Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/A49557ACC92711EDAE3AB84EC4F9AE02.roa
File:                     A49557ACC92711EDAE3AB84EC4F9AE02.roa (raw, json)
Hash identifier:          2GLuUDISP7XCVIWVK4ZamgqbWy/4na3soEPgzjzNpiU=
Subject key identifier:   16:0A:0C:EF:9C:52:53:49:55:C8:16:B6:27:EA:BA:CB:91:9E:6F:71
Certificate issuer:       /CN=A919B300/serialNumber=1A198F9A17F0B35EDB849560FB5F98501C3C9CAF
Certificate serial:       0E60
Authority key identifier: 1A:19:8F:9A:17:F0:B3:5E:DB:84:95:60:FB:5F:98:50:1C:3C:9C:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhmPmhfws17bhJVg-1-YUBw8nK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/A49557ACC92711EDAE3AB84EC4F9AE02.roa
Signing time:             Tue 02 May 2023 19:15:49 +0000
ROA not before:           Tue 02 May 2023 19:15:49 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     45121
IP address blocks:        103.221.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/GhmPmhfws17bhJVg-1-YUBw8nK8.crl
                          rsync://rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/GhmPmhfws17bhJVg-1-YUBw8nK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhmPmhfws17bhJVg-1-YUBw8nK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 May 2024 17:58:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3680 (0xe60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B300/serialNumber=1A198F9A17F0B35EDB849560FB5F98501C3C9CAF
        Validity
            Not Before: May  2 19:15:49 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64516164-a4ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:be:a4:1c:9a:9c:6a:0a:76:6f:96:d8:5f:d5:
                    ac:9b:5a:8c:59:6e:df:7b:11:f2:e5:26:59:90:7c:
                    5b:4d:90:31:20:fe:08:d1:12:0d:34:92:89:93:7d:
                    7f:a2:31:6c:bb:08:9d:9a:ae:cc:96:6f:9c:32:e4:
                    53:fc:89:c8:01:55:d7:4a:06:a1:ac:4f:27:51:b4:
                    9c:4e:82:df:76:d3:53:62:9f:41:b7:75:8a:4a:e2:
                    24:65:ea:f7:ba:1f:90:49:04:c7:f8:cf:4d:ec:5c:
                    ac:56:01:f5:95:1d:6d:82:11:34:d0:ac:ee:ac:92:
                    af:5d:94:b9:52:ea:f0:98:f8:db:a4:2f:48:87:0f:
                    69:40:20:b5:d6:20:ea:c1:c6:a1:01:f7:43:fa:e2:
                    05:93:6e:e8:fd:a5:ef:17:ba:79:c3:cc:4e:cf:4d:
                    03:c1:7f:40:94:53:3d:37:4c:34:87:ef:a1:a1:ac:
                    1e:4e:de:2e:ea:94:a9:2f:e9:c7:46:89:99:17:d5:
                    bf:0e:1b:81:b4:ab:ac:61:5d:0d:20:76:30:7f:17:
                    8e:7c:dc:73:cf:82:0f:a9:d1:a0:68:7e:2a:9a:ed:
                    44:70:da:8f:80:7e:f7:47:5f:ac:c4:f4:00:6a:4b:
                    13:c1:6e:c6:f1:f4:8c:f0:05:5d:d7:48:65:e7:05:
                    28:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0A:0C:EF:9C:52:53:49:55:C8:16:B6:27:EA:BA:CB:91:9E:6F:71
            X509v3 Authority Key Identifier:
                keyid:1A:19:8F:9A:17:F0:B3:5E:DB:84:95:60:FB:5F:98:50:1C:3C:9C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/GhmPmhfws17bhJVg-1-YUBw8nK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhmPmhfws17bhJVg-1-YUBw8nK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B300/E1A6CB14506111E9ADB6FA85C4F9AE02/A49557ACC92711EDAE3AB84EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.221.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:89:8f:1e:8e:48:5c:e3:5f:08:9a:c2:8a:42:fa:fa:6a:cd:
         75:c1:c1:34:f6:87:2d:5b:dd:17:bb:8c:30:cd:e7:a8:8b:e8:
         fc:45:72:3d:ec:ce:01:16:55:94:d2:49:65:e4:f7:cc:df:3d:
         2c:0b:94:02:31:b1:50:01:1a:29:02:dd:ab:8f:42:6e:f1:50:
         a8:f1:aa:bf:f0:9e:22:ed:6d:74:d8:d6:77:14:9b:8f:7a:4d:
         f3:fc:35:33:b1:1b:88:e3:3b:7c:d3:ea:cc:a0:3e:93:14:88:
         de:5e:3b:76:d6:69:f0:56:81:06:53:68:84:df:df:8f:c0:3e:
         6e:08:80:c7:2c:26:ad:cd:52:ba:63:bc:ba:e4:e6:91:8e:5b:
         ea:59:15:e1:f7:b8:e9:c7:91:e4:33:e1:0a:ed:12:32:f5:51:
         cd:50:89:8c:5c:97:e0:06:00:73:a6:2d:14:d7:e6:10:a3:c3:
         6f:f0:90:8e:87:80:68:ee:25:60:02:19:a3:72:a5:1c:72:4f:
         cc:99:ef:2a:14:9e:9e:27:f9:0a:8c:ad:8f:27:52:61:b1:3e:
         9c:a5:de:1e:b1:0f:7b:f5:cc:13:b3:fd:fa:0f:4f:74:70:13:
         17:f3:fd:c2:3b:a8:f6:b0:f1:68:b1:02:40:4d:6a:cb:59:cc:
         cd:da:22:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 18:46:48 2024 by rpki-client on console-fra.rpki-client.org