Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/AE14DBAA997711EAB12AD74CC4F9AE02.roa
File:                     AE14DBAA997711EAB12AD74CC4F9AE02.roa (raw, json)
Hash identifier:          Mwq4A/0K0OgGN7Me/2e3FBJJw/YLwnjP4Lug5N5AM54=
Subject key identifier:   A2:F6:43:F8:46:A4:C2:1A:2F:05:E6:BC:5A:6B:2F:8E:F4:8F:85:63
Certificate issuer:       /CN=A9113153/serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B
Certificate serial:       0CB6
Authority key identifier: 48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/AE14DBAA997711EAB12AD74CC4F9AE02.roa
Signing time:             Wed 02 Aug 2023 18:36:14 +0000
ROA not before:           Wed 02 Aug 2023 18:36:14 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     134963
IP address blocks:        103.141.120.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl
                          rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3254 (0xcb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113153/serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B
        Validity
            Not Before: Aug  2 18:36:14 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64caa21e-9a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f4:25:7c:b2:3c:cd:d9:f1:41:e7:40:2d:d6:
                    4c:eb:95:b8:b8:a4:11:5f:4a:7a:2f:7c:79:91:d5:
                    25:4d:47:6c:d5:17:eb:58:ab:55:58:e4:5c:94:99:
                    ca:66:42:84:7f:5d:0f:54:90:90:29:ef:3d:6f:2e:
                    37:7c:2d:21:ec:10:3c:b1:50:93:ec:b8:d5:6d:4e:
                    72:a8:2d:10:b1:68:0f:a7:91:c7:2d:b3:9b:8f:4a:
                    c3:5e:1d:a1:8f:64:25:d9:0e:86:ac:9c:d6:32:77:
                    15:70:65:0b:ea:8c:5e:42:55:47:e5:97:26:4b:4b:
                    40:39:7b:5a:bc:97:04:3c:eb:d3:2e:34:20:45:47:
                    07:82:b8:46:9d:41:df:44:60:83:eb:0d:0a:29:83:
                    4d:10:8c:3b:24:11:05:b9:89:56:48:3e:d2:c5:42:
                    1f:ae:62:98:8a:26:24:8e:90:7e:8a:c1:46:0f:a6:
                    b0:b3:02:ef:d3:15:5f:9b:94:2b:30:e0:8b:4b:4b:
                    c8:53:b9:8d:4c:e2:70:68:db:e3:d2:61:6f:01:95:
                    1f:a9:08:de:52:9d:6d:76:2f:10:fa:f5:fb:8d:fb:
                    f3:03:ff:f6:1c:93:e0:34:64:7c:7a:f4:5e:20:5c:
                    ba:9a:49:65:49:62:b8:f0:4b:c0:e0:66:bb:cc:74:
                    6f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F6:43:F8:46:A4:C2:1A:2F:05:E6:BC:5A:6B:2F:8E:F4:8F:85:63
            X509v3 Authority Key Identifier:
                keyid:48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/AE14DBAA997711EAB12AD74CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:42:e5:a4:ce:a2:bd:77:da:3c:db:97:64:21:8c:b2:99:c3:
         52:02:da:fe:92:94:34:c0:1b:40:30:b7:2a:d3:db:a3:cd:8f:
         8c:61:56:02:95:78:c9:80:75:ee:26:5e:ea:56:90:ab:e5:f8:
         cf:7b:76:eb:44:80:b5:ad:73:17:a3:a3:dc:2e:55:44:8a:43:
         0b:50:4c:34:38:97:39:ca:f9:74:04:ef:7a:28:26:6a:33:b1:
         61:ac:27:26:6c:ac:dd:f5:b5:f4:09:f2:5a:d8:97:2d:16:cc:
         68:c9:ba:8c:f4:1a:c4:c4:aa:c0:14:3d:b6:8a:43:77:e5:c7:
         3d:d4:e8:bb:6f:29:f1:03:07:ba:01:42:80:8e:44:9e:57:d4:
         fc:50:92:3a:a9:87:44:98:66:e0:40:16:6b:21:d8:cd:58:a9:
         97:5c:ab:29:c3:d5:db:5a:12:cd:8e:f1:e8:0f:4d:ee:df:14:
         b8:7c:0a:64:5a:ac:94:62:12:d3:7c:22:95:72:73:8f:43:d8:
         60:9e:0d:05:41:98:3e:3c:f7:91:bf:a6:42:43:16:9f:11:ad:
         ef:9c:3c:34:31:67:89:39:53:77:fb:f9:85:0f:91:c6:d0:28:
         d1:a4:52:c0:ac:c7:c9:3b:b7:46:8e:32:c1:17:65:b7:6e:88:
         3c:6a:65:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 20:35:47 2024 by rpki-client on console-ams.rpki-client.org