Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/C49E2E22FF0111E591C15659C4F9AE02.roa
File:                     C49E2E22FF0111E591C15659C4F9AE02.roa (raw, json)
Hash identifier:          yTQS466mHs7BS5mengP5a8caAa4dq37tTIGgTXA1kwA=
Subject key identifier:   2E:B0:4B:AA:CF:4B:49:A7:18:77:E6:8A:D4:BA:1B:C2:A1:E0:3B:2E
Certificate issuer:       /CN=A919B5BB/serialNumber=CAC4478F0FDD9AE41E24E9FC67F851FF43C33309
Certificate serial:       1F80
Authority key identifier: CA:C4:47:8F:0F:DD:9A:E4:1E:24:E9:FC:67:F8:51:FF:43:C3:33:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/C49E2E22FF0111E591C15659C4F9AE02.roa
Signing time:             Tue 22 Aug 2023 16:13:01 +0000
ROA not before:           Tue 22 Aug 2023 16:13:01 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     133610
IP address blocks:        103.43.93.0/24 maxlen: 24
                          103.238.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl
                          rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8064 (0x1f80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B5BB/serialNumber=CAC4478F0FDD9AE41E24E9FC67F851FF43C33309
        Validity
            Not Before: Aug 22 16:13:01 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64e4de8c-7451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0a:33:da:58:0f:cf:70:f3:ed:6f:f3:3b:a2:
                    89:b9:30:07:bb:c7:81:3b:f2:10:71:98:0d:35:be:
                    62:36:60:bb:72:84:2a:39:89:3a:ca:c5:0e:98:68:
                    d3:51:0c:ba:ba:ff:32:6a:76:f5:c9:e2:00:d1:0d:
                    8b:9e:51:b9:b4:06:cf:88:87:87:2d:36:5c:c1:0d:
                    37:93:a8:65:8b:b9:41:6b:d8:26:4b:c8:33:e5:1b:
                    0f:e7:de:d6:47:b4:3e:37:29:24:b3:79:bb:2e:65:
                    bd:48:d0:3d:b3:6e:b1:40:0b:d1:28:25:89:18:de:
                    d6:25:bd:d0:3d:74:d8:6d:cf:60:7b:b3:0d:5b:4e:
                    86:3b:01:6b:59:7f:85:c8:8b:cc:47:4e:91:72:e7:
                    68:67:00:20:d7:4e:eb:a8:3d:39:b0:3b:bb:55:44:
                    fd:6a:8e:ac:e6:e1:61:e3:3c:38:6d:4f:2b:91:c4:
                    4b:8f:91:0d:80:7a:40:f4:41:6b:5b:77:37:b5:6f:
                    56:0b:45:26:07:a4:6e:48:3b:f4:35:d2:eb:cb:56:
                    20:cf:8e:0c:67:e5:4a:fb:b2:3d:92:db:ba:37:02:
                    48:be:2d:a9:be:e6:ec:81:35:9f:d6:81:07:f6:a1:
                    8c:31:ae:00:e4:c5:98:46:62:14:97:7d:7d:86:6d:
                    5c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B0:4B:AA:CF:4B:49:A7:18:77:E6:8A:D4:BA:1B:C2:A1:E0:3B:2E
            X509v3 Authority Key Identifier:
                keyid:CA:C4:47:8F:0F:DD:9A:E4:1E:24:E9:FC:67:F8:51:FF:43:C3:33:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/C49E2E22FF0111E591C15659C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.93.0/24
                  103.238.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:cc:f4:ca:ba:d9:94:f1:90:3e:78:78:8c:df:5f:78:d0:84:
         7e:4b:eb:91:ae:b6:88:b5:09:ad:31:53:0f:59:39:05:7f:dd:
         b9:50:fe:4e:e5:28:cb:89:d0:34:12:63:62:0c:26:b8:50:59:
         ad:31:5d:50:8c:01:3a:7d:ea:97:b8:37:ac:4f:67:63:58:e6:
         84:2d:15:54:d5:4a:0c:11:f3:84:a1:c1:98:eb:f4:b5:06:70:
         70:50:0d:d0:74:fb:09:44:4c:6b:40:58:e6:98:3b:40:08:c6:
         49:f5:ec:22:27:67:e2:12:82:6c:52:2e:59:b2:15:0d:b2:95:
         fd:cf:7b:60:b5:e3:48:7f:fd:a4:18:dd:84:d4:30:f6:65:ce:
         5e:2c:15:03:65:38:df:a1:6c:33:90:0a:c2:c4:28:0a:db:74:
         ac:29:17:7a:95:de:98:6c:f8:21:3e:23:b6:ac:9a:3f:55:5e:
         5d:e9:3a:f2:06:c6:c4:8b:e0:c3:be:b4:6c:46:af:1c:03:bd:
         7e:6c:2d:87:64:5a:31:fa:50:64:b9:41:2b:39:9a:53:1d:f2:
         64:bc:eb:57:26:01:5f:92:61:4b:75:26:32:68:4f:4e:2a:09:
         c0:67:8a:a6:2b:32:bc:86:8f:33:0c:e8:a0:1d:bc:96:f3:7f:
         29:fe:03:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:20:34 2024 by rpki-client on console-ams.rpki-client.org