Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/12482BA205A211ED81E44F6DC4F9AE02.roa
File:                     12482BA205A211ED81E44F6DC4F9AE02.roa (raw, json)
Hash identifier:          bg+iRcITgD5dlX2l7PvKF4r5y7w7jgNKU6nvcAcFRI8=
Subject key identifier:   DF:01:7D:D2:85:E8:B1:55:54:EB:D1:3D:7C:C9:16:06:31:BB:F7:53
Certificate issuer:       /CN=A917C59F/serialNumber=04BDBB60F6A660D1D2D01273490FCF09CC359B73
Certificate serial:       071E
Authority key identifier: 04:BD:BB:60:F6:A6:60:D1:D2:D0:12:73:49:0F:CF:09:CC:35:9B:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BL27YPamYNHS0BJzSQ_PCcw1m3M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/12482BA205A211ED81E44F6DC4F9AE02.roa
Signing time:             Fri 30 Jun 2023 21:42:09 +0000
ROA not before:           Fri 30 Jun 2023 21:42:09 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     38493
IP address blocks:        103.151.212.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.crl
                          rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BL27YPamYNHS0BJzSQ_PCcw1m3M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 20:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1822 (0x71e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C59F/serialNumber=04BDBB60F6A660D1D2D01273490FCF09CC359B73
        Validity
            Not Before: Jun 30 21:42:09 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=649f4c31-cab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6f:a8:03:0d:91:20:9f:69:78:27:72:6c:ec:
                    ad:9d:ad:ad:02:55:f3:6d:e6:88:c9:c0:65:3d:7f:
                    07:c1:0b:3b:1a:10:22:d0:da:b9:25:98:63:3b:08:
                    33:72:99:43:0f:83:11:90:02:7d:02:94:aa:a0:55:
                    bb:1f:35:b1:84:2e:fc:c7:dd:a6:a0:f4:3f:07:0f:
                    16:70:11:a1:61:92:dc:70:eb:a4:ad:af:5b:b4:48:
                    12:c0:4f:e5:7a:dc:33:78:e4:92:a4:a1:94:8e:6b:
                    f0:98:6e:5b:60:92:38:fd:23:13:b8:85:01:e2:06:
                    16:58:ed:23:96:01:1b:4b:49:17:a3:40:8e:d2:5d:
                    9a:5d:1e:e3:81:68:46:6a:b8:b0:b5:a9:0f:fa:af:
                    58:68:08:fb:ae:ad:78:1f:a8:87:98:63:21:e4:e3:
                    89:a3:55:23:4f:ae:ae:26:a1:af:a9:48:09:3c:dc:
                    d3:bc:23:6a:e9:15:5f:64:eb:2d:3a:20:57:21:6e:
                    25:78:02:d4:88:43:2d:32:69:36:7a:82:fa:c4:04:
                    77:94:70:97:e7:79:25:92:df:55:3c:3e:52:fe:79:
                    4d:f0:74:b6:df:a7:ec:bc:ac:28:3a:c7:0a:ee:a3:
                    13:17:eb:19:9f:46:95:6e:75:5c:6f:c3:7e:2f:23:
                    f9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:01:7D:D2:85:E8:B1:55:54:EB:D1:3D:7C:C9:16:06:31:BB:F7:53
            X509v3 Authority Key Identifier:
                keyid:04:BD:BB:60:F6:A6:60:D1:D2:D0:12:73:49:0F:CF:09:CC:35:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BL27YPamYNHS0BJzSQ_PCcw1m3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/12482BA205A211ED81E44F6DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:10:fc:23:14:d2:36:82:32:ae:3a:71:8d:71:8b:fa:fa:18:
         e1:3b:44:5e:6b:03:cc:02:05:83:87:c9:1d:70:f3:b2:a8:20:
         8e:54:23:9d:0a:c4:1a:4c:af:7c:b4:cd:0f:24:55:fd:c8:4c:
         9c:0b:77:41:66:af:69:96:d5:b2:76:d5:44:6c:83:e6:97:7c:
         81:fd:b3:12:79:b2:6b:7c:d5:f4:4f:4d:ca:e5:68:8b:97:75:
         3f:d8:b6:48:72:ca:86:81:5f:9c:b2:1e:7d:0e:75:37:3f:52:
         63:5b:55:7f:f3:c7:1d:b5:e6:4d:1e:98:ca:85:34:86:e0:cc:
         f3:a4:dd:97:d1:1d:5d:3a:7e:39:df:94:17:ec:e5:f7:05:e3:
         55:13:ad:20:71:08:58:d8:d8:b3:09:e0:75:e9:ce:28:75:b5:
         0e:b4:d6:62:13:ff:16:83:72:f7:65:fc:73:b3:33:9c:a7:76:
         18:bc:64:e8:74:a9:62:ca:0d:dd:34:0e:ac:71:d4:5a:a0:f8:
         07:fb:4e:d7:4f:86:d9:ca:72:17:f6:d8:c0:0a:b3:ea:af:89:
         3f:6e:b1:30:23:cb:d9:4a:4c:29:8a:99:7e:80:bb:7d:b2:6f:
         b8:62:c4:c3:32:0f:73:60:70:60:27:1a:c8:9b:34:46:92:75:
         9b:d3:af:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 22:58:18 2024 by rpki-client on console-fra.rpki-client.org