Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/658CF9F2721411EEAC707910C4F9AE02.roa
File:                     658CF9F2721411EEAC707910C4F9AE02.roa (raw, json)
Hash identifier:          ZZDUXnqWBktvzLbgCqaw7CbFJvjtpkfDVEMt//M7XVU=
Subject key identifier:   06:23:2F:EA:17:AC:0C:F7:BD:B5:A6:B6:F8:5F:BC:9D:36:55:35:6B
Certificate issuer:       /CN=A919D313/serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566
Certificate serial:       6C
Authority key identifier: E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/658CF9F2721411EEAC707910C4F9AE02.roa
Signing time:             Tue 07 May 2024 07:39:54 +0000
ROA not before:           Tue 07 May 2024 07:39:54 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     8220
IP address blocks:        103.138.100.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl
                          rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D313/serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566
        Validity
            Not Before: May  7 07:39:54 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6639daca-da52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:07:7c:51:a7:5c:e0:c5:73:e8:ef:51:db:4b:
                    a5:0b:8c:5a:c9:4c:61:91:39:cc:84:e7:6e:39:ff:
                    9d:a0:d9:66:60:73:ec:93:fd:76:69:0e:d4:96:3a:
                    a4:b5:83:bb:2b:22:ed:fa:97:4b:fa:78:67:52:6b:
                    d8:e2:86:e4:05:8e:94:24:b4:84:c1:1f:df:30:ff:
                    49:a1:31:7f:a8:ea:a3:da:c5:56:5f:95:60:19:30:
                    ba:12:e2:60:c6:0b:ad:7c:3c:8b:ce:f8:4e:54:04:
                    a4:cc:c0:a9:68:6a:a5:02:04:df:88:b4:7d:81:19:
                    2f:75:75:d2:c7:d6:10:04:37:8f:1c:28:a4:60:73:
                    aa:94:ae:19:28:aa:e8:dc:6a:6a:fd:e7:c2:3e:2c:
                    e6:7c:f1:ac:a1:42:74:40:75:b2:4c:9d:5c:33:f6:
                    af:1f:94:8f:f0:67:46:d5:a1:73:36:df:88:a2:6e:
                    5b:dc:a2:e1:ac:b5:f4:25:22:ba:8b:b8:44:c2:e2:
                    94:01:76:44:bf:bd:0d:85:17:37:7f:85:91:68:15:
                    65:af:1e:70:f4:ef:66:0f:37:05:91:e4:f4:81:f2:
                    67:1a:fd:83:b8:4e:40:56:b3:ee:76:22:e7:2d:2b:
                    c1:2e:b6:30:9c:3c:95:c4:3e:04:57:cf:51:24:ac:
                    df:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:23:2F:EA:17:AC:0C:F7:BD:B5:A6:B6:F8:5F:BC:9D:36:55:35:6B
            X509v3 Authority Key Identifier:
                keyid:E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/658CF9F2721411EEAC707910C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:63:7a:8a:9b:6a:a2:04:47:b9:51:58:23:ec:99:c9:7d:bb:
         b0:35:86:0e:55:2a:35:46:23:f1:8b:35:2a:1e:bf:fa:05:cd:
         4b:0b:83:07:cb:e6:7d:5d:38:b4:d1:8e:0b:65:d2:ed:b7:c1:
         76:ec:e7:25:1c:10:cb:14:53:a5:c2:06:01:c0:58:6b:c0:7f:
         68:69:10:fc:d2:24:d8:24:dd:11:a4:42:d9:09:fe:44:0a:97:
         be:61:2b:76:65:2a:45:3d:5d:e0:b5:50:ae:31:20:96:7c:c5:
         f2:56:57:4e:f7:9e:25:63:81:61:12:8e:15:8e:6b:33:af:95:
         4c:29:7d:28:02:df:da:27:77:d6:71:02:77:fa:3b:2e:fc:3e:
         e2:e4:fd:2f:a1:42:0f:24:0e:09:4a:29:d5:8d:cf:34:30:43:
         39:7e:98:1e:e2:2e:f6:ba:45:2b:e8:5c:99:c4:13:e2:90:33:
         79:72:f0:46:d8:fc:e8:04:e7:f0:db:01:56:39:c9:91:db:82:
         e8:35:f1:95:cd:19:c4:94:e0:b9:ef:2c:70:09:65:49:d4:e9:
         d2:82:e1:60:f1:28:6f:0d:54:d8:4c:ce:2f:e5:1f:79:61:b2:
         c8:f1:e0:5b:0c:91:78:ba:7d:b4:aa:02:06:d7:8e:4a:35:32:
         e4:9e:ee:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:14 2024 by rpki-client on console-ams.rpki-client.org