Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/54E64EE89EAE11E9AF631F7DC4F9AE02.roa
File:                     54E64EE89EAE11E9AF631F7DC4F9AE02.roa (raw, json)
Hash identifier:          0o8ZYM3j9nrWyE1VWy9lQYfqNMdLyhoKp5qXNFXqoTo=
Subject key identifier:   E5:D5:EC:31:24:B4:32:2F:90:36:DF:D0:5E:27:62:CC:81:2D:67:03
Certificate issuer:       /CN=A9162557/serialNumber=83FFAAA7D9A47592B1D4C583DFEBFAEEA27163EF
Certificate serial:       0B28
Authority key identifier: 83:FF:AA:A7:D9:A4:75:92:B1:D4:C5:83:DF:EB:FA:EE:A2:71:63:EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/54E64EE89EAE11E9AF631F7DC4F9AE02.roa
Signing time:             Wed 04 May 2022 07:25:50 +0000
ROA not before:           Wed 04 May 2022 07:25:50 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     20473
IP address blocks:        103.113.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.crl
                          rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Mar 2023 19:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2856 (0xb28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162557/serialNumber=83FFAAA7D9A47592B1D4C583DFEBFAEEA27163EF
        Validity
            Not Before: May  4 07:25:50 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=62722a7e-281e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ae:64:d9:d6:67:44:08:c9:e9:fb:1e:b9:5e:
                    03:9c:ef:4f:3a:ba:07:86:83:93:16:d7:86:1b:a9:
                    e2:0f:50:05:61:8c:9a:0b:e7:09:17:b6:36:64:3d:
                    39:10:eb:d4:d6:3b:83:a2:72:04:d6:ed:ef:d0:ad:
                    2a:c9:42:e3:c4:d8:69:1f:7e:1e:c4:46:35:c5:40:
                    f3:13:82:56:77:44:9a:61:14:d0:28:e5:9d:cc:0d:
                    c9:92:40:73:54:e6:c1:d1:8d:68:b7:d7:fa:1c:2b:
                    88:35:b2:f2:1e:ac:33:14:02:7d:7c:e2:74:e3:14:
                    73:82:4c:2d:0c:78:95:5b:7a:30:0d:8f:96:1c:0b:
                    1b:bb:39:14:74:f9:4c:63:45:c8:50:41:28:08:3d:
                    d5:bd:6c:ae:6e:c1:f9:f3:b9:48:d0:35:00:71:40:
                    04:3d:b1:70:c4:e9:c7:bf:ad:56:8f:65:53:eb:c5:
                    22:6e:76:fb:6b:b4:49:e2:af:8d:5e:d8:0e:4f:78:
                    68:1c:3b:79:9e:61:de:10:ad:09:ca:fd:2c:49:65:
                    8a:1f:5b:a3:ba:2c:0c:47:f2:3e:48:60:1a:0d:11:
                    e4:01:77:a3:3d:7b:da:70:3e:8a:45:ae:07:aa:74:
                    af:99:94:d4:05:0b:b3:f2:cb:97:d6:85:e9:62:de:
                    18:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E5:D5:EC:31:24:B4:32:2F:90:36:DF:D0:5E:27:62:CC:81:2D:67:03
            X509v3 Authority Key Identifier: 
                keyid:83:FF:AA:A7:D9:A4:75:92:B1:D4:C5:83:DF:EB:FA:EE:A2:71:63:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/54E64EE89EAE11E9AF631F7DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:dc:3d:b3:d7:80:c8:b9:41:7c:55:4e:6f:e4:f6:b2:ac:bb:
         19:dc:32:a7:19:e6:d7:ca:2e:c5:63:90:d8:61:20:4e:d6:c0:
         55:90:0a:53:f7:b9:0b:b7:85:3c:de:5f:ff:6a:38:fe:28:46:
         ad:10:1a:be:74:c8:33:b2:33:4c:51:88:a3:66:24:6e:29:6e:
         9f:5e:8c:2b:78:8d:7a:06:da:e3:0a:b3:e3:6e:8a:5d:b4:60:
         03:ce:11:77:88:1e:42:9d:e7:f5:12:41:c7:dc:24:b6:40:55:
         99:67:7a:bb:ed:c7:66:30:84:d5:99:ec:cb:e0:41:79:bd:00:
         ca:a0:44:2e:20:14:34:b2:fb:6b:cf:d1:a8:e6:7b:d9:10:a3:
         8e:0f:32:c0:ce:2a:a6:5f:e1:4b:05:71:c3:11:7d:3f:42:96:
         c2:bb:aa:b8:79:5b:94:64:79:b2:b1:b4:43:d9:07:23:b2:e7:
         15:73:e5:4c:c1:de:14:91:15:12:d2:a7:55:ef:4d:af:6b:6d:
         cc:34:c7:38:76:b3:10:29:57:54:e3:2a:3d:df:cf:bf:93:e3:
         67:89:4a:6f:52:58:82:54:dc:1a:c2:c0:82:00:79:14:07:ac:
         2f:80:be:9e:89:b8:5d:95:cb:42:11:b0:27:6e:6f:56:a2:c5:
         cc:1d:73:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 15 11:44:25 2023 by rpki-client on console-ams.rpki-client.org