Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/102C7C702D2111EBB741A15CC4F9AE02.roa
File:                     102C7C702D2111EBB741A15CC4F9AE02.roa (raw, json)
Hash identifier:          KCgNayUWmtPfdGS7Is0Ze1b8PcPt/zkwwnSWuZkApSo=
Subject key identifier:   02:A6:60:BB:D6:2B:D4:A6:05:FD:D2:55:73:64:11:BE:26:A5:B3:12
Certificate issuer:       /CN=A916A033/serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD
Certificate serial:       06A9
Authority key identifier: B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/102C7C702D2111EBB741A15CC4F9AE02.roa
Signing time:             Thu 04 Jul 2024 23:00:55 +0000
ROA not before:           Thu 04 Jul 2024 23:00:55 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     45654
IP address blocks:        103.115.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl
                          rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1705 (0x6a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A033/serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD
        Validity
            Not Before: Jul  4 23:00:55 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=668729a7-a8ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8e:0e:9a:6f:27:bd:23:81:7e:c7:01:90:97:
                    72:88:a2:34:5d:67:87:a3:d5:7f:d9:2e:f7:e6:2e:
                    a2:82:43:d9:da:7e:bb:d5:ee:e9:e2:b3:55:8e:7b:
                    2e:bc:ae:4d:88:25:0f:90:43:55:e9:61:74:34:1d:
                    14:d2:b9:26:3a:31:5e:92:06:0d:e0:46:a9:8c:10:
                    04:ef:d2:4c:61:57:b4:1d:a8:96:d3:f1:08:0c:9f:
                    1f:a8:3b:e4:63:9d:dc:10:be:f9:18:c0:6b:de:62:
                    3d:86:5e:65:66:9e:3c:a2:15:78:c4:61:2e:da:ae:
                    27:28:72:ee:ea:cc:46:69:c4:a9:9c:1d:92:dc:55:
                    e9:aa:46:84:09:4e:33:f2:b8:89:21:24:4f:c5:77:
                    0c:2f:67:fd:57:46:8a:66:26:c7:ab:c8:45:1a:85:
                    49:9b:97:64:0d:e0:c4:a7:6a:5b:4d:85:f4:41:a9:
                    94:3a:16:b4:62:a2:31:5f:a6:73:e5:57:ce:d1:d2:
                    3c:56:59:90:9d:1c:4d:7f:58:cc:08:bb:9f:28:41:
                    d3:2a:e4:7d:ec:cd:13:b7:ad:c4:a6:f2:d0:fe:d6:
                    80:98:cd:51:39:a6:72:0c:65:1d:74:21:29:3f:23:
                    a6:32:90:36:ea:9f:e5:6b:7d:df:24:8a:c7:eb:a1:
                    2f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A6:60:BB:D6:2B:D4:A6:05:FD:D2:55:73:64:11:BE:26:A5:B3:12
            X509v3 Authority Key Identifier:
                keyid:B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/102C7C702D2111EBB741A15CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:2f:a7:8a:51:01:3b:1b:d3:2f:96:1b:6c:e5:c9:27:ac:c7:
         80:23:d4:56:f2:f8:a9:6b:9a:52:e4:86:71:46:0e:b1:9a:6a:
         17:13:af:8f:b7:2a:41:c5:22:a0:52:1c:95:2c:c5:76:07:ef:
         ce:ea:31:bd:86:44:73:03:42:a8:6d:17:0c:e0:7e:cc:ef:38:
         6a:f2:ff:38:69:25:d0:38:ae:b5:7d:70:c7:48:56:aa:56:a7:
         6c:10:28:94:98:ac:1c:95:b5:a9:a3:07:e2:b1:15:60:49:27:
         7e:8e:a6:ab:f8:f5:56:23:a2:cf:17:dd:3a:f1:bd:52:64:4d:
         a7:1a:a0:42:a2:c6:c3:5b:db:90:a4:88:30:be:53:a1:c1:c9:
         0a:50:3c:92:43:8b:66:46:d8:51:06:76:b8:9b:63:9a:bf:1c:
         ee:5e:9c:6a:6c:e5:fe:b6:d8:cc:ff:1d:a1:4a:20:fe:65:ef:
         fe:d9:68:8f:fe:ae:4d:38:07:13:01:5a:80:a7:4b:f3:32:33:
         a4:f6:91:24:6f:43:6c:7f:e6:38:33:45:72:dd:fb:47:ed:00:
         41:92:ab:96:ba:ea:ac:21:05:ca:aa:dc:5d:f7:10:c2:b3:4e:
         6c:92:29:5c:89:13:d3:02:09:27:31:50:9d:7c:ff:df:0f:ce:
         6c:ce:b6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:41 2024 by rpki-client on console-ams.rpki-client.org