Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/67CD2004292211EB8A9B3D73C4F9AE02.roa
File:                     67CD2004292211EB8A9B3D73C4F9AE02.roa (raw, json)
Hash identifier:          udcD1sUGiA9k+25JZ+c/uFAobFLj5N2yKIDBnK+rCHQ=
Subject key identifier:   B2:07:82:65:91:00:61:5F:DD:78:FF:6C:D1:A8:BE:3D:D2:18:0D:2C
Certificate issuer:       /CN=A916432A/serialNumber=B4D41589325671664B2C604F12DE04757E2ECCDB
Certificate serial:       064E
Authority key identifier: B4:D4:15:89:32:56:71:66:4B:2C:60:4F:12:DE:04:75:7E:2E:CC:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/67CD2004292211EB8A9B3D73C4F9AE02.roa
Signing time:             Sat 18 Nov 2023 23:00:48 +0000
ROA not before:           Sat 18 Nov 2023 23:00:48 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     136902
IP address blocks:        103.157.182.0/24 maxlen: 24
                          103.157.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.crl
                          rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1614 (0x64e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916432A/serialNumber=B4D41589325671664B2C604F12DE04757E2ECCDB
        Validity
            Not Before: Nov 18 23:00:48 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=65594220-6982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:12:0d:a9:c7:4b:c7:06:dd:d6:52:cf:de:0c:
                    9e:20:e8:5a:1e:d4:93:a1:b2:09:bd:57:f1:fb:50:
                    06:58:c8:70:5f:7c:86:44:9e:87:8e:38:57:f3:87:
                    1c:10:94:9a:9e:e3:88:b0:8b:90:d8:6d:9c:83:64:
                    f7:f2:a8:7e:af:33:c3:87:32:79:bd:dc:a1:85:79:
                    13:43:b2:95:a5:93:36:0a:42:9f:29:c1:aa:ea:84:
                    c3:aa:02:52:24:c5:c5:ee:10:58:d4:24:67:3e:3b:
                    91:68:81:d1:7e:98:0f:2c:02:40:04:30:c0:1f:fc:
                    55:4f:21:7b:10:53:bc:da:66:18:78:bc:19:00:17:
                    3a:e9:f5:62:c8:d0:d0:3a:76:cb:73:0d:35:6c:35:
                    3b:8a:43:15:3c:84:6b:f0:ac:6c:8b:29:c5:28:e1:
                    52:e0:f8:67:79:86:7f:a7:b8:07:67:15:f1:af:9d:
                    74:0d:4b:71:5b:7a:6b:91:a7:51:dc:99:4e:56:82:
                    55:54:34:ab:f4:fb:cc:38:e5:ca:93:ff:ca:9e:63:
                    ec:0e:ae:aa:f4:82:f0:e5:69:4d:b3:98:bd:e5:4f:
                    8e:70:76:5b:8a:80:57:42:ba:bf:7b:61:20:48:07:
                    7b:6a:f0:32:cd:5d:78:5f:68:2b:b2:a5:a7:2a:99:
                    b9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:07:82:65:91:00:61:5F:DD:78:FF:6C:D1:A8:BE:3D:D2:18:0D:2C
            X509v3 Authority Key Identifier:
                keyid:B4:D4:15:89:32:56:71:66:4B:2C:60:4F:12:DE:04:75:7E:2E:CC:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/67CD2004292211EB8A9B3D73C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:81:5f:e7:45:1e:c6:76:ce:12:8f:47:6b:80:de:50:1c:ea:
         6b:bb:fe:6f:d5:eb:ea:e3:d9:19:8f:92:d4:7c:76:33:74:24:
         96:e1:99:19:ab:19:46:c3:2b:60:60:21:35:56:ff:9b:fe:70:
         19:f9:22:f1:d5:b1:10:e4:c7:25:4a:5c:23:84:ae:14:8f:40:
         fc:54:17:3e:da:c3:bf:49:11:7d:06:3b:2a:98:d9:fd:83:fa:
         f0:9e:e4:85:c5:3d:75:2f:52:3d:73:00:32:c3:93:e2:c1:8c:
         d9:6a:7f:96:c6:ea:9a:c9:30:b8:b9:32:e6:53:67:df:cc:42:
         5d:3c:97:96:88:3f:54:91:a6:4e:4d:1c:bb:04:e5:51:29:74:
         4f:9d:e1:56:1a:e3:84:b6:b0:7c:3e:20:ab:6c:08:07:74:4f:
         96:2a:c8:7f:e0:5b:58:57:74:12:66:14:0a:3e:81:72:b7:39:
         cd:af:80:ea:b1:9d:a8:13:6a:c1:fd:7c:24:a6:a9:3d:9f:c7:
         4b:67:84:b5:04:ab:f3:61:f3:db:76:a7:42:88:9f:d4:51:90:
         50:62:2c:16:47:bd:2c:fc:9b:a4:59:ce:e8:af:88:5e:f3:a6:
         da:30:e7:31:0c:5e:5b:f6:c8:92:56:5a:7a:ee:86:68:2c:0e:
         bd:f7:d3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:41 2024 by rpki-client on console-ams.rpki-client.org