Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/E744DAB06C0D11EB89BF4725C4F9AE02.roa
File:                     E744DAB06C0D11EB89BF4725C4F9AE02.roa (raw, json)
Hash identifier:          POxwpCA6SLqYvpFAhxKcNYI9717Z57gRJXj8tZEJjRA=
Subject key identifier:   D8:01:8C:2E:11:C8:DE:BC:3F:35:5D:C3:85:92:DB:5B:0F:0A:DC:DC
Certificate issuer:       /CN=A918B5FE/serialNumber=12109583023E185DE4A2B294231599D63640BC9A
Certificate serial:       04CD
Authority key identifier: 12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/E744DAB06C0D11EB89BF4725C4F9AE02.roa
Signing time:             Tue 15 Nov 2022 01:10:59 +0000
ROA not before:           Tue 15 Nov 2022 01:10:59 +0000
ROA not after:            Sat 30 Dec 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        103.153.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl
                          rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Mar 2023 01:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1229 (0x4cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B5FE/serialNumber=12109583023E185DE4A2B294231599D63640BC9A
        Validity
            Not Before: Nov 15 01:10:59 2022 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=6372e722-19de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:87:2f:b8:9c:00:3a:65:6d:5d:7f:ea:25:3d:
                    60:63:2e:a9:39:00:6c:6c:d4:ae:a2:c9:a9:e6:22:
                    63:86:4d:34:db:c1:66:31:7c:eb:d6:f4:15:13:cd:
                    2d:e6:a2:b8:f8:c9:57:b5:a9:a9:72:78:f9:3a:f1:
                    b8:e7:1f:b1:20:25:72:74:61:b6:c0:44:5c:56:09:
                    f1:97:d4:a6:ce:ef:5c:14:92:98:10:0e:f1:86:d2:
                    97:63:b8:eb:3c:62:39:de:95:ab:90:dd:04:c0:2f:
                    34:7d:fc:dc:8e:7d:dc:b4:a4:de:da:dc:33:6d:75:
                    d4:98:a0:e3:07:d4:07:bf:d6:21:8d:44:cc:a9:e4:
                    d0:3b:2d:ef:05:d3:55:f6:cf:e4:bc:2f:be:f4:04:
                    f2:1a:20:48:76:e0:9b:18:14:9f:b1:14:da:82:00:
                    58:b9:96:24:c0:6f:cc:de:ad:8b:9d:f5:b6:21:42:
                    5c:63:53:fb:a0:1d:41:3f:14:11:01:56:e5:db:9c:
                    9d:30:28:35:c2:1c:f3:f6:df:d7:b9:56:c1:7f:4f:
                    6c:d6:64:0b:31:11:8d:f1:d4:7f:48:40:87:0e:bb:
                    91:a3:4a:28:29:dd:7b:3b:81:ca:d4:b3:24:22:a3:
                    3c:a5:08:6a:47:a3:f5:74:ab:68:ce:f5:10:70:5d:
                    b6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D8:01:8C:2E:11:C8:DE:BC:3F:35:5D:C3:85:92:DB:5B:0F:0A:DC:DC
            X509v3 Authority Key Identifier: 
                keyid:12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/E744DAB06C0D11EB89BF4725C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:dc:3a:01:4c:3b:51:a8:b9:44:46:75:37:28:50:f8:cb:b4:
         cb:8e:c9:ab:ec:48:44:02:50:96:5b:b4:b3:dc:54:5c:3d:48:
         14:fe:38:74:87:e9:77:cb:5b:85:a1:c9:a4:52:7b:cc:c1:7c:
         4f:14:2c:ba:a3:47:8e:62:3b:6f:8b:60:0c:77:34:ab:ea:5d:
         dd:c0:67:67:b8:87:18:26:f9:01:0a:1b:df:e6:6d:b2:ca:70:
         4b:09:04:e9:5f:42:22:bd:39:c1:03:24:bc:59:59:19:62:a5:
         67:91:84:76:25:1d:75:13:85:4a:80:2b:db:c8:95:91:32:94:
         d5:15:bf:a1:6e:5c:e0:22:76:e6:d8:b6:88:41:91:15:bc:68:
         47:d1:7c:00:4d:04:30:e4:df:9c:dd:0a:56:e6:65:53:de:41:
         1e:0d:00:8c:76:bf:6e:c2:e6:64:87:a0:20:5b:5b:3f:70:5c:
         76:60:31:62:aa:59:bb:b7:ff:d7:4f:d9:54:fa:04:e5:46:aa:
         25:11:41:5f:d9:6d:7d:17:a5:22:e6:62:34:92:2a:65:86:de:
         78:70:b4:9b:ef:25:2e:d8:91:cc:81:15:cd:7f:77:98:9d:cb:
         41:32:4e:c8:fd:c7:98:41:c9:53:0b:20:2c:cd:e5:27:ea:35:
         d1:bc:b7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 15 11:44:41 2023 by rpki-client on console-ams.rpki-client.org