Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/86CDBD00FEB711EABA9B645CC4F9AE02.roa
File:                     86CDBD00FEB711EABA9B645CC4F9AE02.roa (raw, json)
Hash identifier:          S0WFx0QurM5cEvZ/Ed0rcX8InfPVDRAgdkIe5WxR3PY=
Subject key identifier:   7E:99:46:F9:B2:60:71:E9:FD:26:03:C5:DE:DA:89:1E:70:C0:A1:FD
Certificate issuer:       /CN=A915F912/serialNumber=7ADCA71EBE3E191330E03C94D2B4F4FF898845C5
Certificate serial:       0698
Authority key identifier: 7A:DC:A7:1E:BE:3E:19:13:30:E0:3C:94:D2:B4:F4:FF:89:88:45:C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/86CDBD00FEB711EABA9B645CC4F9AE02.roa
Signing time:             Thu 12 Oct 2023 22:30:08 +0000
ROA not before:           Thu 12 Oct 2023 22:30:08 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     4768
IP address blocks:        103.155.242.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.crl
                          rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 20:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1688 (0x698)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F912/serialNumber=7ADCA71EBE3E191330E03C94D2B4F4FF898845C5
        Validity
            Not Before: Oct 12 22:30:08 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65287370-a90e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a1:33:5d:2b:1c:d2:0f:56:35:3c:25:ed:c1:
                    60:8b:d0:33:45:41:32:93:21:a0:f0:96:d6:46:5f:
                    24:82:c9:ee:bc:26:bd:0b:b2:42:a1:48:c2:40:5d:
                    9e:f5:33:57:b6:25:f2:be:c0:70:d5:98:25:ba:5c:
                    65:c4:5e:2c:80:dc:c7:be:26:b4:ec:9b:d1:92:df:
                    9c:6c:44:e7:8a:ad:2a:33:38:71:df:15:e8:44:bc:
                    f8:c7:ef:b5:52:8a:69:c7:94:1b:96:4e:87:88:3f:
                    40:27:08:60:9d:1b:33:2f:e3:c7:a8:d4:bf:e8:34:
                    35:a8:77:b9:2d:f7:b4:f7:cf:fe:cb:26:f7:ac:b7:
                    b8:bb:4a:e3:4c:3c:73:c6:5f:59:75:f0:bb:a0:be:
                    47:60:63:5b:6b:6a:96:97:f3:97:90:0b:55:d8:95:
                    6b:f3:b5:85:61:cc:60:14:33:38:a0:6c:97:a4:c0:
                    18:a7:9e:55:21:0f:5a:eb:4c:72:94:73:e8:1c:26:
                    90:dc:cd:af:f7:53:49:6a:03:c3:90:cd:e1:ae:e2:
                    05:5e:11:3c:91:6d:1f:e6:fa:21:4f:fe:2c:45:82:
                    96:f0:e9:2d:48:d3:a1:11:6e:e5:bd:1b:40:f2:5d:
                    0e:93:2a:a3:a5:b7:74:f3:ad:33:7d:12:7a:40:78:
                    20:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:99:46:F9:B2:60:71:E9:FD:26:03:C5:DE:DA:89:1E:70:C0:A1:FD
            X509v3 Authority Key Identifier:
                keyid:7A:DC:A7:1E:BE:3E:19:13:30:E0:3C:94:D2:B4:F4:FF:89:88:45:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/86CDBD00FEB711EABA9B645CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:9b:59:06:23:e4:57:ce:78:59:9b:58:27:bb:90:d2:55:30:
         dd:dc:08:d1:99:3f:2c:08:ce:b9:46:26:7a:0c:f9:61:8d:af:
         0d:0f:f9:a9:bd:9b:08:95:a8:a6:ae:d3:84:37:42:fc:06:13:
         8e:9f:ce:c6:9d:ba:b6:bd:77:69:7e:a9:60:61:34:51:58:c8:
         b3:f4:43:6f:ff:44:a7:d0:4b:3d:53:ea:6a:ff:86:d6:24:7a:
         58:2f:00:d5:11:2d:bf:37:38:70:ac:a3:a1:a3:7e:70:37:1d:
         34:90:a8:00:29:07:c4:fc:1f:2e:db:96:99:c4:00:34:44:25:
         c9:8c:79:40:9e:82:1c:72:2b:50:cb:7a:3d:89:ef:0a:c5:fb:
         c4:40:0a:57:7b:d7:48:ea:f6:02:93:24:92:2e:d5:f8:6b:99:
         14:db:57:e9:92:c1:74:f0:d0:22:ac:48:d2:40:8a:6e:48:d1:
         9c:f6:9d:62:ae:ec:86:81:4c:98:c0:1a:f1:8f:79:81:bc:f4:
         16:01:40:19:89:e4:92:5b:4a:ed:3a:eb:ac:f8:c7:4d:47:1e:
         61:ce:7a:86:dd:be:7c:7f:52:8a:97:d8:0b:44:8a:93:e3:7b:
         df:6f:ba:b7:c2:8c:be:ac:28:91:22:98:1c:d0:37:e7:c7:2c:
         1e:1a:d6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 23:48:41 2024 by rpki-client on console-fra.rpki-client.org