Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/FA77145A14EB11EBA13B881DC4F9AE02.roa
File:                     FA77145A14EB11EBA13B881DC4F9AE02.roa (raw, json)
Hash identifier:          Z5Ey2EZPF3le8d2g/XIZmIxViH9g+IyY7yiiWeO6TTw=
Subject key identifier:   89:58:84:5B:FB:16:64:55:10:04:5A:68:B3:11:71:92:F8:C5:AF:AF
Certificate issuer:       /CN=A9122CB9/serialNumber=6A4BA799DAB0F226FA6366C6F1C78E22AC0C073D
Certificate serial:       0615
Authority key identifier: 6A:4B:A7:99:DA:B0:F2:26:FA:63:66:C6:F1:C7:8E:22:AC:0C:07:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akunmdqw8ib6Y2bG8ceOIqwMBz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/FA77145A14EB11EBA13B881DC4F9AE02.roa
Signing time:             Thu 06 Jul 2023 22:38:26 +0000
ROA not before:           Thu 06 Jul 2023 22:38:26 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     131455
IP address blocks:        103.4.132.0/24 maxlen: 24
                          103.4.133.0/24 maxlen: 24
                          103.49.106.0/24 maxlen: 24
                          103.49.107.0/24 maxlen: 24
                          203.96.234.0/24 maxlen: 24
                          203.96.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.crl
                          rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akunmdqw8ib6Y2bG8ceOIqwMBz0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 23:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1557 (0x615)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122CB9/serialNumber=6A4BA799DAB0F226FA6366C6F1C78E22AC0C073D
        Validity
            Not Before: Jul  6 22:38:26 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a74261-8379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:05:a8:e5:07:9e:ec:54:54:55:9b:e7:3a:b8:
                    6b:d7:81:fa:47:12:a0:35:d9:53:6d:72:f2:96:2b:
                    64:3d:07:fd:72:da:b6:28:2b:1a:ae:5c:8c:9b:2e:
                    37:a3:83:6e:6a:a2:81:d2:98:2a:1f:56:b1:4f:48:
                    8c:b3:cf:c1:b4:e0:82:6d:bd:77:a8:24:74:80:a7:
                    f7:9e:69:50:41:fe:e9:a1:79:08:a8:3a:47:a8:fb:
                    be:27:a5:f4:9c:c7:d1:36:51:51:1a:fa:f7:22:4b:
                    1e:95:aa:41:ca:20:f3:d8:4f:04:54:18:91:ab:68:
                    d6:15:3d:2c:da:ad:3e:07:0e:f2:4d:82:2e:f2:0e:
                    4a:df:94:5f:1a:dc:74:7f:4f:77:e7:15:a3:3d:a2:
                    0e:78:55:17:66:c7:66:3b:d2:d5:82:eb:76:1f:f5:
                    83:84:28:c6:09:21:7b:99:93:34:78:8b:5c:1f:58:
                    48:63:97:d4:7e:14:9e:e3:ce:9d:e5:2a:cc:ad:38:
                    36:62:95:91:f5:cf:9c:60:6b:fe:88:45:68:44:d4:
                    1a:58:91:1c:82:68:74:9d:3f:65:9b:2b:e5:20:9a:
                    81:9b:a1:ce:2e:44:26:c1:52:5e:6a:b1:ab:9c:94:
                    1b:17:f4:10:de:d7:b1:28:ce:99:a7:d7:11:b2:cc:
                    bf:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:58:84:5B:FB:16:64:55:10:04:5A:68:B3:11:71:92:F8:C5:AF:AF
            X509v3 Authority Key Identifier:
                keyid:6A:4B:A7:99:DA:B0:F2:26:FA:63:66:C6:F1:C7:8E:22:AC:0C:07:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akunmdqw8ib6Y2bG8ceOIqwMBz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/FA77145A14EB11EBA13B881DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.132.0/23
                  103.49.106.0/23
                  203.96.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:b6:e9:b4:12:55:db:8a:98:01:66:8e:a3:c7:e6:f6:cd:58:
         58:be:e8:75:da:8c:86:5f:10:a6:2b:34:ab:fe:62:55:bb:5d:
         92:66:66:6d:60:24:81:f7:f0:9e:1e:42:31:16:b2:1f:5b:1e:
         30:57:91:53:cf:7f:6b:8d:7a:c3:1b:a3:08:32:ab:4b:54:9a:
         da:b1:5c:1d:71:cf:ad:1a:e1:9d:ef:02:c9:25:dc:8e:6e:53:
         7c:f5:fd:7c:32:69:11:48:ab:82:49:4b:9f:94:66:a9:15:d7:
         2b:60:79:6d:f5:a7:e6:b5:25:98:73:68:08:d1:c2:c9:25:90:
         db:fe:2d:b4:ad:04:b0:84:bf:d5:9d:91:15:aa:67:a1:24:cf:
         72:5d:2a:e9:ce:7b:f8:c5:d9:f8:83:fa:5c:93:65:56:cc:99:
         0f:4c:e4:a9:9b:02:12:a9:c8:5b:8d:41:da:89:af:58:da:46:
         44:e9:95:79:c9:2c:f4:db:c9:2c:ec:fd:c0:cc:43:de:88:87:
         17:77:2e:a7:5c:ab:ff:5e:14:e7:5f:a8:1b:8a:06:1a:93:85:
         02:c8:87:08:e2:b1:3a:66:5c:58:e8:01:af:35:99:5c:06:c7:
         5b:bb:9f:da:1a:61:17:5a:6c:ba:76:e9:90:05:bc:38:85:9c:
         75:0f:1e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:32:58 2024 by rpki-client on console-fra.rpki-client.org