Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/102C7C702D2111EBB741A15CC4F9AE02.roa
File:                     102C7C702D2111EBB741A15CC4F9AE02.roa (raw, json)
Hash identifier:          0QuQ1fp4fruXYJeama15NTzAuJxLEotWeOskkwIthSM=
Subject key identifier:   97:C0:40:86:40:11:23:55:5C:AF:1B:E7:4E:E7:7E:90:39:51:29:CF
Certificate issuer:       /CN=A916A033/serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD
Certificate serial:       05EA
Authority key identifier: B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/102C7C702D2111EBB741A15CC4F9AE02.roa
Signing time:             Tue 04 Jul 2023 22:49:24 +0000
ROA not before:           Tue 04 Jul 2023 22:49:23 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     45654
IP address blocks:        103.115.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl
                          rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 23:20:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1514 (0x5ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A033/serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD
        Validity
            Not Before: Jul  4 22:49:23 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64a4a1f3-4035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0d:a2:3f:9f:50:81:7c:69:94:4c:59:9c:87:
                    8e:3d:cc:d0:d6:16:8f:ee:c5:16:36:68:bc:13:a8:
                    b0:fe:c1:11:70:5b:1a:73:af:c7:c3:cf:cd:46:a8:
                    04:fa:f8:ea:0e:da:77:7e:3d:f5:f0:d4:47:c5:96:
                    3d:05:f1:b2:62:2e:07:62:8e:f2:27:19:5c:8c:11:
                    97:c2:0c:5a:4b:7a:1e:a5:3e:86:60:76:c3:39:44:
                    53:2c:d0:d4:60:fc:22:59:a6:d2:3e:61:9c:bc:15:
                    32:0f:53:f2:50:66:26:08:bc:70:62:50:01:24:54:
                    44:e7:f9:3b:de:9c:a4:24:1b:6a:85:c1:9a:57:cc:
                    21:75:39:9f:9e:3e:5c:b3:ef:37:f3:81:9a:2b:26:
                    c9:fb:b6:e7:1d:b6:1e:8a:31:35:d6:3e:c5:22:93:
                    61:64:7c:2d:af:d1:1e:6c:71:14:6f:08:79:89:a0:
                    a7:f2:99:ff:a2:52:c3:3c:b3:ff:fa:35:86:43:bf:
                    68:03:22:d3:f4:d0:13:78:fc:0b:59:21:16:1d:aa:
                    42:b5:47:e1:2e:64:a2:bb:c6:e7:67:0a:35:f7:f8:
                    6c:26:03:dc:97:98:2c:46:c5:7d:28:39:b5:f2:14:
                    66:67:29:50:a5:03:1f:d5:07:47:1d:7f:55:bf:bc:
                    27:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C0:40:86:40:11:23:55:5C:AF:1B:E7:4E:E7:7E:90:39:51:29:CF
            X509v3 Authority Key Identifier:
                keyid:B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/102C7C702D2111EBB741A15CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:e0:c1:d4:c8:91:77:d9:da:94:ef:7b:ae:dd:70:03:b6:8e:
         07:c8:62:2b:e1:1e:e1:a3:ae:bd:b9:5f:f5:7c:1a:6c:12:e5:
         c1:2c:56:de:c6:bf:37:56:73:e1:20:3d:45:b7:a3:7a:3d:74:
         5e:65:ff:e3:f8:59:77:0e:91:ae:83:b4:40:84:8b:b1:99:26:
         53:79:08:44:5e:4e:11:62:f9:fc:4a:9d:18:5b:51:8e:ad:1f:
         11:bb:28:d3:7b:c6:57:f3:ea:3c:dc:42:cc:74:12:a9:2c:61:
         fb:fc:33:51:08:a1:10:87:ec:cc:28:0d:46:61:c4:5a:94:99:
         e4:47:aa:14:88:58:8a:62:29:a5:64:95:bd:55:17:e9:f7:7b:
         fe:bf:15:3e:84:49:c4:b6:85:f2:08:8e:cd:80:3b:0e:40:aa:
         37:5e:c6:dc:ab:9c:ba:93:13:c1:01:dd:3b:e1:48:40:0f:fc:
         02:ec:e7:ba:bb:15:b0:cf:59:7e:e4:0b:fe:66:96:f7:b7:e4:
         d5:34:7e:70:cd:18:ef:05:96:02:96:da:05:77:9a:b6:b9:e6:
         d5:f2:1e:fa:45:f9:a1:aa:36:a4:a4:c2:fc:74:c1:b8:51:c8:
         1d:ba:c5:f4:1c:39:1e:68:b6:83:b4:d3:72:40:46:5a:95:ea:
         70:4b:7b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 00:53:17 2024 by rpki-client on console-ams.rpki-client.org