Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A7E3DAB237FB11EEBB03FD6CC4F9AE02.roa
File:                     A7E3DAB237FB11EEBB03FD6CC4F9AE02.roa (raw, json)
Hash identifier:          6OvpTxtdwgyTrnBSwzbDtUwtZcFZA9AgYSv/N50dOeo=
Subject key identifier:   1A:AE:6F:5F:07:D4:72:7F:93:8E:98:B3:2A:E2:3B:09:D0:35:1F:05
Certificate issuer:       /CN=A918D727/serialNumber=034898BC1FB1B1A24617ACD9BC832AE83EAF9E2D
Certificate serial:       02
Authority key identifier: 03:48:98:BC:1F:B1:B1:A2:46:17:AC:D9:BC:83:2A:E8:3E:AF:9E:2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A7E3DAB237FB11EEBB03FD6CC4F9AE02.roa
Signing time:             Fri 11 Aug 2023 04:00:49 +0000
ROA not before:           Fri 11 Aug 2023 04:00:49 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     151653
IP address blocks:        103.250.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.crl
                          rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 07:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D727/serialNumber=034898BC1FB1B1A24617ACD9BC832AE83EAF9E2D
        Validity
            Not Before: Aug 11 04:00:49 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64d5b271-4c26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2c:e7:a5:c1:2e:ae:db:b0:7f:8a:a3:94:cf:
                    03:94:a8:93:15:00:fe:df:73:b7:cc:29:0d:1a:8a:
                    07:8d:f3:53:26:8b:1a:4b:7b:38:e0:ed:ac:22:3d:
                    32:a0:26:38:af:e8:bb:e8:b5:97:32:8d:5c:16:b0:
                    48:68:9b:a0:84:a5:bd:24:e7:ed:88:66:a2:68:d8:
                    98:7e:f4:1e:95:92:b0:6f:03:bb:be:e3:aa:a8:a4:
                    ee:1a:7a:13:38:e3:db:a7:c4:10:e5:fc:c5:5d:a5:
                    ae:a8:d1:e8:ce:be:1a:2c:7f:8b:f7:f4:3a:92:0a:
                    cc:a6:df:66:73:a6:b6:45:ca:73:3c:43:84:62:73:
                    bd:47:45:4f:86:46:14:6c:12:f9:b5:37:2a:ea:c8:
                    73:f5:b3:c0:3a:ab:7a:6a:c7:6b:3c:38:c5:af:5d:
                    69:8d:e0:c4:2b:95:0b:c2:e8:69:8a:d7:60:02:7b:
                    01:11:5c:ac:83:7d:f2:dc:05:40:9c:83:ff:98:02:
                    7c:f3:a0:26:2e:44:d1:cf:84:23:b9:31:79:ff:01:
                    53:99:9f:1e:36:67:8c:c5:45:9e:a8:62:c2:70:4b:
                    b6:21:22:49:e2:10:30:8b:de:12:7a:44:91:11:d8:
                    37:2b:2b:45:54:a7:92:45:bc:7d:4f:a0:a9:e5:bc:
                    9e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AE:6F:5F:07:D4:72:7F:93:8E:98:B3:2A:E2:3B:09:D0:35:1F:05
            X509v3 Authority Key Identifier:
                keyid:03:48:98:BC:1F:B1:B1:A2:46:17:AC:D9:BC:83:2A:E8:3E:AF:9E:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A7E3DAB237FB11EEBB03FD6CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.250.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:99:30:bf:64:2c:e4:4c:70:3d:f5:13:52:0f:28:6b:e5:f2:
         50:c1:5e:c1:4e:6d:e2:38:f0:58:d3:d5:98:79:1d:0a:84:af:
         d8:65:47:54:89:4e:26:52:dd:c6:3a:77:4b:fd:e9:a6:9b:24:
         fa:16:5d:dd:ce:66:ef:cd:50:b8:cc:32:81:66:b4:ff:dc:a1:
         45:64:4d:44:05:91:8f:54:34:13:7f:5e:95:14:ec:19:31:3f:
         f1:61:90:66:70:37:d2:11:42:f0:0e:f2:02:3e:0e:d6:34:ba:
         35:e5:c9:3c:f0:5c:76:69:17:31:12:39:ab:ac:29:a2:bb:1f:
         62:cd:5d:5d:fa:1e:f0:44:67:a9:2a:0c:c8:c9:66:08:03:b2:
         5b:b6:e6:75:23:b7:55:3f:72:d1:e4:f6:db:7b:09:c6:e2:3a:
         c4:0a:54:bf:66:09:20:bb:cc:71:0c:32:54:11:f8:46:19:b4:
         ac:64:15:b6:7c:c4:b6:f8:24:07:2f:d9:fe:62:da:eb:84:7f:
         c2:18:01:49:09:b6:da:39:0d:bc:ec:4b:6c:8f:2d:29:a9:f0:
         61:8b:53:5c:e9:d2:29:f7:96:ca:4c:3e:c8:b6:bf:e7:7b:44:
         32:35:bc:d5:94:87:43:b1:1d:74:ad:5b:c4:5e:93:e6:7b:1c:
         52:2f:f8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:34 2024 by rpki-client on console-fra.rpki-client.org