Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/97EC93B821DA11EBAA441F75C4F9AE02.roa
File:                     97EC93B821DA11EBAA441F75C4F9AE02.roa (raw, json)
Hash identifier:          mIDkVD+w0LImly6rJJEIX9OU1xD9wtYYV0BlfRwoFKU=
Subject key identifier:   7F:04:58:95:F7:2A:9D:74:D0:BA:CB:E4:52:6A:55:A3:9A:C5:9D:E4
Certificate issuer:       /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91
Certificate serial:       0A62
Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/97EC93B821DA11EBAA441F75C4F9AE02.roa
Signing time:             Sun 08 Jan 2023 20:16:57 +0000
ROA not before:           Sun 08 Jan 2023 20:16:57 +0000
ROA not after:            Fri 01 Mar 2024 00:00:00 +0000
asID:                     135386
IP address blocks:        103.145.38.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl
                          rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Mar 2023 20:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2658 (0xa62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91
        Validity
            Not Before: Jan  8 20:16:57 2023 GMT
            Not After : Mar  1 00:00:00 2024 GMT
        Subject: CN=63bb24b8-9f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f9:ff:89:c2:2c:25:06:58:5f:65:52:cc:a1:
                    7d:ec:5f:e0:80:27:fc:ef:4d:b0:01:8f:64:c4:6c:
                    bd:18:33:8b:dc:fd:6c:5d:41:30:8c:16:83:4b:b5:
                    10:28:d4:63:44:19:ee:b4:63:54:c2:34:7e:d0:26:
                    c8:1a:7e:08:b8:86:1b:51:6a:aa:c5:58:e6:13:9e:
                    07:dd:47:ff:f0:5c:1c:39:de:70:3e:32:43:6c:35:
                    19:1e:51:3c:c3:bb:c6:c9:51:2f:7c:1e:68:d8:5c:
                    9a:c6:6b:60:c2:fd:73:01:33:63:72:3f:e2:ec:3b:
                    ab:82:74:b7:11:91:68:d0:4c:df:ea:2c:c8:95:e0:
                    58:7d:81:49:67:10:35:a6:72:3e:b1:25:96:ec:6b:
                    df:df:80:57:f8:86:bb:c9:61:89:ef:98:ac:f9:e8:
                    1e:80:f2:fd:c8:25:c9:90:fe:a0:9a:b7:d4:97:9d:
                    8c:fa:d0:72:f5:19:22:a9:b4:83:28:fa:77:94:f0:
                    66:b0:15:ed:9e:40:07:76:53:b4:32:05:eb:c6:34:
                    ae:18:2a:05:22:66:30:dc:98:2c:a9:db:6d:e5:1c:
                    95:42:cd:b0:c6:31:34:c7:01:cd:74:26:34:24:01:
                    53:e3:13:02:ed:c7:14:3d:27:77:dc:25:d4:92:75:
                    72:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7F:04:58:95:F7:2A:9D:74:D0:BA:CB:E4:52:6A:55:A3:9A:C5:9D:E4
            X509v3 Authority Key Identifier: 
                keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/97EC93B821DA11EBAA441F75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:1b:a5:2f:52:87:52:b8:8b:6b:8c:53:28:5d:69:ce:51:0a:
         e0:92:0a:0b:1a:e3:32:06:78:0a:dd:c7:ad:a3:3a:48:34:42:
         6a:52:5b:f5:76:2a:26:88:75:10:95:57:dc:a3:d9:26:63:56:
         6e:5d:49:85:d9:fe:fd:19:33:f9:44:08:af:f8:35:da:28:e0:
         b0:22:f9:ed:0f:4c:26:44:36:be:19:8f:94:b9:82:a7:f1:c5:
         0e:1a:03:ac:26:48:03:80:fe:88:e3:88:75:89:94:32:22:dc:
         d1:7e:14:83:6e:bf:b2:ff:e2:b9:e6:33:13:bf:ff:08:50:ba:
         a9:be:64:21:e8:ba:f2:1d:42:6c:a9:94:6e:79:fc:e6:52:0e:
         3c:e8:af:ab:06:64:68:fd:f9:dd:68:1e:28:5c:a1:ed:ff:43:
         f6:5e:71:f9:87:52:bf:34:21:01:23:b8:24:23:50:d9:8f:74:
         15:c1:95:9e:41:66:8d:fb:f0:ad:32:51:c5:fb:07:b2:26:0c:
         ec:24:0f:6a:7b:9c:cf:39:bf:3f:e3:22:ab:be:f7:73:4b:76:
         01:9c:ea:14:ac:c1:52:32:d3:6e:7a:9f:45:48:58:e3:1a:0c:
         b5:4e:1c:8a:c4:eb:53:6b:6c:b5:36:d1:0c:41:dc:30:eb:73:
         e2:90:36:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 15 11:53:30 2023 by rpki-client on console-fra.rpki-client.org