Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/54E64EE89EAE11E9AF631F7DC4F9AE02.roa
File:                     54E64EE89EAE11E9AF631F7DC4F9AE02.roa (raw, json)
Hash identifier:          iPisWQqnSiuuGZTAqlGXpvKcwAx/lgWs5/Zs3Ile8Go=
Subject key identifier:   9F:3C:15:45:56:AD:45:E5:BB:25:11:2C:5D:61:86:0C:3E:71:DD:B8
Certificate issuer:       /CN=A9162557/serialNumber=83FFAAA7D9A47592B1D4C583DFEBFAEEA27163EF
Certificate serial:       0CC7
Authority key identifier: 83:FF:AA:A7:D9:A4:75:92:B1:D4:C5:83:DF:EB:FA:EE:A2:71:63:EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/54E64EE89EAE11E9AF631F7DC4F9AE02.roa
Signing time:             Thu 04 May 2023 19:36:17 +0000
ROA not before:           Thu 04 May 2023 19:36:17 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     20473
IP address blocks:        103.113.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.crl
                          rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 18:35:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3271 (0xcc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162557/serialNumber=83FFAAA7D9A47592B1D4C583DFEBFAEEA27163EF
        Validity
            Not Before: May  4 19:36:17 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64540931-7244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:04:7f:92:03:e6:e3:82:6e:61:8a:ac:52:a0:
                    eb:db:dc:cb:71:7f:f9:41:8f:25:b2:92:c4:c8:95:
                    a1:ec:a4:a8:02:c4:6c:5a:8c:b6:9d:07:6c:ae:df:
                    92:31:58:d9:ed:f4:59:aa:23:cc:66:d6:97:a8:66:
                    cb:e3:7e:76:bf:9f:a3:ce:9c:55:1c:d7:1c:c8:a7:
                    6b:c1:19:24:d2:7e:a3:3c:87:6a:97:14:ea:8a:a8:
                    7c:9b:17:1f:4d:c3:07:74:87:e3:b9:fc:77:98:1c:
                    07:b5:de:e1:99:60:f2:50:47:6a:1e:33:3d:8a:50:
                    3f:9c:d7:ae:cc:67:c8:c3:f7:63:20:3f:9a:47:40:
                    8d:60:b3:55:53:4d:85:d7:cf:21:e3:d7:b5:f0:6d:
                    31:43:8c:34:76:40:2a:69:db:60:43:39:27:1c:99:
                    b0:c4:86:83:40:9a:eb:bb:49:87:0d:f4:15:0f:6c:
                    58:8f:52:6f:54:fb:ae:c7:75:9a:b6:aa:f2:46:37:
                    ba:bb:1f:b8:1f:0c:6a:49:b9:08:f1:e5:d6:20:ad:
                    ab:3c:01:fb:c3:be:c6:d6:ae:6a:f3:44:63:f3:cc:
                    99:ba:da:c0:7e:83:f0:dc:77:eb:0e:5d:f7:ef:c1:
                    b5:d2:08:79:b5:08:aa:46:5d:2e:92:5a:90:06:b2:
                    0c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:3C:15:45:56:AD:45:E5:BB:25:11:2C:5D:61:86:0C:3E:71:DD:B8
            X509v3 Authority Key Identifier:
                keyid:83:FF:AA:A7:D9:A4:75:92:B1:D4:C5:83:DF:EB:FA:EE:A2:71:63:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/54E64EE89EAE11E9AF631F7DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:3f:d6:a2:fe:b8:11:f5:95:43:97:16:80:ab:71:1a:9f:bc:
         6f:24:15:dd:5d:a9:f3:f4:b3:46:b2:ab:35:37:a4:86:65:ed:
         56:de:ce:29:be:fc:35:5a:f4:a5:b6:a1:cf:20:d7:13:e0:21:
         41:99:b8:fa:9a:66:9e:26:38:6b:2e:78:d8:6a:2d:5a:d0:f4:
         ce:83:e5:8e:6c:e6:50:13:8f:f1:4f:c0:ec:2e:9c:f1:eb:4b:
         82:76:5e:f8:72:19:1b:e6:9c:ca:df:d9:b2:77:24:0b:3e:e0:
         ae:29:34:cc:9d:ed:cf:d0:84:c6:7f:18:20:ff:55:bd:d0:f0:
         cf:6a:e6:81:c4:40:e0:ec:6d:7c:bd:70:e1:b7:fe:68:a3:0c:
         d1:d6:c2:39:51:b8:af:82:0a:31:44:bc:5a:f0:55:f0:32:b5:
         cb:87:93:ae:87:3b:15:d6:57:a1:29:58:8f:a0:8d:4d:9f:c3:
         e3:1c:1a:76:cd:b4:8b:ce:3b:7d:e4:ee:d0:74:00:aa:40:eb:
         3f:bc:5e:81:e6:63:be:7f:9b:fc:eb:ac:f9:cf:49:10:26:45:
         d3:60:7b:66:ec:d6:3e:0c:0c:e8:a7:4c:f7:37:3f:75:1d:ab:
         24:71:6c:c0:fb:22:91:6f:1e:5f:4c:ab:c0:f0:32:4c:22:ab:
         c6:bf:bf:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 20:29:48 2024 by rpki-client on console-fra.rpki-client.org