Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/C80572DEF70911ED9D4B561AC4F9AE02.roa
File:                     C80572DEF70911ED9D4B561AC4F9AE02.roa (raw, json)
Hash identifier:          uGKqx1ygUHWBkt6yQ6DRvhQVZZkNmLVdX986c5JBGJs=
Subject key identifier:   52:A7:A3:A8:17:75:D9:9A:B1:A2:8C:78:9E:C5:AB:2A:14:2A:D4:E2
Certificate issuer:       /CN=A915648D/serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3
Certificate serial:       CD
Authority key identifier: F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/C80572DEF70911ED9D4B561AC4F9AE02.roa
Signing time:             Wed 05 Jun 2024 06:46:22 +0000
ROA not before:           Wed 05 Jun 2024 06:46:22 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     135654
IP address blocks:        103.137.228.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl
                          rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915648D/serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3
        Validity
            Not Before: Jun  5 06:46:22 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=666009bd-e39d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f3:84:3b:84:a4:1c:00:48:0c:e8:78:97:42:
                    a2:a6:ac:57:18:c6:05:99:b5:0f:e3:be:5b:16:2e:
                    fe:6f:e5:8c:df:51:4d:1f:1e:5f:d1:d4:16:02:6d:
                    cf:fb:6b:6a:69:96:e9:47:33:55:4a:75:30:36:e3:
                    58:24:a8:d2:7b:42:2a:86:70:1d:72:d2:94:f4:d9:
                    c3:ff:8c:5a:d8:b5:c7:f7:6c:ba:01:5f:a5:b6:28:
                    1a:43:37:7f:6c:1e:11:b2:90:04:87:f6:60:05:5d:
                    c0:09:2b:16:a0:ae:f7:fd:6c:fe:f3:74:26:14:a0:
                    3d:1f:9c:70:b6:58:3f:8b:54:ab:7f:56:df:2b:4b:
                    e3:ea:c5:cb:16:d7:16:af:00:d4:af:93:72:41:eb:
                    54:57:93:f4:40:75:48:ee:60:d4:0c:81:1b:de:80:
                    52:5f:9b:8f:b9:6a:e8:56:16:dd:d5:06:a1:a7:58:
                    c0:34:d9:e0:34:3f:97:e3:16:08:1f:2a:55:8b:aa:
                    59:4e:b1:32:1b:89:91:5d:9c:92:b9:de:d4:d2:67:
                    10:0d:14:f5:6d:1a:6a:ab:e4:58:64:b9:b1:48:e2:
                    76:96:e9:7b:6c:4a:cb:3f:e2:1b:c6:d1:69:41:7d:
                    f2:39:02:92:55:1e:be:4c:a0:5f:47:96:51:b2:92:
                    06:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A7:A3:A8:17:75:D9:9A:B1:A2:8C:78:9E:C5:AB:2A:14:2A:D4:E2
            X509v3 Authority Key Identifier:
                keyid:F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/C80572DEF70911ED9D4B561AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:f7:f3:67:e8:bf:c5:27:3f:c5:02:78:f2:98:ad:5c:a7:9a:
         96:5f:ce:ae:16:1d:6f:ba:91:57:c2:ea:92:13:c7:16:bb:9b:
         04:a8:67:b1:6a:7e:9c:de:56:c9:8e:af:72:3e:84:b0:c4:5f:
         2f:56:88:e8:4e:56:36:62:da:57:a9:12:20:fe:86:78:32:2b:
         56:00:ab:52:d9:28:e3:8f:82:e5:ae:3c:17:5c:05:b6:6e:04:
         88:75:38:be:55:12:88:33:da:41:10:e2:e7:7d:bf:61:78:32:
         a9:8e:5d:19:22:6d:a2:cd:43:e1:e0:6e:a6:77:1f:7b:59:1a:
         4a:21:1e:72:f7:ad:ba:c9:a2:3c:84:11:be:f9:fd:aa:78:7d:
         eb:ab:3c:15:46:b9:34:7c:5e:fd:d9:ac:1d:68:41:14:52:b3:
         0e:2e:c1:8f:c0:9e:c7:91:4d:63:b2:a6:cf:90:9e:27:cb:8d:
         48:3f:85:92:10:b6:cb:2f:53:c0:68:d0:39:03:29:9b:7c:bb:
         b2:1e:35:1c:0f:25:6a:96:16:ba:83:c9:e3:0f:98:f4:0d:66:
         38:43:4a:41:22:cc:5c:ca:71:e7:4c:11:33:d2:92:92:88:90:
         3d:ed:75:30:bd:0b:41:0e:b8:45:c2:8a:0c:83:b3:99:2e:66:
         7c:b8:5b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:48 2024 by rpki-client on console-fra.rpki-client.org