Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/5A306016D15111EE98E6801EC4F9AE02.roa
File:                     5A306016D15111EE98E6801EC4F9AE02.roa (raw, json)
Hash identifier:          pgzM+14Bh43pq9TTN6zsX2hC9hRqfjq6z60wwjvXB6Q=
Subject key identifier:   55:97:8D:F2:B7:7A:72:6C:9B:99:56:02:99:FA:BA:9B:CD:E0:A0:D2
Certificate issuer:       /CN=A915B2EC/serialNumber=46922C565440040BD99AFD4E329ED9DEB6F92573
Certificate serial:       0417
Authority key identifier: 46:92:2C:56:54:40:04:0B:D9:9A:FD:4E:32:9E:D9:DE:B6:F9:25:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/5A306016D15111EE98E6801EC4F9AE02.roa
Signing time:             Thu 22 Feb 2024 07:09:43 +0000
ROA not before:           Thu 22 Feb 2024 07:09:43 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     51847
IP address blocks:        103.172.182.0/24 maxlen: 24
                          103.172.183.0/24 maxlen: 24
                          2407:d840:1::/48 maxlen: 48
                          2407:d840:2::/48 maxlen: 48
                          2407:d840:3:1::/64 maxlen: 64
                          2407:d840:50::/44 maxlen: 44
                          2407:d840:50::/48 maxlen: 48
                          2407:d840:51::/48 maxlen: 48
                          2407:d840:52::/48 maxlen: 48
                          2407:d840:53::/48 maxlen: 48
                          2407:d840:60::/44 maxlen: 44
                          2407:d840:60::/48 maxlen: 48
                          2407:d840:61::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl
                          rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 03:12:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1047 (0x417)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B2EC/serialNumber=46922C565440040BD99AFD4E329ED9DEB6F92573
        Validity
            Not Before: Feb 22 07:09:43 2024 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65d6f337-0f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:e2:85:67:b0:5e:e9:c7:00:7d:29:b7:7b:15:
                    94:d5:e1:00:ff:f4:97:22:fb:ce:ae:af:af:97:e4:
                    4b:c2:81:44:74:67:64:a5:72:cc:4b:f6:60:7e:30:
                    6c:e2:ac:be:d8:23:f3:b6:d9:2b:a7:89:94:79:aa:
                    8b:f8:6e:49:cc:ff:28:4b:68:76:2f:cd:f9:30:04:
                    c4:63:e3:51:39:58:b5:7e:2c:1b:3d:b6:26:a3:06:
                    2c:80:43:72:1e:cd:b4:1d:01:af:af:66:37:5c:d7:
                    29:4b:5d:24:93:ee:9d:84:79:04:c1:3f:e0:82:44:
                    7c:08:18:4b:1a:28:9d:c2:56:8e:0b:07:2d:df:9d:
                    59:9a:5b:27:ee:b8:ba:6b:24:90:bf:3b:26:92:ec:
                    37:4d:a4:08:8c:58:c4:cb:f8:91:01:1c:63:f2:0e:
                    97:28:05:26:17:fc:0a:c9:53:11:7c:16:60:05:f6:
                    a0:b3:51:89:63:f3:4e:b5:f6:b8:2e:e7:a1:45:f2:
                    13:5b:72:b6:10:5e:78:54:3e:70:bb:50:23:f2:0a:
                    28:46:e8:78:58:6e:5b:05:19:5b:89:77:76:03:a4:
                    94:3d:8e:dd:74:5d:60:7a:11:19:f9:b2:a3:43:f4:
                    5a:b3:d6:20:83:f5:9a:b3:50:89:79:f3:61:d5:40:
                    83:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:97:8D:F2:B7:7A:72:6C:9B:99:56:02:99:FA:BA:9B:CD:E0:A0:D2
            X509v3 Authority Key Identifier:
                keyid:46:92:2C:56:54:40:04:0B:D9:9A:FD:4E:32:9E:D9:DE:B6:F9:25:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/5A306016D15111EE98E6801EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.182.0/23
                IPv6:
                  2407:d840:1::-2407:d840:2:ffff:ffff:ffff:ffff:ffff
                  2407:d840:3:1::/64
                  2407:d840:50::-2407:d840:6f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         48:6a:0f:fa:89:2d:07:14:d5:4a:f6:74:ad:64:f1:72:bd:41:
         78:f0:a7:36:ba:4b:eb:c1:43:ce:f9:2a:70:15:15:53:fe:26:
         86:97:eb:c2:da:d9:46:2b:2b:35:28:d3:35:4d:12:36:cd:14:
         83:74:53:0e:59:e6:38:b8:3a:d8:69:9c:9e:89:5d:71:3e:d7:
         e7:75:88:f5:4b:0b:04:3a:b1:85:f0:e2:3d:58:52:4f:93:26:
         66:f7:a4:69:ac:ae:12:74:24:9b:4b:49:01:63:a8:31:cf:1f:
         34:a9:5c:81:16:b1:8e:31:91:cb:3c:90:23:e1:99:12:e0:8c:
         5a:87:93:83:ee:16:27:c7:a8:97:49:ad:c1:9d:17:8d:90:7f:
         4e:3c:ec:48:50:85:6f:5b:11:a5:b3:2f:65:e2:3e:81:0d:4c:
         cd:8e:0a:6b:5d:cd:0d:7b:01:48:be:8d:37:96:52:ac:44:0e:
         9b:de:1b:6e:97:cf:a6:6f:68:86:ef:d9:b8:88:47:f3:95:f4:
         8f:fa:cf:a6:bf:e9:e5:84:d3:cc:b2:4a:29:50:96:60:08:79:
         92:84:9c:5a:53:16:a9:c5:a0:d8:b4:2f:b7:cc:85:d4:96:ad:
         03:18:46:6c:53:98:3d:88:b8:a7:97:b6:71:54:27:83:ab:c9:
         0e:9f:e2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:59:02 2024 by rpki-client on console-fra.rpki-client.org