Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/ED905CE8CF6E11ED915AD729C4F9AE02.roa
File:                     ED905CE8CF6E11ED915AD729C4F9AE02.roa (raw, json)
Hash identifier:          MjGRO3lGQcG/iTMmDl7Y68mkqT70b4a+bCduYwFQk88=
Subject key identifier:   34:B9:2F:E5:86:45:48:ED:A7:3A:F9:3F:AC:3C:69:5A:0F:2C:EB:F1
Certificate issuer:       /CN=A919CAB7/serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787
Certificate serial:       0587
Authority key identifier: DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/ED905CE8CF6E11ED915AD729C4F9AE02.roa
Signing time:             Fri 09 Feb 2024 00:02:08 +0000
ROA not before:           Fri 09 Feb 2024 00:02:08 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     141753
IP address blocks:        103.163.165.0/24 maxlen: 24
                          2407:2a40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl
                          rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1415 (0x587)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CAB7/serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787
        Validity
            Not Before: Feb  9 00:02:08 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65c56b80-fdd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1c:31:a5:15:cc:3a:26:69:30:00:48:4c:76:
                    56:e0:7e:05:36:4b:8b:ad:88:a0:a3:a4:40:40:20:
                    7f:1a:e9:fd:27:d0:60:10:86:36:10:49:ff:21:24:
                    27:6b:44:d7:46:97:3f:f0:f4:17:0b:b4:61:52:89:
                    5c:98:12:14:b4:f5:4f:de:a5:5a:41:29:34:c7:02:
                    97:e7:eb:05:a9:99:fc:b9:67:0c:86:22:9f:96:c7:
                    3d:de:5a:f2:aa:b4:5e:4d:3b:35:c1:87:ba:e8:18:
                    88:ca:fc:5b:95:9a:21:58:b0:a7:2f:ca:d5:38:85:
                    80:97:a5:3a:ce:3c:17:72:de:c2:50:4e:0a:ae:63:
                    76:44:33:2b:a4:c6:be:67:d6:9b:7e:86:3a:73:fa:
                    8e:7c:d7:cd:f1:14:11:52:c8:37:93:1b:e0:c1:bd:
                    e6:1f:44:ff:4e:ce:a7:65:e3:1c:cf:4d:5b:b3:e1:
                    fa:9f:d2:76:22:c9:93:6e:d3:02:07:8e:11:19:f8:
                    a3:ea:e9:27:38:1f:8b:5b:9a:3c:7f:b5:60:f4:65:
                    0e:46:99:58:43:a6:cb:3d:79:b7:8a:95:4a:5f:82:
                    fb:04:da:1a:15:98:5e:66:ee:17:09:6c:69:89:4f:
                    be:b2:f0:57:d8:d9:cb:d8:33:61:f9:36:5c:58:bd:
                    7d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B9:2F:E5:86:45:48:ED:A7:3A:F9:3F:AC:3C:69:5A:0F:2C:EB:F1
            X509v3 Authority Key Identifier:
                keyid:DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/ED905CE8CF6E11ED915AD729C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.165.0/24
                IPv6:
                  2407:2a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:0f:69:a2:72:4a:38:0f:c3:0f:5e:6c:8d:70:28:16:8e:fc:
         5b:20:a9:8b:4f:34:2f:bc:f1:25:cc:31:cb:5e:78:71:e8:cc:
         30:c1:ea:12:7a:74:8f:15:36:23:78:5e:3c:f1:e2:2c:e0:02:
         7e:3f:88:49:94:e0:bf:82:5d:73:b2:21:51:e9:ef:64:59:a2:
         cb:a5:08:88:ef:e2:d4:1f:21:21:23:b8:c4:57:4a:2a:77:71:
         a0:e7:60:8b:1c:29:da:27:68:08:dc:d0:10:f6:c1:65:e5:e0:
         ec:28:80:90:e2:1f:5d:b7:7a:d2:13:03:d2:0a:4b:e0:f8:4f:
         c2:c3:e2:ee:79:9c:a1:24:f8:2b:13:fb:2c:a7:7f:33:2a:f9:
         1b:cf:c3:c9:fd:c9:a2:73:88:9c:91:db:af:96:fa:5d:ea:40:
         ad:f0:29:46:c0:85:83:a1:d9:2c:7a:7c:5d:e2:a6:1b:90:ea:
         07:e5:d4:99:be:66:b8:40:d4:0b:30:31:84:d1:18:d1:91:e8:
         1b:85:b5:fc:44:d4:a8:30:31:68:08:77:f4:ea:41:ea:6f:55:
         78:86:a4:fa:d6:90:33:51:76:d3:83:6d:c3:6a:ac:5e:5a:39:
         62:a1:42:2b:37:3f:2e:6c:8c:7a:f3:d6:1d:98:41:31:70:ff:
         4a:bc:2f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:46 2024 by rpki-client on console-ams.rpki-client.org