Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/702A62CE9CC311EBA5A7A47BC4F9AE02.roa
File:                     702A62CE9CC311EBA5A7A47BC4F9AE02.roa (raw, json)
Hash identifier:          4h1L3UPeFB7u6XpATtyAiPamwvkvOtamaw8dmDwjl7k=
Subject key identifier:   D3:C5:40:61:D4:C5:41:F4:CE:19:25:4C:FE:7A:52:27:5E:34:AD:2B
Certificate issuer:       /CN=A9158059/serialNumber=1F76A694442CAB43D7D17CD6FDF9A97E0B7FAA8E
Certificate serial:       055C
Authority key identifier: 1F:76:A6:94:44:2C:AB:43:D7:D1:7C:D6:FD:F9:A9:7E:0B:7F:AA:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H3amlEQsq0PX0XzW_fmpfgt_qo4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/702A62CE9CC311EBA5A7A47BC4F9AE02.roa
Signing time:             Sat 11 May 2024 01:04:27 +0000
ROA not before:           Sat 11 May 2024 01:04:27 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     142042
IP address blocks:        103.165.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.crl
                          rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H3amlEQsq0PX0XzW_fmpfgt_qo4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 00:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1372 (0x55c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158059/serialNumber=1F76A694442CAB43D7D17CD6FDF9A97E0B7FAA8E
        Validity
            Not Before: May 11 01:04:27 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=663ec41b-3956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:58:f7:a8:1c:a1:09:cf:4a:e5:36:9d:ba:20:
                    f7:df:8b:12:19:81:2c:e3:3d:72:0d:d2:65:f6:25:
                    78:83:27:50:7a:bf:d7:3d:6d:d7:6c:41:94:b1:82:
                    b5:c6:5d:8d:53:55:e8:9a:12:63:54:20:6b:e4:ba:
                    df:15:c9:61:bc:e4:56:40:b9:98:2e:76:f1:d8:c3:
                    6b:b2:80:12:57:e1:79:5c:14:8a:a5:3e:fd:31:e7:
                    32:2c:a2:eb:d3:87:2c:86:9b:e0:72:0e:80:0e:72:
                    3c:55:a2:3a:24:a2:d9:df:b0:ac:5f:f0:dc:bf:9f:
                    57:c3:3a:57:8e:df:65:32:46:cf:b2:29:54:fc:81:
                    d8:4f:03:df:ac:da:aa:00:b5:2a:21:f0:09:c3:3f:
                    86:50:94:24:24:79:ca:30:72:bd:11:cd:79:eb:f9:
                    aa:a5:b3:4d:17:7e:b0:b6:b7:97:40:cb:3a:8e:b7:
                    ce:02:33:d1:04:25:47:b5:ce:a8:4b:07:2c:1a:91:
                    da:62:72:59:a3:e2:52:2f:48:29:3c:3d:a8:80:01:
                    44:f9:e6:90:b3:2b:d2:15:25:0e:4a:eb:d5:09:bc:
                    79:c4:02:40:8d:07:e6:e8:be:47:f4:c1:10:05:f7:
                    85:81:f1:ca:0b:25:3e:fb:4f:69:07:3b:f7:c3:70:
                    d1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C5:40:61:D4:C5:41:F4:CE:19:25:4C:FE:7A:52:27:5E:34:AD:2B
            X509v3 Authority Key Identifier:
                keyid:1F:76:A6:94:44:2C:AB:43:D7:D1:7C:D6:FD:F9:A9:7E:0B:7F:AA:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H3amlEQsq0PX0XzW_fmpfgt_qo4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/702A62CE9CC311EBA5A7A47BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:7f:1e:e2:c6:11:8c:75:9a:f1:ff:e8:c7:3c:c7:6d:92:e2:
         be:89:72:19:81:29:e7:9b:21:98:0c:b1:0c:99:19:a9:f4:2f:
         f6:19:1c:aa:e1:54:70:17:ec:8b:e3:61:a5:0f:0f:b5:f3:a6:
         b2:64:1d:a8:ba:3c:a4:44:54:0e:67:05:ca:6f:a7:82:4b:6c:
         71:44:6e:88:91:44:d8:b1:13:d6:86:38:1c:17:96:1a:b6:a0:
         80:a3:d0:fa:43:08:60:17:bd:b0:ac:a9:0c:82:c0:7c:1e:45:
         fb:72:39:a4:00:38:0f:98:8e:c2:9e:ea:43:74:18:bf:7b:85:
         07:50:e7:e8:3d:b6:7b:1c:ce:a8:5c:0f:cf:4f:3e:30:1c:72:
         15:e1:94:b1:70:df:a3:b3:70:16:63:18:a5:13:11:58:8c:0f:
         f4:93:12:a2:28:bd:7a:68:ac:72:cf:d4:6a:89:ec:bc:82:6a:
         77:b7:b5:02:19:68:5b:a2:79:91:84:d2:57:a1:bd:09:d9:34:
         3d:8b:57:78:3b:c5:89:f8:d8:fc:bf:19:0d:18:62:a8:8b:ec:
         d2:23:d4:ed:6a:95:cd:4c:4e:5b:8f:00:3d:b0:24:31:23:ff:
         62:8a:c8:4f:81:3a:f5:d6:18:9d:5c:9e:e5:28:54:da:10:37:
         16:11:48:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:47:18 2024 by rpki-client on console-fra.rpki-client.org