Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BEBC/A77826A0CF8C11ED9B7D3A7DC4F9AE02/482F30EAFBB311EE907B0277C4F9AE02.roa
File:                     482F30EAFBB311EE907B0277C4F9AE02.roa (raw, json)
Hash identifier:          uK9v0SkLvzDct0jtOrcx/JC5rcbr+0TdyCDmtdn9v/8=
Subject key identifier:   5F:F3:C8:8E:84:43:42:6A:AD:CA:C6:90:01:57:25:CE:03:9D:4F:98
Certificate issuer:       /CN=A916BEBC/serialNumber=13AB60C800F9F72B2F3244F058C4258381092FC5
Certificate serial:       CC
Authority key identifier: 13:AB:60:C8:00:F9:F7:2B:2F:32:44:F0:58:C4:25:83:81:09:2F:C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E6tgyAD59ysvMkTwWMQlg4EJL8U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BEBC/A77826A0CF8C11ED9B7D3A7DC4F9AE02/482F30EAFBB311EE907B0277C4F9AE02.roa
Signing time:             Tue 16 Apr 2024 05:36:57 +0000
ROA not before:           Tue 16 Apr 2024 05:36:57 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     139922
IP address blocks:        103.123.60.0/24 maxlen: 24
                          2001:df2:32c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BEBC/A77826A0CF8C11ED9B7D3A7DC4F9AE02/E6tgyAD59ysvMkTwWMQlg4EJL8U.crl
                          rsync://rpki.apnic.net/member_repository/A916BEBC/A77826A0CF8C11ED9B7D3A7DC4F9AE02/E6tgyAD59ysvMkTwWMQlg4EJL8U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E6tgyAD59ysvMkTwWMQlg4EJL8U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 05:34:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BEBC/serialNumber=13AB60C800F9F72B2F3244F058C4258381092FC5
        Validity
            Not Before: Apr 16 05:36:57 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=661e0e79-f7b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:31:74:4e:6c:0f:6b:8b:6d:75:4d:63:62:f4:
                    42:51:89:7a:1a:83:36:04:00:8d:10:55:6f:56:1a:
                    aa:97:28:a5:c1:1b:33:60:ef:0f:7e:ef:91:90:60:
                    04:73:b8:23:6e:bc:e0:e1:ea:84:6a:98:95:3d:06:
                    0f:07:e9:e3:2e:c0:8e:2f:1a:7b:a7:07:ac:9f:f5:
                    bc:a7:6c:b2:f7:97:31:eb:3e:12:c1:68:a3:89:54:
                    0d:d1:2c:09:b8:03:f1:b4:95:7c:6e:37:61:99:99:
                    b6:1f:2f:4f:38:ec:ee:3d:ff:b1:39:e3:0d:cc:96:
                    29:cf:bd:10:a3:98:d3:0f:b1:98:dc:89:10:df:00:
                    95:46:3c:f1:1b:f9:e7:f8:9b:89:fd:5d:67:b7:f1:
                    9b:7e:8b:7e:3c:3a:40:3f:77:d7:70:c5:6e:d0:6a:
                    bc:4a:ff:dd:52:0a:b5:08:3b:0b:fc:8e:39:be:31:
                    dc:a9:ac:04:49:3c:4b:0e:2f:e0:e8:3a:56:d7:44:
                    1a:e6:a8:17:51:24:a4:7d:ff:32:5c:6e:05:ca:d7:
                    d3:83:b5:51:90:bc:a6:37:e2:8b:33:8e:92:4f:70:
                    79:f7:9e:45:76:83:01:07:40:cd:c1:23:02:ee:8f:
                    f8:1e:61:2a:e9:44:c2:00:2a:3d:c5:66:ac:b9:31:
                    86:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F3:C8:8E:84:43:42:6A:AD:CA:C6:90:01:57:25:CE:03:9D:4F:98
            X509v3 Authority Key Identifier:
                keyid:13:AB:60:C8:00:F9:F7:2B:2F:32:44:F0:58:C4:25:83:81:09:2F:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BEBC/A77826A0CF8C11ED9B7D3A7DC4F9AE02/E6tgyAD59ysvMkTwWMQlg4EJL8U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E6tgyAD59ysvMkTwWMQlg4EJL8U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BEBC/A77826A0CF8C11ED9B7D3A7DC4F9AE02/482F30EAFBB311EE907B0277C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.60.0/24
                IPv6:
                  2001:df2:32c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:5a:21:06:c5:30:5e:48:40:2b:36:a5:37:9f:f6:28:ac:82:
         21:e7:4d:89:bc:02:5d:53:64:b4:8d:c3:ce:cf:94:a7:f9:f2:
         75:b9:ef:fc:6d:14:11:2f:07:23:69:1a:0f:51:dc:bd:a8:b6:
         67:8f:0d:4c:37:87:69:e4:e1:21:09:ea:61:46:bf:8b:59:82:
         f5:57:b7:ec:fc:c9:6d:60:1f:79:62:fa:f3:01:a6:eb:bb:3f:
         83:6f:b5:d2:71:6b:db:0d:dd:77:24:1b:80:41:3e:99:bf:c7:
         0c:ed:99:8a:17:1a:d1:72:13:5f:77:11:b1:54:0a:0c:98:7c:
         76:e1:73:b6:10:d1:3f:5c:cc:cd:0c:1d:31:fe:fc:85:38:c7:
         dc:6e:4d:49:9a:4e:79:27:aa:8d:d9:42:0c:43:bd:93:9a:c3:
         ce:54:07:09:cb:c3:28:28:4d:d1:de:13:a5:2d:19:5e:14:ac:
         45:a7:04:2d:42:43:26:48:a2:23:e1:f7:c2:77:5f:00:f6:0d:
         2b:65:25:17:70:93:87:9a:4a:b3:e3:53:ce:bf:3b:11:e9:6a:
         43:66:e8:c4:23:72:36:e3:7e:06:5d:7c:fa:9d:d0:be:54:4e:
         69:fd:ef:0c:54:ea:b8:eb:86:9b:e4:53:7d:8e:39:d2:2b:32:
         8c:cf:67:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:46:23 2024 by rpki-client on console-ams.rpki-client.org