Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/C49CBEFCD27711ECAAC6BD51C4F9AE02.roa
File:                     C49CBEFCD27711ECAAC6BD51C4F9AE02.roa (raw, json)
Hash identifier:          WikDDgybJ2Rg6nK/lHI3N5ahvBVQG6nQBfj+SmKtDMg=
Subject key identifier:   FF:DD:1F:A3:6F:4D:A2:1C:78:C8:CF:53:E4:24:33:30:DA:84:B4:7A
Certificate issuer:       /CN=A916559E/serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
Certificate serial:       2A81
Authority key identifier: 3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/C49CBEFCD27711ECAAC6BD51C4F9AE02.roa
Signing time:             Tue 30 May 2023 16:22:47 +0000
ROA not before:           Tue 30 May 2023 16:22:47 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     133535
IP address blocks:        103.233.240.0/24 maxlen: 24
                          103.233.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl
                          rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 15:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10881 (0x2a81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916559E/serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
        Validity
            Not Before: May 30 16:22:47 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=647622d6-63d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:46:2d:a2:b2:46:57:93:7c:2d:c6:69:91:eb:
                    6d:ff:e9:84:b2:19:2c:fb:00:ee:6f:97:ae:63:cc:
                    b1:f7:3c:4d:e7:93:60:7a:1e:86:52:dd:f5:aa:d6:
                    a3:4f:0e:b1:52:56:3c:52:b1:13:2f:e6:b6:36:8f:
                    c0:2c:43:37:62:22:31:b3:bf:a2:67:8f:1f:1e:0a:
                    7b:b9:c0:29:e1:49:08:4e:a6:12:5d:c7:19:bb:42:
                    ad:8a:f8:0e:96:c5:b2:4f:bb:a2:30:fd:7f:83:87:
                    74:31:62:d9:0c:75:0a:f9:18:a6:c0:87:0b:86:81:
                    61:23:8e:e9:a9:1d:c2:0f:9d:60:72:4e:31:68:5a:
                    d3:10:8b:70:96:fa:62:5f:c1:6f:2a:17:3c:45:8b:
                    57:07:ce:6a:6d:f8:65:c4:af:55:b8:a4:ad:f9:37:
                    be:64:64:28:8f:a9:a7:9b:50:52:bc:f0:66:87:d6:
                    c9:25:fc:73:17:81:58:02:4f:ba:9c:38:c7:cd:8f:
                    86:17:88:45:83:39:dd:c9:e1:c4:13:9f:eb:55:70:
                    99:13:d8:56:f7:85:cf:ca:d2:1c:63:42:56:63:b6:
                    56:9c:0f:96:43:8b:5f:79:a2:32:d4:90:28:7f:50:
                    50:f2:62:3a:1e:e6:b6:68:96:2d:29:f2:9c:5b:6f:
                    30:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DD:1F:A3:6F:4D:A2:1C:78:C8:CF:53:E4:24:33:30:DA:84:B4:7A
            X509v3 Authority Key Identifier:
                keyid:3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/C49CBEFCD27711ECAAC6BD51C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.233.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:90:38:7c:12:3b:3a:65:d1:b6:e4:45:9e:b9:ff:77:38:92:
         fb:c4:cb:fc:1c:0b:1a:12:31:31:57:78:cd:66:1d:a4:31:3a:
         41:25:91:b2:e9:26:e6:10:51:a0:ff:9d:ab:19:dd:fe:fa:3d:
         3f:0a:e6:29:ef:07:57:87:46:da:bf:2b:57:ff:49:65:5c:62:
         e9:ed:ed:0c:4c:a2:2e:5a:12:c9:37:d4:10:c8:82:c4:0a:d3:
         1e:2b:fb:86:e5:1b:c9:84:4c:fe:b4:ac:13:26:a7:e4:80:c2:
         c5:be:2a:95:7f:f7:94:aa:a6:0c:8d:d4:51:ae:e9:51:93:3f:
         ac:76:c1:5f:38:d4:e4:94:b1:1c:9b:c8:ff:58:71:be:1b:e7:
         fa:70:7a:9d:62:e7:13:5a:4e:b8:a4:3f:88:06:cb:aa:4d:51:
         d1:33:09:ec:6e:93:88:18:ba:e7:c3:0f:c6:e3:ea:e6:66:d0:
         9f:20:72:21:f1:0d:61:b4:41:8e:fc:83:fc:2f:70:e8:6f:5c:
         72:e3:4b:ce:c7:4b:f4:ea:89:87:8d:d4:f7:38:05:f5:39:40:
         5d:6d:2e:7c:ce:2f:eb:d3:22:15:ee:d4:12:01:3d:95:43:a8:
         9b:06:43:63:39:f7:46:7d:13:32:c0:87:dc:7a:a0:63:60:18:
         e3:ed:14:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 17:51:21 2024 by rpki-client on console-ams.rpki-client.org