Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/58EBEC82719A11EEBBA64415C4F9AE02.roa
File:                     58EBEC82719A11EEBBA64415C4F9AE02.roa (raw, json)
Hash identifier:          AvfmQH4lHRldKv0UYBDY3ppihpF9aszit4XaZ6fa2bM=
Subject key identifier:   55:52:81:D7:92:31:89:5F:58:D5:A7:44:25:2F:B3:38:92:FC:72:50
Certificate issuer:       /CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
Certificate serial:       0583
Authority key identifier: EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/58EBEC82719A11EEBBA64415C4F9AE02.roa
Signing time:             Mon 23 Oct 2023 11:51:08 +0000
ROA not before:           Mon 23 Oct 2023 11:51:08 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     137443
IP address blocks:        103.244.88.0/22 maxlen: 24
                          116.206.176.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl
                          rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 23:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1411 (0x583)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
        Validity
            Not Before: Oct 23 11:51:08 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=65365e2c-72a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f3:64:3e:dc:26:5f:53:44:02:19:a0:14:72:
                    be:76:d1:59:89:50:1b:b1:5f:b3:a2:8d:d2:0c:1e:
                    9d:8e:3c:02:c8:f3:29:51:a3:86:47:6b:54:f0:1d:
                    80:71:89:7a:94:f4:d5:20:c2:d8:22:f6:7a:44:d7:
                    f4:34:fc:41:df:ed:e0:dd:19:7e:b0:66:0b:30:5b:
                    71:9b:0a:96:28:c7:73:f1:a1:3c:9f:88:40:05:3e:
                    2a:7a:69:ee:d4:30:9a:a9:0c:55:5a:4e:e3:c9:f5:
                    5b:7d:37:cd:2f:ab:6f:13:5e:2f:6f:fe:0e:c7:40:
                    e4:63:82:c3:aa:34:b4:ef:8a:4e:55:6b:ee:3c:dd:
                    cf:19:94:7e:48:cc:9a:da:1b:6d:5b:53:1d:b2:d5:
                    ad:7f:85:22:4f:cd:21:97:e0:3c:31:17:a0:4b:55:
                    86:71:14:62:f7:ad:90:fd:e0:81:b0:d1:c3:34:d8:
                    fa:e8:31:d2:79:b2:4d:b2:9c:8d:d4:6c:00:2d:13:
                    5c:b3:34:0c:95:55:6b:9f:31:d3:5a:2f:ad:46:30:
                    e0:4f:c2:42:f8:9e:72:94:3f:23:bb:65:f4:58:57:
                    62:38:3a:3c:ec:de:27:60:b6:46:22:1a:a0:6c:1b:
                    7d:f7:24:26:18:e6:63:44:e3:5c:8f:cc:88:23:7e:
                    06:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:52:81:D7:92:31:89:5F:58:D5:A7:44:25:2F:B3:38:92:FC:72:50
            X509v3 Authority Key Identifier:
                keyid:EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/58EBEC82719A11EEBBA64415C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.88.0/22
                  116.206.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:4a:90:ee:1b:3a:94:c7:9a:bc:63:64:3b:72:f3:56:4f:da:
         ee:71:fa:32:0e:cf:b2:36:57:35:86:da:57:02:c6:75:98:bc:
         6d:0f:f0:d4:4e:78:3d:76:fb:46:8d:7e:11:37:71:e8:91:8b:
         db:6c:f8:e7:aa:39:21:98:52:fa:6c:13:f7:52:f9:e9:3d:52:
         ff:3d:52:55:7d:8c:0b:18:d5:6c:bb:ad:eb:8b:54:7b:8d:2d:
         8b:c2:92:0e:17:21:ae:10:a1:86:37:d8:18:49:20:87:12:78:
         1e:e9:ce:20:6f:ba:8f:d3:31:ef:72:20:36:dc:f4:d1:1c:ee:
         f4:23:7e:b1:d8:f0:c9:e8:c8:9f:d6:52:f9:40:2b:e6:0b:04:
         35:b4:97:f7:b8:88:e1:15:96:0f:e3:50:25:59:49:cc:0d:3f:
         37:16:dd:e0:d4:0d:6b:2b:3b:c6:ef:16:af:cd:0e:a0:f1:2a:
         99:7c:8f:e5:2a:26:84:c3:59:78:5b:ff:66:6f:d3:b2:60:02:
         a3:a3:4f:1d:5e:6a:04:93:b4:cf:4a:71:08:6c:48:82:b6:50:
         d3:d3:a5:cb:f7:bc:c4:c0:1b:23:6c:42:57:95:e5:ec:9a:08:
         54:15:a5:c0:9e:4d:34:01:c9:c0:3b:93:98:5f:7d:7c:2b:f2:
         df:cf:31:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 01:04:05 2024 by rpki-client on console-fra.rpki-client.org