Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197DC3/E65118A284A611EAAC51421FC4F9AE02/80CE360C986411EDBBD44652C4F9AE02.roa
File:                     80CE360C986411EDBBD44652C4F9AE02.roa (raw, json)
Hash identifier:          N1jgJoLd52C7TRfmvsBn6YN455Bxp47Ebc5JwZsu4gk=
Subject key identifier:   8F:64:F5:5B:57:D9:8C:86:C9:47:78:89:41:62:20:DA:22:1E:53:CB
Certificate issuer:       /CN=A9197DC3/serialNumber=491B029BAB7648045D34F7ABC57F7FA8CC7180E1
Certificate serial:       D2
Authority key identifier: 49:1B:02:9B:AB:76:48:04:5D:34:F7:AB:C5:7F:7F:A8:CC:71:80:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SRsCm6t2SARdNPerxX9_qMxxgOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197DC3/E65118A284A611EAAC51421FC4F9AE02/80CE360C986411EDBBD44652C4F9AE02.roa
Signing time:             Tue 30 Jan 2024 21:39:03 +0000
ROA not before:           Tue 30 Jan 2024 21:39:03 +0000
ROA not after:            Sat 01 Jun 2024 00:00:00 +0000
asID:                     4842
IP address blocks:        103.73.254.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197DC3/E65118A284A611EAAC51421FC4F9AE02/SRsCm6t2SARdNPerxX9_qMxxgOE.crl
                          rsync://rpki.apnic.net/member_repository/A9197DC3/E65118A284A611EAAC51421FC4F9AE02/SRsCm6t2SARdNPerxX9_qMxxgOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SRsCm6t2SARdNPerxX9_qMxxgOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 21:40:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197DC3/serialNumber=491B029BAB7648045D34F7ABC57F7FA8CC7180E1
        Validity
            Not Before: Jan 30 21:39:03 2024 GMT
            Not After : Jun  1 00:00:00 2024 GMT
        Subject: CN=65b96c77-5b5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:95:91:04:9b:eb:ef:48:37:a3:19:4d:a4:64:
                    c1:4a:05:1a:0b:aa:62:18:d7:6b:09:bb:d5:28:e2:
                    9d:c1:25:ff:45:87:00:22:7d:6d:ae:ed:6d:a0:9e:
                    7d:cd:e5:55:e1:b9:f0:8b:ed:73:4e:f5:cb:6c:d9:
                    59:28:44:e7:8e:97:0e:c5:16:ea:a6:c7:c1:67:6a:
                    2e:70:04:01:28:9f:5b:72:f9:14:29:28:ca:28:3d:
                    90:3c:6a:62:c2:90:da:38:32:e1:1b:8d:c3:84:e3:
                    95:ff:67:a5:81:1e:5e:9d:ee:49:ae:6a:53:fc:d8:
                    93:ad:f5:25:cd:07:28:b3:4b:5e:55:c7:2d:ce:be:
                    59:67:e4:a4:ba:a2:77:d6:3a:17:c8:ab:c2:03:c1:
                    6e:cc:f0:57:b7:cd:df:ef:f2:60:19:96:0e:a9:92:
                    59:c3:7a:42:a4:0e:62:c7:73:ff:ad:e9:94:74:17:
                    c5:aa:41:65:50:f3:cc:fc:43:f8:4f:20:37:6e:9d:
                    41:01:15:ce:f0:4a:c3:0c:86:a9:9f:f5:4a:7b:6c:
                    5b:76:3c:13:a6:ad:75:f3:ac:20:d0:dd:1c:2d:4e:
                    0b:ef:cd:d6:58:34:40:28:e1:a5:93:f7:41:77:f6:
                    0b:01:8b:a4:96:f2:ca:6e:e7:f5:08:6c:26:04:d2:
                    08:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:64:F5:5B:57:D9:8C:86:C9:47:78:89:41:62:20:DA:22:1E:53:CB
            X509v3 Authority Key Identifier:
                keyid:49:1B:02:9B:AB:76:48:04:5D:34:F7:AB:C5:7F:7F:A8:CC:71:80:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197DC3/E65118A284A611EAAC51421FC4F9AE02/SRsCm6t2SARdNPerxX9_qMxxgOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SRsCm6t2SARdNPerxX9_qMxxgOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197DC3/E65118A284A611EAAC51421FC4F9AE02/80CE360C986411EDBBD44652C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:5d:ea:d0:c1:c6:bd:ca:3a:c5:4c:33:85:fb:cc:7c:b3:f8:
         e9:8f:9b:34:1e:e5:3e:94:72:38:1f:35:83:32:e4:84:22:a5:
         6d:7c:f6:1b:79:17:60:65:a2:67:cc:41:3f:8d:6d:c9:0e:04:
         3e:03:64:78:28:9f:fd:1c:f7:43:64:07:ac:66:9e:f8:62:ea:
         a1:80:d4:4b:18:e3:8d:84:98:68:33:a2:c8:19:60:65:13:c2:
         6f:56:af:b5:5f:0d:3b:28:29:37:d7:31:e9:77:36:b9:2a:03:
         c3:73:03:50:fc:46:00:1a:9a:69:1b:f3:44:9a:0e:8f:ff:3b:
         3f:d6:26:e8:89:20:26:71:c5:de:41:a0:f3:5e:69:a7:00:7d:
         b9:32:a4:0d:f0:1a:c6:4c:09:66:56:e5:14:3b:71:0b:1d:15:
         b1:af:54:f0:c7:1a:59:c7:10:71:6e:89:03:8c:38:bf:32:c0:
         c1:80:21:15:19:40:d2:96:b5:b8:ed:25:5d:64:12:a4:2d:0c:
         f2:0e:f8:a7:e6:d8:5b:78:96:61:b0:44:03:87:19:9d:24:c7:
         85:fa:7b:ae:3f:fc:2a:27:c6:72:e6:26:43:86:fb:37:ea:5f:
         92:8d:80:f3:61:a6:16:25:21:cc:8f:d6:13:88:19:7a:db:7a:
         02:e6:43:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 23:05:08 2024 by rpki-client on console-ams.rpki-client.org