Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/7ABDC516537B11EEBBB89E5DC4F9AE02.roa
File:                     7ABDC516537B11EEBBB89E5DC4F9AE02.roa (raw, json)
Hash identifier:          u1HVHW/afB6cDmV+Ze2cpgZiQfPkbYJ/WB7Rgp0vNjY=
Subject key identifier:   98:FA:C9:8A:FB:21:D3:79:FD:71:B7:A9:5F:50:6B:23:EE:F6:34:93
Certificate issuer:       /CN=A9136E69/serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1
Certificate serial:       02
Authority key identifier: 5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/7ABDC516537B11EEBBB89E5DC4F9AE02.roa
Signing time:             Fri 15 Sep 2023 03:53:50 +0000
ROA not before:           Fri 15 Sep 2023 03:53:50 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     137829
IP address blocks:        103.218.176.0/23 maxlen: 24
                          2001:df2:ef40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl
                          rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 07:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136E69/serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1
        Validity
            Not Before: Sep 15 03:53:50 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6503d54e-af72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7f:36:13:46:29:64:ba:b1:62:80:14:71:fa:
                    08:ea:13:b0:29:1d:af:d6:a6:6f:b3:d6:8f:6d:b3:
                    44:2f:b7:5b:a6:bb:d3:4f:40:d4:23:2c:68:f6:5c:
                    cc:df:38:25:4e:c3:d5:a3:4d:63:07:81:2e:4b:c6:
                    24:b4:5b:93:84:cf:9f:91:c3:5d:bc:8c:df:b8:3f:
                    32:13:ea:0b:69:06:81:3d:de:7a:52:1d:1c:0e:c7:
                    76:66:aa:d9:b4:ed:18:a1:be:f7:98:ed:79:87:20:
                    6a:29:cd:76:a6:50:73:78:26:5f:44:ce:af:37:9a:
                    1d:5a:d0:a8:2b:4e:98:b1:f3:71:22:f3:ac:dc:b2:
                    87:53:e8:29:ac:e0:66:b7:fb:8b:17:90:13:93:ec:
                    c7:4b:48:8f:e2:fc:27:1e:bb:ca:80:79:ee:d9:ee:
                    aa:fb:da:01:d4:d3:a2:cc:51:d3:6a:9e:6a:21:bc:
                    f2:94:0a:05:89:c7:b6:2c:54:8f:53:3c:e4:f4:b9:
                    78:df:f9:7d:80:cb:e2:23:72:a9:c9:39:82:29:b1:
                    f7:dd:03:b7:92:41:6f:cb:6d:ca:3b:e3:9e:25:17:
                    86:a8:f1:8f:f5:a1:f6:cf:4d:5c:c4:3a:a3:0c:f0:
                    e1:4c:ef:54:55:3f:76:4d:13:7b:59:63:fd:94:37:
                    1a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:FA:C9:8A:FB:21:D3:79:FD:71:B7:A9:5F:50:6B:23:EE:F6:34:93
            X509v3 Authority Key Identifier:
                keyid:5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/7ABDC516537B11EEBBB89E5DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.218.176.0/23
                IPv6:
                  2001:df2:ef40::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:b7:cb:d6:ec:18:18:b7:b4:93:54:55:90:18:51:09:8b:6f:
         d5:8c:43:20:dd:b1:5f:4b:83:21:76:e6:bf:c6:eb:59:d2:67:
         a2:bd:be:a2:be:db:02:b4:7d:87:70:7a:fe:49:cf:18:62:c8:
         59:b4:46:fe:d3:2a:e8:36:c8:c1:c8:b4:c8:26:a9:b6:05:18:
         35:c5:5c:2b:d2:40:72:e5:d1:8a:db:8f:6e:57:8a:4f:7c:97:
         7d:cf:f9:d6:41:f0:a2:0b:cc:56:b7:43:59:93:00:30:a1:a0:
         64:81:60:a4:c6:cb:b9:d7:20:56:a4:b6:fb:32:57:59:b9:82:
         42:aa:d5:cc:f6:2d:f2:2d:af:7f:15:93:17:c7:4d:52:1d:f8:
         8a:59:25:7d:52:88:4a:64:e7:c5:84:43:98:f7:74:e5:92:79:
         79:51:ce:b3:56:d1:fe:0b:8f:88:39:67:3b:ea:67:80:fc:bd:
         0c:92:00:11:de:87:58:63:65:ae:e3:84:86:f5:85:85:d6:17:
         29:54:5e:ec:22:ae:53:37:6f:03:23:a3:8b:27:ae:b1:e8:a0:
         80:97:bd:78:49:22:35:d5:6a:90:f1:4d:49:13:e0:5b:58:35:
         32:cb:ab:2c:8a:19:05:f8:60:57:04:fa:e6:8d:27:16:6d:2f:
         ea:9b:cc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:29 2024 by rpki-client on console-fra.rpki-client.org