Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/83B6F66C5E4711EDA05F092CC4F9AE02.roa
File:                     83B6F66C5E4711EDA05F092CC4F9AE02.roa (raw, json)
Hash identifier:          nWi0o9VNd8NXW5q6F3N5UgJeW7Qsw/IoxndPD7yf3J8=
Subject key identifier:   06:40:7A:60:C2:47:8C:61:D6:CD:56:4E:FC:EE:A3:61:CB:C9:D0:B9
Certificate issuer:       /CN=A915C365/serialNumber=A628034401C65CF46975DE8C9B4672F85E00FE9B
Certificate serial:       BB
Authority key identifier: A6:28:03:44:01:C6:5C:F4:69:75:DE:8C:9B:46:72:F8:5E:00:FE:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/83B6F66C5E4711EDA05F092CC4F9AE02.roa
Signing time:             Wed 01 Nov 2023 05:15:58 +0000
ROA not before:           Wed 01 Nov 2023 05:15:58 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     133090
IP address blocks:        27.123.20.0/24 maxlen: 24
                          27.123.21.0/24 maxlen: 24
                          27.123.22.0/24 maxlen: 24
                          27.123.23.0/24 maxlen: 24
                          103.153.144.0/24 maxlen: 24
                          103.153.145.0/24 maxlen: 24
                          2401:16c0::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl
                          rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 05:17:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C365/serialNumber=A628034401C65CF46975DE8C9B4672F85E00FE9B
        Validity
            Not Before: Nov  1 05:15:58 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6541df0d-77c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ab:f4:d3:d3:9e:84:eb:3a:b8:3b:6e:5a:85:
                    82:2a:30:95:90:59:34:f4:bf:38:02:77:b1:ba:28:
                    ab:de:16:56:48:82:77:7e:1c:49:bd:f7:38:a6:8f:
                    3e:05:62:34:e5:dc:9e:e7:10:22:3f:7d:c0:33:bf:
                    73:da:b9:38:25:48:7f:7c:fe:fa:61:56:f9:6b:64:
                    5b:2f:9e:54:2c:c6:d2:c4:6a:ac:ef:7f:8f:5b:de:
                    11:c0:74:25:92:2a:bb:a7:d7:f2:1e:76:72:a4:48:
                    7d:7d:5c:18:d4:d2:ab:fb:b0:02:5f:11:da:0a:15:
                    77:a8:50:12:09:5d:a7:e5:9e:c6:b4:83:81:89:dd:
                    fa:04:3d:27:ba:e7:4e:07:90:7e:f3:8d:14:2b:3b:
                    9e:6d:34:7c:63:c9:24:b6:3c:44:1c:28:23:03:94:
                    f3:ca:98:5b:9b:76:8a:1d:fb:a3:96:f6:9e:ef:57:
                    67:e4:8c:99:91:9d:48:c0:01:b4:9a:02:4c:76:3f:
                    1d:69:29:a8:ab:88:d2:39:9b:2b:21:51:b6:98:fb:
                    d8:3f:a0:4a:05:f8:08:d0:1f:54:ad:b6:65:69:86:
                    27:d7:db:f6:46:60:61:1c:91:aa:25:dc:d7:26:c7:
                    1c:80:f6:da:d5:8b:63:37:40:5a:d7:f8:5e:95:fb:
                    04:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:40:7A:60:C2:47:8C:61:D6:CD:56:4E:FC:EE:A3:61:CB:C9:D0:B9
            X509v3 Authority Key Identifier:
                keyid:A6:28:03:44:01:C6:5C:F4:69:75:DE:8C:9B:46:72:F8:5E:00:FE:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/83B6F66C5E4711EDA05F092CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.123.20.0/22
                  103.153.144.0/23
                IPv6:
                  2401:16c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:af:2a:79:89:4b:84:03:4b:6d:9a:5e:fc:6c:7a:b3:7f:77:
         99:9a:39:60:3a:10:49:c4:77:d5:4b:15:b6:82:8c:6c:4b:32:
         a5:a2:83:61:50:a9:40:cb:df:4c:63:b0:df:80:b9:7d:da:ad:
         1c:af:2f:2b:72:ab:37:ce:b3:18:ba:49:c2:71:8b:91:d9:10:
         8e:a4:5b:8c:99:ab:a0:b1:9c:18:0b:13:34:26:75:7e:16:1a:
         d0:e6:68:b1:91:82:d7:bd:f6:c1:d9:de:ac:21:97:53:51:ab:
         b7:58:2b:b3:2a:6b:1e:52:75:f3:f5:b3:a4:ae:2d:32:5d:96:
         63:35:5f:e7:5b:40:bc:ef:04:0a:05:2c:ed:6f:3b:93:6c:95:
         c6:5a:87:ec:7d:ed:30:6b:f5:aa:52:72:f3:b1:2f:fc:91:83:
         a7:0c:ba:9a:55:30:a5:19:39:59:a6:5a:ff:9c:8c:06:3d:7d:
         f1:69:3b:98:bc:0b:80:b2:6e:90:6d:ae:76:99:9d:2c:01:c3:
         fb:a3:2b:2a:c3:18:e7:86:08:50:61:80:2c:35:0e:01:97:c3:
         5c:35:bb:84:f3:3e:9d:54:42:34:72:7a:78:2c:68:d5:6f:9f:
         d1:4e:39:0c:da:3a:0a:ec:2e:0d:13:7c:06:96:9a:9a:97:4d:
         66:97:e0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:46:23 2024 by rpki-client on console-ams.rpki-client.org