Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/2D613294CD7611EC83259862C4F9AE02.roa
File:                     2D613294CD7611EC83259862C4F9AE02.roa (raw, json)
Hash identifier:          EVEQSa+Up9OemgYLoMGopLhaTrEyVqB3NyB7fSDBRA8=
Subject key identifier:   55:D5:CD:00:1C:E7:76:50:73:06:FE:1C:DB:98:D3:1F:33:97:FF:B1
Certificate issuer:       /CN=A91772FA/serialNumber=3B1688A5F7B724AAFBE7820A2C63D97B2EA8E522
Certificate serial:       019A
Authority key identifier: 3B:16:88:A5:F7:B7:24:AA:FB:E7:82:0A:2C:63:D9:7B:2E:A8:E5:22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OxaIpfe3JKr754IKLGPZey6o5SI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/2D613294CD7611EC83259862C4F9AE02.roa
Signing time:             Wed 03 May 2023 06:05:40 +0000
ROA not before:           Wed 03 May 2023 06:05:40 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        103.186.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.crl
                          rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OxaIpfe3JKr754IKLGPZey6o5SI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 03:48:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410 (0x19a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91772FA/serialNumber=3B1688A5F7B724AAFBE7820A2C63D97B2EA8E522
        Validity
            Not Before: May  3 06:05:40 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6451f9b4-c500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:17:5c:e2:d7:0d:9b:25:33:dd:84:88:19:5f:
                    f7:e2:e6:36:cd:06:35:3e:30:af:2f:36:38:d2:f4:
                    4b:e1:00:e1:4f:9f:25:b4:e2:42:cc:90:2e:27:ad:
                    9c:6d:a5:06:82:86:52:19:42:5f:32:73:03:d5:4b:
                    7f:c6:b6:c7:86:e8:6d:08:9b:22:dd:b9:a2:ce:99:
                    04:82:5e:4a:56:44:83:33:08:ce:6d:84:8e:d7:5b:
                    b4:bd:48:9f:57:83:e6:ee:74:31:ef:f0:88:45:e9:
                    91:83:b0:48:b5:be:44:c8:3d:22:d6:1b:93:8d:50:
                    ad:fb:5b:96:2c:c6:bc:9b:be:ec:f2:6f:ff:47:f2:
                    e0:55:38:34:4d:82:e6:b9:4b:2b:24:17:2b:fd:2b:
                    fa:49:7f:80:eb:92:d2:ac:a9:7f:d6:cf:1f:5b:4d:
                    24:1f:d7:94:3e:f8:5f:87:6d:17:b2:bf:f6:5e:dc:
                    45:8d:47:00:9a:9f:16:ce:1e:67:a9:05:fb:09:c6:
                    39:4e:ce:ca:a7:3f:7b:2a:27:09:da:4e:af:72:21:
                    b8:33:b4:30:ed:32:bb:a5:24:76:20:d8:5d:77:84:
                    0f:27:f1:ba:76:ea:f1:8b:66:f0:26:13:b4:e4:6a:
                    6d:28:8f:78:fe:7f:7e:0d:fb:68:14:ef:8d:b5:c1:
                    41:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D5:CD:00:1C:E7:76:50:73:06:FE:1C:DB:98:D3:1F:33:97:FF:B1
            X509v3 Authority Key Identifier:
                keyid:3B:16:88:A5:F7:B7:24:AA:FB:E7:82:0A:2C:63:D9:7B:2E:A8:E5:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OxaIpfe3JKr754IKLGPZey6o5SI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/2D613294CD7611EC83259862C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:1c:8b:4c:b7:97:fa:ef:a9:26:b3:1b:e2:be:16:ae:2c:a5:
         87:4a:90:d1:21:49:82:fc:3e:3f:1a:1d:2b:3d:df:57:10:62:
         b2:4d:c2:9b:ad:3c:ec:0c:94:dd:ae:20:f2:9d:e6:01:ef:83:
         06:d6:be:02:67:33:1e:8f:3f:73:7c:0e:91:18:24:81:1b:34:
         b7:43:09:cb:d0:e3:55:c5:6d:56:51:71:70:fb:04:25:3d:64:
         a8:43:7d:d0:1b:4c:b8:40:db:b0:27:5e:63:77:5f:41:cd:c9:
         04:76:39:08:f1:0d:35:07:1a:a0:80:56:b6:ca:4a:a1:2e:fd:
         d9:17:9c:8f:73:31:63:77:39:ae:cc:1d:ba:da:d5:47:f1:47:
         e9:06:0a:a1:fc:fd:b6:47:47:59:a8:0a:cb:e4:b7:1c:98:bd:
         cd:e7:1b:e0:8a:ec:b3:78:1b:07:ce:82:b0:5d:1a:ba:ff:43:
         74:b4:e7:f7:af:58:71:ef:b5:93:08:06:e4:8a:1d:85:ee:0f:
         26:78:dd:d4:37:4c:1f:2b:ae:6e:55:19:40:9b:35:44:43:05:
         f7:37:ee:fe:59:1e:76:47:1a:42:fd:eb:9c:7b:c4:97:02:9b:
         e3:5e:6d:87:d6:64:34:e2:07:8c:38:77:91:70:79:66:1f:61:
         39:d0:d6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 05:37:01 2024 by rpki-client on console-fra.rpki-client.org