Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/83EB3618E98C11EDAE292D56C4F9AE02.roa
File:                     83EB3618E98C11EDAE292D56C4F9AE02.roa (raw, json)
Hash identifier:          zU/J0DfB5rEGamHi07mOwvF8JI1lPOQ49R823+2sjM0=
Subject key identifier:   4D:0D:3D:F1:47:35:63:38:71:1E:F9:21:86:43:29:8B:01:79:FE:5D
Certificate issuer:       /CN=A9134858/serialNumber=7841A0786A7D7846459FB5978BFBBB2D90A1EEE7
Certificate serial:       0A
Authority key identifier: 78:41:A0:78:6A:7D:78:46:45:9F:B5:97:8B:FB:BB:2D:90:A1:EE:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/83EB3618E98C11EDAE292D56C4F9AE02.roa
Signing time:             Wed 03 May 2023 08:28:44 +0000
ROA not before:           Wed 03 May 2023 08:28:44 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     140036
IP address blocks:        103.132.42.0/23 maxlen: 23
                          103.132.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl
                          rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 07:29:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134858/serialNumber=7841A0786A7D7846459FB5978BFBBB2D90A1EEE7
        Validity
            Not Before: May  3 08:28:44 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64521b3c-f449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:49:ff:e5:38:42:72:09:e5:76:ff:8e:42:53:
                    e7:9b:d2:fa:7a:f5:22:6e:89:a2:4b:41:68:20:32:
                    93:fb:ba:bc:a1:45:4e:8c:99:d3:2d:c2:04:e5:4d:
                    db:b6:f8:d8:8b:c6:59:94:cd:a4:3d:36:d9:51:2f:
                    77:e7:30:23:e6:8c:38:0c:40:b8:ac:c7:5c:49:3e:
                    28:22:23:b2:54:6a:01:4a:d8:da:bb:31:d3:60:de:
                    11:ce:03:94:64:ce:fc:a6:5c:70:f5:0a:30:b0:da:
                    48:b3:0c:e1:93:b3:52:b0:a2:00:ea:3d:bd:1c:2a:
                    18:d3:9f:eb:30:79:b8:e1:19:d9:e2:1f:0d:35:fb:
                    8a:38:c1:a3:cb:f0:76:3e:cd:de:9c:21:b2:54:b9:
                    20:ec:3a:d9:7d:2b:dd:15:4e:06:0f:c4:90:ad:41:
                    65:86:eb:26:16:55:28:1a:8e:69:7b:1d:93:34:a5:
                    33:26:5d:fd:c4:d0:8c:28:92:f6:cf:d0:70:c0:f2:
                    d9:9f:e5:3c:09:62:2e:8b:f0:ee:8e:89:41:36:f2:
                    7b:b0:27:4d:2b:33:45:68:f5:bc:a6:49:07:c4:92:
                    3c:86:a0:5b:f3:8e:ca:48:bd:11:ca:d4:c4:3e:d5:
                    f9:2b:b4:2a:96:f2:5a:5f:1c:fa:80:23:a8:db:28:
                    dc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0D:3D:F1:47:35:63:38:71:1E:F9:21:86:43:29:8B:01:79:FE:5D
            X509v3 Authority Key Identifier:
                keyid:78:41:A0:78:6A:7D:78:46:45:9F:B5:97:8B:FB:BB:2D:90:A1:EE:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/83EB3618E98C11EDAE292D56C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:49:dc:74:5d:22:d4:3d:7d:af:09:0e:9d:51:f0:ed:22:99:
         8e:6b:dd:be:6a:bb:7a:e2:47:ff:15:86:75:e5:a9:df:61:e1:
         c2:a5:e1:8c:1f:5a:cf:64:6c:08:a4:3b:5b:60:b3:71:af:be:
         30:25:75:bf:8c:06:54:b7:df:4e:d9:54:93:58:79:96:2d:d4:
         0b:7f:9e:e4:11:be:bf:f3:f7:11:81:4c:48:0b:b5:2f:4c:05:
         68:d9:1b:95:af:6b:65:86:ae:55:d5:c3:ad:0e:89:ca:7e:4e:
         1d:2e:8b:82:bb:d8:af:88:c8:6c:1b:44:ce:fd:86:8d:95:cb:
         0d:4c:e5:9f:14:0e:20:f7:33:f9:77:21:20:37:23:4d:00:e2:
         38:35:7c:2c:d3:f3:b4:fa:13:85:30:ae:d6:83:69:b2:0e:29:
         fe:62:7e:12:65:9c:32:a0:ae:42:27:d1:37:7e:15:f8:6a:80:
         0e:47:2c:98:aa:ac:4b:e0:13:5c:05:59:fd:57:be:87:dc:6e:
         04:d9:e1:45:44:0d:c1:d7:26:f1:7d:47:96:d0:86:42:f3:3d:
         b6:b6:78:e7:95:08:ad:f4:81:f4:08:7a:ed:f2:ad:85:50:a7:
         ad:62:75:5a:7a:7b:d3:cf:cf:b7:ed:50:e8:93:5e:f2:8b:1d:
         6e:f6:07:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:29 2024 by rpki-client on console-fra.rpki-client.org