Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/62923A1EF2B711EDAA29717AC4F9AE02.roa
File:                     62923A1EF2B711EDAA29717AC4F9AE02.roa (raw, json)
Hash identifier:          Up/qLyExi9Qax/bVF+TBmMjmrUKDouf8YMyKfLQp8Qk=
Subject key identifier:   28:95:30:8D:26:95:87:93:8C:E2:8E:62:99:2E:84:D0:96:25:15:8A
Certificate issuer:       /CN=A91579E2/serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3
Certificate serial:       02
Authority key identifier: 3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/62923A1EF2B711EDAA29717AC4F9AE02.roa
Signing time:             Mon 15 May 2023 00:28:16 +0000
ROA not before:           Mon 15 May 2023 00:28:16 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     151208
IP address blocks:        103.133.88.0/23 maxlen: 24
                          2400:faa0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl
                          rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 06:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91579E2/serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3
        Validity
            Not Before: May 15 00:28:16 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64617ca0-0f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:4e:ee:78:6e:4f:4f:ee:22:8e:d8:80:9c:51:
                    2a:28:55:1c:bb:aa:df:5d:05:f1:72:ce:07:6b:5e:
                    d8:76:48:39:f5:b2:55:99:53:42:dd:51:d3:d0:7b:
                    ab:f2:4d:7a:da:6c:d7:17:1d:8e:7d:7c:33:34:63:
                    19:fa:73:3a:56:74:ef:55:f0:4f:79:58:ad:96:bb:
                    82:90:05:e4:97:25:0d:9f:bd:d3:c5:91:c8:c0:69:
                    8b:6d:37:45:09:fa:a1:00:85:46:e2:2c:6c:93:61:
                    44:31:9b:2d:91:b5:d3:51:e0:87:9d:7d:c9:2a:6b:
                    b0:48:bb:22:1a:58:80:aa:28:b9:f0:8c:46:49:19:
                    7b:29:e2:19:f9:96:5e:3b:56:c0:8b:0e:5b:71:66:
                    03:2c:1e:fd:ba:6d:f9:39:e0:81:0d:8d:4a:e7:3c:
                    80:b9:c3:31:5d:f9:0d:88:78:3a:af:c5:96:88:bd:
                    6f:e6:a4:d1:c8:36:82:af:36:30:29:76:db:66:68:
                    6d:b0:cd:f0:b7:d0:4f:a5:5a:0b:a8:da:51:0a:ec:
                    ee:8a:f5:57:63:b1:4a:6e:61:67:01:72:79:72:1a:
                    83:05:e6:e0:a0:22:20:93:70:ac:db:9d:c5:9f:45:
                    b5:88:e8:18:ff:80:d6:2e:66:55:91:1a:f9:3f:5e:
                    60:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:95:30:8D:26:95:87:93:8C:E2:8E:62:99:2E:84:D0:96:25:15:8A
            X509v3 Authority Key Identifier:
                keyid:3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/62923A1EF2B711EDAA29717AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.88.0/23
                IPv6:
                  2400:faa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:2d:48:9c:ab:28:62:2f:40:4f:8e:22:04:da:26:8d:eb:65:
         d9:7f:97:71:48:9d:0e:8d:6f:73:72:bd:4b:f1:8a:54:2f:8b:
         67:50:f1:34:96:e2:fc:80:38:24:2e:8a:95:7e:ec:bf:4f:ed:
         56:46:e2:29:f0:47:87:70:37:84:ce:f4:7d:6d:21:0b:14:e6:
         b4:2d:e8:74:33:c8:80:af:fa:9d:f6:bd:57:72:a0:40:07:d2:
         e1:a0:e8:23:7e:6c:c9:32:95:87:40:2d:e9:7d:25:b5:10:af:
         f5:bd:9c:24:54:f8:30:40:2d:c1:a8:4c:a9:d5:7d:7f:00:38:
         92:23:2f:ef:9d:7d:26:99:78:b0:31:b6:82:c7:9e:9f:c5:d2:
         13:96:10:94:eb:96:c4:0d:d4:53:79:0d:f9:d6:5c:09:98:83:
         0b:b1:1e:fb:d4:17:17:61:fb:15:05:c9:18:ed:3b:44:3d:31:
         0a:2c:55:c0:04:ef:7a:64:2f:c5:64:88:ae:a7:0a:b1:cd:0e:
         4b:d0:e2:0a:a0:11:5e:ba:89:ed:cd:58:cc:a1:ad:b1:7c:4d:
         30:c0:20:71:3f:7d:d5:05:b7:63:e3:2a:08:9c:06:62:00:b4:
         4a:32:6f:41:db:21:0d:24:25:d5:3f:64:1e:8f:8d:ec:a8:18:
         75:34:ae:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 09:04:09 2024 by rpki-client on console-ams.rpki-client.org