Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/F8636CC60F9D11EFA1E14343C4F9AE02.roa
File:                     F8636CC60F9D11EFA1E14343C4F9AE02.roa (raw, json)
Hash identifier:          4Oh915WthhJlwOOKgV/sOS+biKgr/hNx4EVmX21QhO4=
Subject key identifier:   D7:19:A4:10:0F:9E:03:65:A1:B5:CB:B9:D5:8F:C0:34:3A:E4:74:B2
Certificate issuer:       /CN=A9153675/serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF
Certificate serial:       04
Authority key identifier: CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/F8636CC60F9D11EFA1E14343C4F9AE02.roa
Signing time:             Sat 11 May 2024 13:54:22 +0000
ROA not before:           Sat 11 May 2024 13:54:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     38532
IP address blocks:        103.53.172.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl
                          rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Sep 2024 04:46:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153675/serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF
        Validity
            Not Before: May 11 13:54:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=663f788e-108e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2d:e6:da:68:40:2b:75:53:9d:6f:da:1d:f7:
                    29:df:ff:b4:35:ce:f7:d0:4f:21:16:3c:89:a3:0b:
                    91:6b:2b:ae:27:aa:f9:1b:b5:f5:f8:0c:ec:8b:a9:
                    28:c8:e7:66:fb:b6:06:2b:59:db:22:40:54:86:72:
                    93:23:8f:17:7c:75:87:1f:a8:5f:f4:62:67:c0:ea:
                    12:5a:ed:a9:95:4a:b4:85:9a:e3:ce:f5:07:be:c5:
                    9f:3e:26:e8:57:d8:ca:10:ac:aa:46:84:31:ac:9a:
                    41:3d:eb:86:df:6e:b6:eb:07:04:56:35:dc:1e:8f:
                    9f:39:5f:83:5d:3b:6e:ca:75:c8:d6:97:f9:33:03:
                    06:4b:e0:53:f2:cb:66:93:7c:d2:cf:d9:a9:8d:94:
                    af:72:a9:fb:c4:6f:c7:ff:83:19:27:61:03:94:9e:
                    e6:9b:dc:3a:96:cd:68:47:6f:85:e2:78:9b:08:64:
                    4a:10:fe:92:46:df:8a:a5:bd:f2:8d:01:b0:9d:db:
                    d4:58:92:41:08:6d:d5:61:a9:7b:59:24:94:7e:7b:
                    85:e3:8a:b3:5c:7c:b7:f1:9a:ce:46:c5:48:d1:75:
                    9e:3a:fa:54:98:8d:46:d3:68:80:37:64:c1:84:38:
                    90:76:98:2c:52:3e:21:72:6b:a0:ea:01:78:85:e7:
                    15:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:19:A4:10:0F:9E:03:65:A1:B5:CB:B9:D5:8F:C0:34:3A:E4:74:B2
            X509v3 Authority Key Identifier:
                keyid:CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/F8636CC60F9D11EFA1E14343C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:e2:18:10:b5:90:ba:d6:98:ad:b2:40:6a:98:99:15:9c:3b:
         4d:68:04:6c:3c:91:b1:4c:64:a0:49:70:39:7b:b8:8f:9c:3c:
         3a:7d:57:3a:fc:b8:93:f6:7b:6b:c0:74:d1:17:0b:f5:f9:0c:
         78:46:4d:ff:97:64:ad:ef:2c:b8:d8:24:45:70:b8:39:f8:a2:
         7c:17:2d:99:2f:7f:11:c1:8a:2e:3f:bc:be:fd:c8:cc:9c:76:
         5a:e7:66:f6:8a:c3:66:cb:98:05:82:8d:c8:ab:39:b2:d0:bd:
         89:1a:b4:de:a5:85:01:69:32:04:9f:0a:74:ed:7f:dd:0a:c8:
         22:59:f2:83:7c:52:f4:bc:6a:57:96:7e:5b:8c:dc:ef:50:a1:
         eb:cc:99:1c:f1:7e:32:3a:3d:df:61:21:56:4a:01:e8:8d:d6:
         27:82:08:38:6e:09:e9:66:0e:c0:03:2b:fb:f7:a4:87:14:0f:
         a6:d6:b2:28:c7:87:df:a3:89:2b:1e:45:5f:02:de:fc:46:4e:
         29:71:77:28:f7:b7:40:c3:37:c2:48:a6:ab:6e:b3:b7:87:14:
         84:84:42:82:17:7e:6e:20:1f:a0:ba:05:d9:92:ce:4d:42:ee:
         26:b0:ff:8a:18:a5:55:07:15:ab:c6:57:f3:55:27:69:f3:5b:
         10:a5:51:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 08:11:52 2024 by rpki-client on console-ams.rpki-client.org