Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/D0763FECA68A11EB9F23D74FC4F9AE02.roa
File:                     D0763FECA68A11EB9F23D74FC4F9AE02.roa (raw, json)
Hash identifier:          43mQrXDxX9O45FoRil0au5HJr3SgsT1YX0drxBI9ViE=
Subject key identifier:   AF:E7:D1:EC:F8:F9:C6:58:80:EC:63:A8:CA:AF:68:1D:56:EB:2A:67
Certificate issuer:       /CN=A918D75D/serialNumber=70512B3D32D05DC32541E98E575A31C532073648
Certificate serial:       0491
Authority key identifier: 70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/D0763FECA68A11EB9F23D74FC4F9AE02.roa
Signing time:             Thu 01 Jun 2023 02:51:02 +0000
ROA not before:           Thu 01 Jun 2023 02:51:02 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     55720
IP address blocks:        103.166.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl
                          rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 00:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1169 (0x491)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D75D/serialNumber=70512B3D32D05DC32541E98E575A31C532073648
        Validity
            Not Before: Jun  1 02:51:02 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64780795-e151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:90:10:14:6b:7f:04:49:01:54:0c:34:37:e4:
                    8d:5f:95:ce:e2:aa:41:b7:54:d7:52:60:78:b8:0a:
                    f2:01:af:21:04:05:c6:42:d4:b8:47:43:b1:4c:98:
                    32:08:dd:64:5f:7c:a2:8e:04:62:ea:3b:ee:ef:3e:
                    dd:f4:07:c4:69:a7:1d:4c:97:75:a1:31:af:8a:6b:
                    0d:8a:bb:8b:85:f6:e1:19:01:44:13:ab:49:55:93:
                    17:cb:da:89:b2:a2:cb:df:e8:17:e6:5d:95:08:be:
                    ad:2c:d2:cd:aa:1b:f9:72:44:b6:ae:c1:fc:d4:5e:
                    5c:46:f2:dd:af:24:af:98:fa:2a:4e:57:48:ff:9e:
                    7f:e8:51:38:7c:7d:e8:48:58:4f:b7:b8:88:d5:dd:
                    22:f0:ca:fb:54:58:bd:20:d2:a1:54:ed:4e:6b:41:
                    64:c7:c2:b3:52:10:7b:3f:46:65:c6:68:8e:fa:d4:
                    1b:4f:a1:19:93:55:c7:97:12:6e:f1:10:7d:b0:02:
                    7a:91:8b:a3:59:4a:e0:d6:1f:a4:cf:cd:ef:fa:ad:
                    0a:7d:fb:c2:0d:4a:da:47:1b:2a:1a:2d:f2:e0:6d:
                    eb:ab:5e:6b:27:4e:8f:c9:45:5f:18:e4:27:57:b9:
                    25:03:52:44:39:1f:d2:b9:1b:88:1f:6c:c4:ac:bd:
                    23:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E7:D1:EC:F8:F9:C6:58:80:EC:63:A8:CA:AF:68:1D:56:EB:2A:67
            X509v3 Authority Key Identifier:
                keyid:70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/D0763FECA68A11EB9F23D74FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:31:e8:6b:b0:89:23:9a:1c:09:30:1d:2b:51:0e:8a:49:dd:
         2c:c5:15:3c:0f:b5:7b:47:4d:ce:06:52:2b:11:7f:6b:15:a1:
         f3:fb:51:c8:e1:2c:6a:77:f5:7d:14:11:3a:37:8b:eb:13:42:
         c1:73:f8:34:a4:e2:1d:f8:25:eb:1f:6d:7d:d6:e9:9b:23:ae:
         c2:21:91:e1:8e:f6:42:6a:04:da:63:82:08:8e:5f:23:df:c9:
         13:7a:43:80:05:ed:8b:b2:19:dd:20:26:59:f7:b2:81:0d:ea:
         ad:aa:70:51:d7:f5:e9:56:81:4c:e8:67:2e:15:5e:e9:bd:6a:
         d4:78:c3:94:82:27:26:43:d3:25:15:68:f5:22:a9:28:31:6d:
         28:24:2c:74:ab:f3:2d:5a:77:fb:f1:41:0e:00:3c:78:33:9d:
         ee:41:4f:87:e5:26:68:6b:54:20:e6:f9:af:85:00:9f:7d:5d:
         ec:9a:7c:3a:50:35:02:6e:89:60:91:1a:21:6d:4d:76:ab:bd:
         96:d5:1d:4b:38:7b:ab:56:e1:39:5f:99:87:3a:0a:34:67:93:
         a0:6f:ee:47:51:98:6e:7d:5c:0c:21:2a:11:8f:ed:cd:f9:d4:
         af:99:03:fc:1b:a3:c7:d5:ca:35:ce:5f:77:3e:bf:73:c2:16:
         77:bb:9d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 01:45:10 2024 by rpki-client on console-ams.rpki-client.org