Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/AF01BB42EE4B11EDA0FDF350C4F9AE02.roa
File:                     AF01BB42EE4B11EDA0FDF350C4F9AE02.roa (raw, json)
Hash identifier:          CoKnNc54/VeytMmktqv2kfN/WwlhB2L0E4UvZyRPfKE=
Subject key identifier:   17:7E:C2:9C:9D:CF:7D:7E:9D:6B:EB:67:9B:D7:4C:5B:1A:4E:09:18
Certificate issuer:       /CN=A916A39E/serialNumber=724D84100B2599931903869AB05220776C8BAC42
Certificate serial:       4C
Authority key identifier: 72:4D:84:10:0B:25:99:93:19:03:86:9A:B0:52:20:77:6C:8B:AC:42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/AF01BB42EE4B11EDA0FDF350C4F9AE02.roa
Signing time:             Thu 21 Sep 2023 05:05:34 +0000
ROA not before:           Thu 21 Sep 2023 05:05:34 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     132685
IP address blocks:        103.73.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.crl
                          rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A39E/serialNumber=724D84100B2599931903869AB05220776C8BAC42
        Validity
            Not Before: Sep 21 05:05:34 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=650bcf1e-b273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bb:06:8f:8c:a4:20:0e:1f:9d:1e:99:0e:a9:
                    97:46:43:9e:57:ac:22:32:68:a1:6a:c5:b8:2d:30:
                    c8:75:5a:2b:7a:b8:12:5c:bf:f6:09:bd:e6:8f:cb:
                    5f:ed:8f:fe:a2:40:45:7a:bd:52:50:fc:9e:2d:08:
                    3c:7d:ac:92:95:f8:c8:82:06:ff:18:7a:81:26:78:
                    8e:be:e9:55:d8:41:02:96:1a:02:f2:f5:f8:2b:ef:
                    a0:84:51:15:d4:cb:1a:d7:23:2e:56:9b:5d:39:95:
                    69:25:28:dc:52:84:3b:ac:76:4b:24:db:c4:f0:54:
                    ac:7e:d4:eb:d5:47:0a:43:f6:aa:03:66:a3:34:b0:
                    25:49:08:9c:9b:73:3c:00:ff:0d:89:0e:f3:7e:16:
                    68:00:d5:66:e5:e0:ac:c7:a3:77:de:52:30:b7:89:
                    4e:2d:df:76:51:b6:2d:3f:fe:10:ec:70:c9:ad:b2:
                    5b:94:e9:bd:1c:5a:35:99:ec:e6:8f:19:21:7b:71:
                    6f:61:49:f2:02:6f:10:35:de:dd:bf:31:ee:6b:b5:
                    c9:b6:b3:ac:fb:4b:66:da:2b:62:24:00:35:b5:58:
                    26:e3:ef:76:30:a7:9a:77:e1:93:73:a1:d0:0b:9a:
                    bf:60:e3:27:b1:6d:d2:a3:08:1a:5b:69:2f:cf:89:
                    1b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:7E:C2:9C:9D:CF:7D:7E:9D:6B:EB:67:9B:D7:4C:5B:1A:4E:09:18
            X509v3 Authority Key Identifier:
                keyid:72:4D:84:10:0B:25:99:93:19:03:86:9A:B0:52:20:77:6C:8B:AC:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/AF01BB42EE4B11EDA0FDF350C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:f8:d9:2c:6d:e6:b0:c1:36:e6:5a:dc:74:1f:76:23:3b:64:
         5e:1b:1f:12:cc:73:59:32:ff:bd:53:29:0c:10:76:a8:ae:83:
         42:88:ee:34:72:37:fb:ea:aa:9c:b6:46:94:d3:eb:1c:ea:9b:
         61:63:a4:e1:c6:55:41:c1:eb:2c:89:b0:f8:9a:33:7b:ff:bc:
         1b:59:ee:2f:78:d4:08:b5:e5:97:dd:4b:ba:2d:53:71:ec:3c:
         7e:c0:d7:78:0e:bc:30:e1:5e:b4:46:a4:e3:08:c2:08:d8:86:
         1e:11:8b:a4:b4:7f:93:d2:95:10:7e:e1:b3:1f:78:96:9f:16:
         45:0d:50:90:9f:87:30:60:5e:bb:f3:f8:a5:61:2c:c8:86:ad:
         4a:05:13:13:c1:d9:17:b8:c5:29:bb:86:ba:33:77:e0:6e:e8:
         ba:60:47:21:06:32:b7:cc:30:5a:20:cc:1d:7d:9d:65:98:43:
         63:fc:06:b4:8c:da:80:46:66:1d:82:0e:4f:67:28:42:0b:f8:
         01:88:f2:17:42:d3:4b:44:a9:67:87:c7:19:06:24:48:89:83:
         b9:90:a2:fb:e6:43:c6:39:35:e7:9e:79:28:df:53:80:7b:cb:
         9d:fa:a8:9e:0c:a9:36:d6:7c:71:8d:dd:cd:1f:07:c0:6f:d6:
         57:f8:54:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:40:39 2024 by rpki-client on console-fra.rpki-client.org