Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/C3CD4B12C85411E8A5D4274BC4F9AE02.roa
File:                     C3CD4B12C85411E8A5D4274BC4F9AE02.roa (raw, json)
Hash identifier:          OPz27nP3CQDCCDKBRilAtcc3FWYpgtDai6u0ugzendo=
Subject key identifier:   9F:61:6E:89:77:E8:E7:5B:4E:A5:1E:A0:82:2F:5F:95:7A:6C:D7:BD
Certificate issuer:       /CN=A919C5FE/serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3
Certificate serial:       1153
Authority key identifier: 44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/C3CD4B12C85411E8A5D4274BC4F9AE02.roa
Signing time:             Sat 16 Sep 2023 17:35:02 +0000
ROA not before:           Sat 16 Sep 2023 17:35:02 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     7615
IP address blocks:        103.129.63.0/24 maxlen: 24
                          2001:dea:4001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl
                          rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 17:52:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4435 (0x1153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C5FE/serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3
        Validity
            Not Before: Sep 16 17:35:02 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=6505e746-dba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fd:c3:a0:44:8b:7a:33:99:1e:69:46:6a:dc:
                    2f:3a:df:a0:11:3c:05:a4:69:78:9e:a6:af:1b:94:
                    2c:7a:81:23:fa:c9:12:81:13:45:db:0f:23:58:7e:
                    7d:a7:ff:98:bb:7d:dd:b9:3a:0e:ef:9a:a0:0e:2d:
                    24:53:0e:10:68:c1:ae:13:16:48:81:54:04:7c:f1:
                    9d:bc:57:6b:86:f0:df:31:14:5b:60:1b:8e:18:45:
                    fd:91:9a:34:8b:8c:35:be:fd:7d:44:61:34:80:7d:
                    35:45:d9:80:e3:12:8c:ab:f9:50:da:6e:d3:fe:e2:
                    35:b8:a4:16:a8:3b:07:cc:11:88:61:af:dd:1e:f4:
                    98:bb:4f:2b:be:b2:22:19:be:cd:e0:17:6c:02:fd:
                    93:2d:e4:b0:c2:4b:c6:ea:f0:4b:42:7c:dc:fc:b2:
                    8e:04:eb:5d:4f:5a:e6:82:72:3d:0e:d5:76:85:e2:
                    35:66:1a:e3:9f:5e:40:5e:86:14:0a:d5:c9:98:96:
                    9b:ea:ef:7b:c1:75:07:87:f0:dd:67:d0:1e:66:53:
                    66:14:49:91:b7:c1:3b:c4:15:67:a0:c2:0c:27:3f:
                    4a:eb:92:03:53:15:ad:e9:02:35:02:71:8c:51:c4:
                    bd:0f:cb:3a:6f:ca:59:07:ce:57:d1:91:2e:ad:4c:
                    93:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:61:6E:89:77:E8:E7:5B:4E:A5:1E:A0:82:2F:5F:95:7A:6C:D7:BD
            X509v3 Authority Key Identifier:
                keyid:44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/C3CD4B12C85411E8A5D4274BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.63.0/24
                IPv6:
                  2001:dea:4001::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:b5:d2:8f:66:5e:d7:13:88:f9:07:c3:8c:a5:03:1f:f1:2b:
         43:0d:76:1f:e8:56:5d:d5:03:d6:a9:a8:10:59:4e:a7:0f:e4:
         a1:ba:c6:00:7a:d8:fa:70:85:1e:a4:a9:cb:c6:87:e3:12:ae:
         29:67:71:cf:6a:0b:da:a9:8b:49:f1:37:ee:0f:c6:a4:79:41:
         9d:84:62:b2:9f:62:07:51:39:44:45:8f:76:3f:c4:46:ce:3d:
         43:09:04:9a:c6:4b:34:41:24:3f:a7:5b:12:29:7f:d9:0f:18:
         24:7b:07:92:73:f0:39:ca:c5:dd:08:66:0d:e3:c2:56:f8:68:
         9f:72:ef:89:ca:39:f3:5f:0c:5f:d6:b1:8f:e9:d8:4a:3d:d7:
         0e:05:31:e3:2d:5f:a6:57:de:47:3d:94:77:7a:18:d4:a6:4c:
         26:31:9b:23:a0:df:8d:48:02:61:32:f5:6b:89:ca:e7:e0:19:
         e2:0e:22:0a:12:35:7c:f9:6f:70:65:bf:45:92:e9:cb:fa:4a:
         da:2c:25:77:4a:a1:19:a8:4e:dd:22:43:49:dc:fe:8a:4a:fb:
         86:8f:68:6b:5d:1e:52:a9:48:bc:b9:76:70:c7:39:ab:1f:b0:
         cd:db:59:48:cf:ba:c5:2b:e4:db:2b:9a:5b:14:7d:1b:a1:3e:
         cf:44:36:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 20:25:49 2024 by rpki-client on console-ams.rpki-client.org