Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/213D6260B68511EC81F0D430C4F9AE02.roa
File:                     213D6260B68511EC81F0D430C4F9AE02.roa (raw, json)
Hash identifier:          0sPE2HMnGEt5pe4Qz8R1PIpfMDsMsd+LZ7qv+kK16e4=
Subject key identifier:   2C:E1:45:7D:36:DC:A6:7B:B6:B1:7A:5F:C1:F5:F9:9F:82:81:48:DA
Certificate issuer:       /CN=A9192920/serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5
Certificate serial:       0606
Authority key identifier: D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/213D6260B68511EC81F0D430C4F9AE02.roa
Signing time:             Sat 26 Aug 2023 22:40:04 +0000
ROA not before:           Sat 26 Aug 2023 22:40:04 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     55933
IP address blocks:        103.153.128.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl
                          rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Jun 2024 23:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1542 (0x606)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192920/serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5
        Validity
            Not Before: Aug 26 22:40:04 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ea7f44-4b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c8:5a:32:49:42:4c:6e:6c:be:bd:a3:e7:d8:
                    41:80:ca:c1:db:c3:da:d2:3d:36:fa:ef:f6:a1:95:
                    c2:db:03:03:bf:11:3e:39:ba:9a:58:b3:58:b8:fe:
                    3e:b7:ab:66:ca:06:73:3d:76:13:fc:e3:4e:3a:2b:
                    5c:54:93:98:a7:25:77:5b:56:49:ce:29:96:06:eb:
                    29:9e:84:cf:0b:c1:07:50:fe:60:3d:f9:d0:55:a6:
                    de:3f:f1:dc:c4:69:6a:e0:bb:db:d0:58:ec:3b:7f:
                    06:5d:35:68:6a:71:c6:2b:68:4a:6d:da:45:f0:3e:
                    fb:a1:89:fa:c1:f2:68:47:02:4f:83:fc:50:85:ed:
                    ef:85:63:f7:19:f9:83:5e:36:29:eb:4f:8e:29:f6:
                    2d:c5:7b:4b:7c:0e:b8:c7:92:90:f8:cf:83:cf:ba:
                    02:aa:cc:9b:63:38:ff:74:c5:f9:6a:3a:7b:11:64:
                    26:e5:ea:f0:e5:6a:24:ab:66:55:ac:cb:92:14:a0:
                    77:23:e1:0d:d8:81:c6:36:75:02:a5:77:df:3e:8d:
                    11:bb:a8:ad:c3:42:7a:89:d6:50:d6:1d:3a:d1:41:
                    64:64:2a:ab:05:12:49:8b:3d:ea:ac:9e:af:32:4d:
                    0f:b2:1b:74:6d:46:d8:20:ca:31:1d:4f:72:b8:97:
                    3e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E1:45:7D:36:DC:A6:7B:B6:B1:7A:5F:C1:F5:F9:9F:82:81:48:DA
            X509v3 Authority Key Identifier:
                keyid:D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/213D6260B68511EC81F0D430C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:2e:cb:2d:65:36:7d:f6:5d:e6:1b:03:86:68:3f:9e:a8:b9:
         f6:e5:da:2f:5f:4d:29:f0:67:e1:d0:97:94:b0:99:81:53:b3:
         18:35:c8:f6:03:c4:f7:5d:4f:52:70:be:fa:4a:22:25:64:76:
         5c:11:20:67:a7:dc:79:cb:95:1e:8e:32:18:f5:ec:5d:d0:ad:
         60:66:2a:8c:a4:29:c9:31:ce:07:44:d4:ed:f7:1b:38:53:93:
         b0:42:e0:f3:d3:e1:85:75:7e:20:75:18:58:a5:d9:be:d8:ef:
         06:7e:e2:ae:67:b6:6f:67:a6:69:f4:af:90:f0:0d:da:89:77:
         21:3b:11:a2:f7:88:82:d8:6f:4a:69:43:ba:40:43:09:cb:df:
         45:7a:32:99:14:81:d4:72:83:94:60:b0:35:bd:08:3d:db:b9:
         eb:7b:66:ed:22:ef:d4:57:eb:1e:5c:2e:22:c6:3a:ba:f9:3f:
         b9:0b:df:96:8a:4a:65:16:77:b4:62:78:e0:f3:a3:2f:7e:15:
         91:66:c4:fe:55:42:1c:28:7d:98:2e:b3:32:aa:02:5c:fe:40:
         b9:8b:97:ce:44:03:1b:37:2a:ef:84:c0:1b:6d:e8:a1:d4:5b:
         33:b6:e4:d9:fe:98:08:8e:da:8f:1a:0c:16:d5:8e:7e:6a:ea:
         f3:17:84:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 00:39:36 2024 by rpki-client on console-ams.rpki-client.org