Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/717DC7D4688011EEB1FB1959C4F9AE02.roa
File:                     717DC7D4688011EEB1FB1959C4F9AE02.roa (raw, json)
Hash identifier:          voTdqkVIgk5PrL5fF3IbG6qj2hjdu2WrO//xgYy60xA=
Subject key identifier:   1C:E3:93:9E:C0:FC:B9:EF:E7:92:95:3A:39:3E:CD:59:15:0C:E0:15
Certificate issuer:       /CN=A915FECB/serialNumber=B4B4AB9F3CB04430FD64D4EE2ADD0845E44D57FF
Certificate serial:       F5
Authority key identifier: B4:B4:AB:9F:3C:B0:44:30:FD:64:D4:EE:2A:DD:08:45:E4:4D:57:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLSrnzywRDD9ZNTuKt0IReRNV_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/717DC7D4688011EEB1FB1959C4F9AE02.roa
Signing time:             Fri 05 Apr 2024 06:08:59 +0000
ROA not before:           Fri 05 Apr 2024 06:08:59 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     7029
IP address blocks:        103.136.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/tLSrnzywRDD9ZNTuKt0IReRNV_8.crl
                          rsync://rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/tLSrnzywRDD9ZNTuKt0IReRNV_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLSrnzywRDD9ZNTuKt0IReRNV_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 11:58:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FECB/serialNumber=B4B4AB9F3CB04430FD64D4EE2ADD0845E44D57FF
        Validity
            Not Before: Apr  5 06:08:59 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=660f957b-3ef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c2:6c:d5:07:2c:b0:57:15:a7:e9:21:96:9e:
                    52:e8:98:7e:f0:f0:3f:63:e3:6d:1b:24:90:ba:a6:
                    e1:1c:e4:21:4d:f5:b6:96:7a:31:9c:b8:f1:85:eb:
                    8a:c0:4e:70:38:53:be:07:9c:d3:0b:0a:a9:e9:e3:
                    0b:43:c7:37:c5:21:d3:1c:fd:38:54:67:0e:80:7d:
                    ad:ed:03:6b:5b:5e:e7:39:bb:48:09:72:42:6a:8d:
                    53:91:22:07:27:4a:69:dc:87:c0:c4:1a:21:b2:0d:
                    30:53:75:e8:ce:2a:b2:fc:3c:e3:00:b1:9a:e1:c7:
                    12:1e:3a:e5:4b:57:ad:0e:36:4e:38:54:c9:e8:72:
                    0a:28:69:12:73:a4:4e:79:2e:10:8c:66:cb:7e:07:
                    4a:89:86:6e:dd:60:c6:da:24:34:2a:fe:aa:3a:78:
                    d0:26:10:fe:bd:31:2e:57:f3:55:dc:e5:ec:bc:cf:
                    50:78:0a:97:92:3d:fa:1e:d2:0c:e9:33:35:b5:11:
                    5a:d1:59:a1:17:66:e7:8f:56:c7:9b:2c:a6:e4:c2:
                    c7:1a:14:18:33:18:ab:44:f9:e9:cd:c7:e4:87:35:
                    2e:d2:99:ff:3c:78:b7:1c:20:8e:45:be:89:56:c4:
                    40:73:ac:91:69:b2:7c:d6:4f:b1:09:64:15:fb:a6:
                    96:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E3:93:9E:C0:FC:B9:EF:E7:92:95:3A:39:3E:CD:59:15:0C:E0:15
            X509v3 Authority Key Identifier:
                keyid:B4:B4:AB:9F:3C:B0:44:30:FD:64:D4:EE:2A:DD:08:45:E4:4D:57:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/tLSrnzywRDD9ZNTuKt0IReRNV_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLSrnzywRDD9ZNTuKt0IReRNV_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/717DC7D4688011EEB1FB1959C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:a7:b3:0d:b7:0d:7b:f7:eb:e9:ed:82:b5:8b:00:33:cc:4d:
         bd:7a:8d:99:5f:c6:77:ab:9b:f1:99:dc:4a:04:ef:76:c0:65:
         35:2e:24:e6:8b:75:66:d3:fa:f1:68:51:ce:74:00:86:f1:4b:
         19:65:5b:78:0e:d7:77:76:52:07:f5:0b:49:18:ce:d8:aa:7f:
         9b:cd:c0:cc:ec:f1:8c:84:dd:88:e9:06:20:72:3c:dd:e3:c7:
         ff:8c:73:bc:41:c0:a7:73:2f:06:a8:a2:7b:8a:40:33:96:2f:
         c4:b0:f4:6e:89:5e:5a:b5:ec:df:a4:3a:d1:92:c8:8c:49:ee:
         1f:85:67:a0:b3:53:2b:27:68:dd:14:9d:26:8e:f0:7a:aa:71:
         61:f7:cc:57:23:6e:40:da:c6:07:5a:cd:5d:4d:f4:c9:63:a9:
         2d:6e:ce:73:7d:81:e3:e2:ac:ef:d7:a9:a7:d7:1a:a4:11:11:
         e4:b7:66:71:95:04:da:fa:90:c8:e0:aa:73:92:98:cd:e5:ba:
         f3:7d:04:f6:dc:2b:b2:7a:77:29:8f:82:89:70:cf:dd:2d:8a:
         30:e6:13:65:48:03:88:d1:d6:13:2f:28:7b:6a:ce:70:17:b9:
         2d:3f:9a:ee:8d:71:8d:16:bd:bd:d4:11:dc:ee:b8:58:0a:a4:
         4d:0f:8c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 13:12:48 2024 by rpki-client on console-ams.rpki-client.org