Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/F8A90D48B7EA11EB91C5D25EC4F9AE02.roa
File:                     F8A90D48B7EA11EB91C5D25EC4F9AE02.roa (raw, json)
Hash identifier:          CfZetZA42d5dkmUhh3hoOTpu+QF5rdj8o8i+L84sgLY=
Subject key identifier:   98:31:F7:83:97:40:1C:78:36:0C:BA:66:E6:5E:A4:29:B6:ED:C2:70
Certificate issuer:       /CN=A919C7B8/serialNumber=C03A2E689603204A02B38BEF7B9083B102762691
Certificate serial:       046A
Authority key identifier: C0:3A:2E:68:96:03:20:4A:02:B3:8B:EF:7B:90:83:B1:02:76:26:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/F8A90D48B7EA11EB91C5D25EC4F9AE02.roa
Signing time:             Sun 11 Jun 2023 02:09:07 +0000
ROA not before:           Sun 11 Jun 2023 02:09:07 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     142113
IP address blocks:        103.166.126.0/23 maxlen: 23
                          2001:df6:8e80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.crl
                          rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1130 (0x46a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C7B8/serialNumber=C03A2E689603204A02B38BEF7B9083B102762691
        Validity
            Not Before: Jun 11 02:09:07 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64852cc3-20f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:06:f5:c0:ae:32:56:b8:42:59:c1:e6:76:f8:
                    a7:9a:48:ee:f9:0d:ab:62:02:62:d9:45:57:dd:1c:
                    ab:1f:99:63:e7:82:cb:d9:34:99:40:a2:d8:74:2d:
                    ee:2a:b4:5e:08:ea:d8:59:7a:b0:25:d7:07:d3:56:
                    a7:b4:74:c4:2e:58:0d:3f:67:b3:72:e7:08:7b:d3:
                    95:0f:ad:3c:16:c7:b2:04:95:30:84:4c:9f:b1:65:
                    d2:86:52:fb:1f:90:70:6e:96:ee:2d:f7:fc:b9:4b:
                    8f:2f:21:dd:78:0f:8d:71:39:a3:bd:0b:e3:51:0e:
                    42:70:77:08:db:ac:b1:84:1b:71:51:05:00:8d:55:
                    02:69:53:7b:6e:c2:02:ee:9d:f6:b7:be:8c:1c:83:
                    59:db:7b:2c:e9:9e:e3:93:a9:38:20:6b:82:b2:b3:
                    31:30:b6:12:bb:50:42:9d:24:30:bc:0f:f3:a5:d7:
                    02:9e:08:c8:bd:22:f6:80:e6:35:b0:1e:41:b8:bf:
                    d8:8c:83:6c:3e:4c:a0:09:aa:ea:b2:9a:35:cc:6a:
                    86:78:85:04:e9:0b:cb:4f:23:f5:31:2c:0a:5e:d1:
                    14:01:0e:4a:22:9a:ca:ba:db:c7:1b:cf:f0:b6:e7:
                    45:11:fa:bf:ff:bc:2a:3a:10:29:de:e1:bb:5c:f9:
                    92:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:31:F7:83:97:40:1C:78:36:0C:BA:66:E6:5E:A4:29:B6:ED:C2:70
            X509v3 Authority Key Identifier:
                keyid:C0:3A:2E:68:96:03:20:4A:02:B3:8B:EF:7B:90:83:B1:02:76:26:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/F8A90D48B7EA11EB91C5D25EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.126.0/23
                IPv6:
                  2001:df6:8e80::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:25:51:fd:fe:e4:5f:2b:6a:ce:1f:0f:62:9f:67:d3:92:8f:
         d1:26:29:c3:d2:db:d9:17:59:d1:ea:41:51:db:09:a4:0f:c8:
         33:23:b2:df:ee:ee:fa:05:fe:f1:84:07:41:c1:43:82:c0:c9:
         8b:ae:03:39:7e:b2:a9:ae:a7:a7:0f:9a:6b:e5:c8:77:e8:13:
         a3:f6:11:8a:fd:c0:c1:a5:ab:d2:0b:03:bb:32:36:e6:3e:5c:
         9e:f7:f1:01:4b:f8:3c:b5:35:75:00:07:c5:71:d0:fb:2b:19:
         d7:f5:52:94:de:1b:b7:3c:98:c4:f4:93:06:9f:7e:ea:51:b5:
         d7:d8:7e:79:55:41:63:2e:7b:27:6b:1e:49:40:32:63:9a:f7:
         63:a4:63:d4:07:e3:68:e6:16:a6:2c:ed:d7:00:7d:67:63:cd:
         af:67:3d:87:8c:cf:3e:a3:44:7f:e9:23:ae:f0:c2:29:42:d6:
         d0:ea:69:a3:a8:7d:48:dd:fd:f6:9d:b3:cd:dc:e0:32:66:78:
         0a:9a:94:24:2c:d1:9b:3d:74:5e:be:c0:25:9f:4c:ae:57:47:
         d9:c6:26:1d:c5:e7:06:5d:89:2d:ad:c6:5b:45:99:7d:c0:13:
         e8:b9:59:44:bb:d5:28:b1:6f:8b:75:da:d4:22:37:23:84:68:
         6e:f9:2c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:15 2024 by rpki-client on console-ams.rpki-client.org