Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/E0207030F13611EE869F9E34C4F9AE02.roa
File:                     E0207030F13611EE869F9E34C4F9AE02.roa (raw, json)
Hash identifier:          OsYm03YOb1sFS9q082zuXs6miPfh1tqBo5SwMn83UWQ=
Subject key identifier:   B0:BE:C4:93:1E:22:2A:02:C8:75:DB:BC:C2:93:88:B0:4E:03:73:48
Certificate issuer:       /CN=A915B4B5/serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707
Certificate serial:       02
Authority key identifier: F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/E0207030F13611EE869F9E34C4F9AE02.roa
Signing time:             Tue 02 Apr 2024 21:20:49 +0000
ROA not before:           Tue 02 Apr 2024 21:20:49 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     135142
IP address blocks:        103.210.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl
                          rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 08:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B4B5/serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707
        Validity
            Not Before: Apr  2 21:20:49 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=660c76b0-f9ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b1:c2:a8:a1:2a:b8:11:c9:e4:a3:48:3e:33:
                    90:c3:0c:3d:c8:85:ae:fc:b7:32:17:e5:d0:ce:bf:
                    7b:d4:cf:a3:75:72:ac:12:87:f2:3e:ac:1b:06:42:
                    83:47:92:8d:8d:70:29:69:d7:f6:e3:c0:0d:a1:0e:
                    e0:8d:a9:3b:f1:2c:5e:80:29:75:b9:39:fc:83:87:
                    63:fc:34:44:7c:1f:46:6c:90:ba:64:7d:71:70:c5:
                    e7:eb:ba:21:83:d1:0d:f5:29:be:52:7c:ae:b3:fc:
                    41:fa:93:02:23:d4:dd:13:9f:1a:dd:f2:1d:a9:67:
                    b5:4a:40:b6:05:7d:6b:5e:97:3c:65:54:50:0f:f1:
                    15:64:be:25:f4:33:30:85:bf:1d:ab:14:24:6c:f3:
                    59:b6:1f:3d:52:3e:4c:d6:1d:dc:b6:f7:9d:d1:a2:
                    af:fa:f3:e5:17:70:2f:c4:cc:39:15:40:bd:6f:c5:
                    9d:94:53:10:7f:db:5e:39:80:7b:d0:5a:e2:5c:dd:
                    e2:90:d4:c7:70:41:d3:f3:34:38:77:80:ff:73:38:
                    13:42:0a:ab:c5:2b:12:37:6d:d2:a1:67:0c:8c:5a:
                    75:29:47:50:46:5d:66:e3:01:16:66:b1:7c:30:ac:
                    03:15:3e:06:34:da:54:ed:a9:86:89:bd:13:cc:6e:
                    c1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BE:C4:93:1E:22:2A:02:C8:75:DB:BC:C2:93:88:B0:4E:03:73:48
            X509v3 Authority Key Identifier:
                keyid:F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/E0207030F13611EE869F9E34C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:5e:18:35:74:1f:fc:a3:e5:38:2b:75:4e:7f:c2:38:fc:62:
         2e:ca:eb:83:89:f4:c0:d5:97:00:e6:91:0e:c2:30:fc:a8:11:
         5f:99:97:d4:a4:8d:98:ea:6f:b2:41:d6:0e:90:63:3c:b9:75:
         bc:eb:6e:98:01:5b:f0:66:ed:38:02:e9:75:9a:7e:0c:a9:37:
         8c:ae:4f:8d:4a:f5:7c:26:86:fe:7f:40:c1:ed:27:6b:c9:5b:
         89:a1:34:2a:92:68:d1:c4:07:7b:31:c1:8b:ec:68:f4:71:de:
         93:ae:f6:a4:7f:c6:5a:be:68:23:f0:d9:10:64:6d:77:f7:77:
         5a:e0:4d:77:fd:8c:25:55:a5:0a:64:44:ef:53:3e:f1:ad:d2:
         78:bf:87:74:b4:d0:5b:01:3b:98:1d:1e:20:dc:0d:3a:0b:20:
         1d:73:8c:99:e5:24:e4:de:0d:50:17:11:8c:e5:69:8c:45:86:
         3b:e7:42:cf:66:26:8c:ba:fe:b0:b4:9f:61:75:7d:ea:d6:27:
         99:40:81:61:61:da:27:9b:78:45:bb:76:b2:17:77:e1:5d:e7:
         cd:1f:15:12:fe:1b:6b:fd:55:86:00:01:03:36:69:9e:47:d9:
         9a:5a:8e:cf:c2:2d:7a:ed:20:e6:58:40:a8:74:19:68:89:d6:
         34:14:22:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:47:15 2024 by rpki-client on console-ams.rpki-client.org