Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B6E8/D8E0DD3E01DA11EDA2AE1545C4F9AE02/4C50A2AAD78511EEA090E379C4F9AE02.roa
File:                     4C50A2AAD78511EEA090E379C4F9AE02.roa (raw, json)
Hash identifier:          jCC8h5mh3Isbg0/56AT2brXUGc2iI6QwVbQW8CcGH7U=
Subject key identifier:   83:61:4D:EC:D3:60:84:16:24:6F:D2:37:8A:D1:47:BF:CD:FC:DB:1B
Certificate issuer:       /CN=A917B6E8/serialNumber=D239928966D8984EA2FA453FC53F9886B5ADCB95
Certificate serial:       01DA
Authority key identifier: D2:39:92:89:66:D8:98:4E:A2:FA:45:3F:C5:3F:98:86:B5:AD:CB:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jmSiWbYmE6i-kU_xT-YhrWty5U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B6E8/D8E0DD3E01DA11EDA2AE1545C4F9AE02/4C50A2AAD78511EEA090E379C4F9AE02.roa
Signing time:             Wed 01 May 2024 05:07:18 +0000
ROA not before:           Wed 01 May 2024 05:07:18 +0000
ROA not after:            Thu 29 Aug 2024 00:00:00 +0000
asID:                     59329
IP address blocks:        103.226.228.0/24 maxlen: 24
                          103.226.229.0/24 maxlen: 24
                          103.226.230.0/24 maxlen: 24
                          103.226.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B6E8/D8E0DD3E01DA11EDA2AE1545C4F9AE02/0jmSiWbYmE6i-kU_xT-YhrWty5U.crl
                          rsync://rpki.apnic.net/member_repository/A917B6E8/D8E0DD3E01DA11EDA2AE1545C4F9AE02/0jmSiWbYmE6i-kU_xT-YhrWty5U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jmSiWbYmE6i-kU_xT-YhrWty5U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B6E8/serialNumber=D239928966D8984EA2FA453FC53F9886B5ADCB95
        Validity
            Not Before: May  1 05:07:18 2024 GMT
            Not After : Aug 29 00:00:00 2024 GMT
        Subject: CN=6631ce05-7835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:95:0f:b6:68:cc:f0:f0:86:a1:b8:9f:47:20:
                    10:6b:82:24:a2:f2:b7:fc:5f:81:af:7b:f3:3b:b5:
                    a1:06:cb:38:19:93:bf:d9:08:5d:f4:d1:1f:4f:5e:
                    56:05:02:80:2b:11:9f:9a:1c:9d:7d:f9:e0:e4:88:
                    02:64:82:f0:24:11:64:b8:97:a4:a2:34:eb:56:c5:
                    4a:be:4c:6b:86:f0:4d:82:8e:3b:48:74:03:67:ec:
                    3d:c1:c0:bd:45:e8:08:32:15:ad:69:ac:9a:bd:7c:
                    1a:10:ba:0d:a0:f9:49:c9:f4:16:6b:c6:31:e6:11:
                    b7:3f:6c:03:66:40:3c:41:c8:73:64:be:f3:3a:60:
                    db:87:e3:85:d5:6e:76:d1:14:1b:4e:7c:9b:7d:68:
                    74:7e:c1:d1:ed:00:e8:9d:d6:73:51:f8:bf:b4:ea:
                    5f:73:bb:dd:34:7c:27:0e:9e:fa:5e:eb:f1:a6:09:
                    ba:1d:b8:6f:01:ab:43:c2:82:19:61:58:01:8b:58:
                    bb:f2:0e:44:40:7d:f4:2e:29:12:0f:d2:fc:c6:4a:
                    d2:21:f2:ca:f2:3a:ce:e6:6c:5d:72:ad:51:1c:09:
                    1f:5b:6f:0b:56:40:6a:e8:13:61:4d:ba:85:5a:53:
                    ac:5c:6d:58:47:a0:52:65:43:00:88:80:2a:2e:14:
                    d7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:61:4D:EC:D3:60:84:16:24:6F:D2:37:8A:D1:47:BF:CD:FC:DB:1B
            X509v3 Authority Key Identifier:
                keyid:D2:39:92:89:66:D8:98:4E:A2:FA:45:3F:C5:3F:98:86:B5:AD:CB:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B6E8/D8E0DD3E01DA11EDA2AE1545C4F9AE02/0jmSiWbYmE6i-kU_xT-YhrWty5U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jmSiWbYmE6i-kU_xT-YhrWty5U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B6E8/D8E0DD3E01DA11EDA2AE1545C4F9AE02/4C50A2AAD78511EEA090E379C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.226.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:c9:f6:1e:99:9c:a3:89:0f:87:d2:f4:b3:89:c2:75:cf:f9:
         9f:ef:e6:af:0a:f7:35:6e:f5:be:93:9c:8d:ca:38:b1:6d:b6:
         8b:5f:d1:7c:2f:8c:44:0a:c9:72:51:7b:e9:25:2d:5c:49:d9:
         25:80:e9:3f:23:e1:48:28:f9:6d:32:71:4b:fe:41:cb:53:0f:
         59:50:2f:20:04:8c:97:05:0f:55:89:60:53:73:a7:3d:9e:0a:
         08:3d:9e:17:16:1f:f2:dd:98:2b:8b:ce:f5:2d:a2:80:e1:7d:
         07:22:48:9d:4b:db:12:65:99:08:f0:fb:28:2a:e1:a0:ee:13:
         8d:01:87:97:28:d3:f7:31:f1:b0:c9:43:37:60:48:c6:4d:61:
         52:ff:37:e0:68:d4:71:98:50:dc:65:38:f2:48:ed:8b:f1:65:
         b2:08:0c:2e:c0:3b:cb:6d:23:08:c5:05:90:16:e8:78:04:e7:
         b4:58:2b:7f:cc:3c:15:30:da:55:a2:96:55:5d:09:34:d1:1a:
         f6:97:98:f9:56:77:1b:c2:3d:60:63:93:ad:f1:e2:93:ca:61:
         0b:ec:4f:4c:46:de:7f:b6:42:a9:8c:2a:f7:3c:cf:92:05:20:
         4a:80:62:f3:96:05:da:84:93:d4:87:8d:f4:40:e7:fa:ae:bf:
         76:03:5d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 05:28:55 2024 by rpki-client on console-ams.rpki-client.org