Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/47B1ABEA005711EF9DA70542C4F9AE02.roa
File:                     47B1ABEA005711EF9DA70542C4F9AE02.roa (raw, json)
Hash identifier:          rBQ+USzPzRB2tBagyPEKaCTJtKJjIgeSQgYiM3GVByY=
Subject key identifier:   5A:42:AA:90:7E:B6:BC:04:1B:82:62:52:C7:3D:41:46:37:E2:9E:E7
Certificate issuer:       /CN=A915A0FB/serialNumber=6E4573348680326D3DADE985215D226628B9F16B
Certificate serial:       02
Authority key identifier: 6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/47B1ABEA005711EF9DA70542C4F9AE02.roa
Signing time:             Mon 22 Apr 2024 03:20:34 +0000
ROA not before:           Mon 22 Apr 2024 03:20:34 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     55720
IP address blocks:        103.175.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.crl
                          rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 09:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0FB/serialNumber=6E4573348680326D3DADE985215D226628B9F16B
        Validity
            Not Before: Apr 22 03:20:34 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=6625d781-9619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:97:3e:f9:25:2a:6a:39:f4:8e:81:ec:86:eb:
                    ce:d9:86:91:b9:78:ba:4f:74:27:1f:b7:2f:12:5c:
                    4c:ff:06:8f:f3:77:4b:a4:d8:4b:12:59:60:80:02:
                    e9:46:15:81:bf:fe:59:f7:43:2c:9a:18:32:46:86:
                    05:c3:70:57:c0:95:ee:93:3e:3f:b7:9f:37:72:31:
                    da:c0:00:d8:e2:6a:e7:39:1e:4f:10:f1:48:07:3b:
                    65:0a:fa:a5:44:d7:6b:a5:e7:bd:37:9f:c6:e7:8f:
                    cb:52:5b:88:19:45:54:b7:67:a9:de:fc:4c:da:e6:
                    be:4f:ab:c4:ea:14:27:1c:3a:d8:d6:05:87:15:4c:
                    21:4f:a6:ce:53:9c:e8:8e:95:1c:c3:da:ac:15:23:
                    bb:23:4d:4f:66:7d:5b:e5:df:0f:ed:56:a4:09:dc:
                    dc:45:21:0b:21:c5:4d:7e:2d:49:5f:9a:c3:99:ae:
                    bc:98:47:72:41:94:69:4f:c4:e8:f5:ae:99:c0:48:
                    83:52:1c:81:15:9d:b3:8b:bb:be:06:1d:2a:d8:a8:
                    d2:85:98:4e:dd:2d:50:f3:f8:70:9a:78:0c:2f:07:
                    15:23:3f:ee:63:57:18:d6:15:2b:71:44:14:ce:5c:
                    7d:41:82:7a:b6:fd:c7:0f:87:f5:e7:84:17:f5:94:
                    fd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:42:AA:90:7E:B6:BC:04:1B:82:62:52:C7:3D:41:46:37:E2:9E:E7
            X509v3 Authority Key Identifier:
                keyid:6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/47B1ABEA005711EF9DA70542C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:e4:4b:48:73:04:ba:aa:5c:c8:ca:90:03:c4:49:77:41:4a:
         ae:92:55:45:1e:68:24:96:d8:ae:99:9c:ea:6e:6e:e9:59:04:
         09:bb:ac:89:ff:56:31:b1:8e:d5:92:32:7b:0d:95:4c:7f:e9:
         f9:4f:2e:a5:d8:98:52:40:09:8f:df:38:8f:d8:41:68:bf:05:
         0d:e2:94:c4:0b:74:f6:32:ce:07:73:1c:3d:50:83:39:7c:b5:
         3f:fd:5e:78:5b:8e:ce:be:bb:90:2e:2f:d2:a2:3e:0b:c1:85:
         45:e8:7d:4c:c8:b1:c0:9e:4d:59:67:0f:42:58:4c:3b:3d:c5:
         43:06:20:ad:04:cd:78:87:9a:2f:76:c0:a4:a1:da:c0:b2:f1:
         d0:bb:ae:52:5f:b4:76:fb:ce:77:73:7d:80:3c:c1:13:62:50:
         bf:61:37:df:23:d4:94:cc:ee:b1:fe:7d:fc:b4:33:f0:83:60:
         3e:9f:28:a3:e3:5e:a0:02:16:c7:bf:91:f7:ba:1f:d2:56:bc:
         0e:98:4c:0b:8e:2e:b4:95:52:c6:8f:17:1f:02:64:2d:c6:3a:
         d6:ec:cd:7d:09:7c:6e:67:b1:79:57:2e:5d:04:71:d0:27:a6:
         da:29:f2:91:c0:1c:a2:ea:3d:d6:a0:52:b4:f3:91:31:d9:3d:
         05:0e:1b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 12:07:33 2024 by rpki-client on console-fra.rpki-client.org