:a7:1b:cf:c6:ca:9e:15:72:73:3c:8d:
         79:7c:6b:e1:ff:05:64:fc:e4:1d:24:ec:9f:41:ae:fb:71:fa:
         35:c3:24:af:5e:d2:f4:2d:56:d3:66:48:e5:74:28:06:01:e7:
         1b:b3:c7:19:28:73:07:f1:7f:33:79:1f:78:69:82:80:f8:72:
         fa:86:9c:a3:05:67:50:09:3f:a6:09:6a:be:4f:59:fe:f9:8b:
         89:4c:89:c1:26:27:a3:f5:1c:a3:23:b2:a7:bb:4e:67:c8:bb:
         3e:17:dd:0e:d3:91:1e:2c:85:90:15:c7:a3:f4:10:33:70:77:
         56:f3:39:30:4d:29:f7:23:57:6b:b5:1d:71:00:6b:12:c3:29:
         53:e4:28:a0:9f:76:28:d4:1c:c9:23:d5:64:d7:e0:32:6f:32:
         22:24:c1:11:76:93:12:bb:54:45:99:9a:67:af:3d:27:df:64:
         3c:3b:7e:c9:73:93:c8:ad:1c:96:93:de:2d:14:b5:bd:ba:a9:
         86:da:86:71:23:53:60:9b:ce:6c:17:68:d1:6a:f7:b2:b4:1c:
         79:e3:24:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 19:58:38 2024 by rpki-client on console-ams.rpki-client.org