Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/403163B4C1A311EC8986B978C4F9AE02.roa
File:                     403163B4C1A311EC8986B978C4F9AE02.roa (raw, json)
Hash identifier:          URzUl2zpul8FHzxSfHY/OMihJElFp0YOE5fipD/Akgw=
Subject key identifier:   2C:95:52:9B:81:79:84:F7:17:F5:A4:A8:47:27:89:BB:30:26:D9:AD
Certificate issuer:       /CN=A9137242/serialNumber=EAB24A90C6D046CD83FB5EF4A3C598E4EA9A168C
Certificate serial:       062E
Authority key identifier: EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/403163B4C1A311EC8986B978C4F9AE02.roa
Signing time:             Mon 24 Jul 2023 18:35:53 +0000
ROA not before:           Mon 24 Jul 2023 18:35:53 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     136141
IP address blocks:        103.139.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.crl
                          rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Jun 2024 19:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1582 (0x62e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137242/serialNumber=EAB24A90C6D046CD83FB5EF4A3C598E4EA9A168C
        Validity
            Not Before: Jul 24 18:35:53 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64bec489-a190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5c:11:96:aa:fa:53:7e:b2:bc:40:8e:13:27:
                    db:53:22:0a:21:d8:96:3c:62:fb:e2:a8:5b:17:55:
                    9a:bb:16:1f:7a:2e:4f:91:8d:fc:09:2e:c6:0b:c8:
                    8b:23:00:a9:3e:d5:36:af:63:b0:95:2f:dd:3e:64:
                    3b:dd:48:ea:01:cf:4c:06:e9:6f:ea:5c:77:f1:93:
                    44:69:a4:42:98:f6:e7:11:0b:e3:e4:de:30:6e:98:
                    67:ea:73:b8:34:d2:ae:b2:e4:c5:8e:bd:cc:28:38:
                    ff:a6:18:27:e6:2a:97:70:b3:bd:7f:fd:3a:a6:a4:
                    49:e6:77:28:30:d7:10:33:36:9c:02:9c:76:64:fd:
                    5f:e1:75:23:70:fa:f6:ae:d5:c1:4e:8b:c6:bf:4c:
                    d1:bf:e5:3e:56:84:35:42:b9:f0:ca:56:5d:7b:01:
                    b8:e9:d0:91:0d:26:78:fd:4f:1e:db:c7:14:5f:00:
                    94:f7:59:3b:22:54:2a:32:17:e2:7a:5d:1f:b9:b7:
                    2d:98:58:ff:d1:1e:95:13:ed:4b:c8:4f:75:18:ab:
                    19:9d:3a:ad:0f:14:b4:7f:2e:da:13:81:fb:f8:ed:
                    60:e4:b9:7c:a2:95:cc:66:0d:dc:a8:2a:22:5a:54:
                    7c:d1:99:43:70:3d:33:12:0a:e8:c2:cc:30:4c:39:
                    f7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:95:52:9B:81:79:84:F7:17:F5:A4:A8:47:27:89:BB:30:26:D9:AD
            X509v3 Authority Key Identifier:
                keyid:EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/403163B4C1A311EC8986B978C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:5f:7d:35:07:3e:0a:19:51:86:44:64:34:4d:dc:a2:f1:0d:
         25:54:3a:35:68:7e:9f:7b:0c:ca:0f:dd:a2:f1:7f:a9:93:09:
         35:7a:60:50:c6:de:20:17:2a:a1:91:07:7d:23:26:74:19:db:
         c4:48:c5:32:d9:65:75:06:5b:ae:c2:0e:16:cd:52:1b:6f:10:
         c5:19:71:f7:63:91:1f:c8:0f:a7:67:bf:e4:54:c0:7d:68:10:
         86:01:d1:3c:4c:32:05:89:d5:3c:57:21:72:68:ed:e4:f3:5f:
         47:cd:25:9c:fc:23:8b:9a:90:a8:ff:ca:1e:31:d4:be:e3:a5:
         86:cf:8d:30:49:c0:73:07:1b:1f:9c:80:29:81:d9:bb:7f:72:
         fc:5a:a8:cd:42:50:68:bf:5d:4d:b6:24:f5:2c:eb:1c:b7:24:
         51:0d:26:7e:06:fe:ec:e4:6a:16:62:36:1c:6b:67:7c:f5:67:
         1e:6c:f2:bd:42:fc:9f:ec:06:c8:17:39:69:65:61:4f:e6:b3:
         d6:d4:a0:7f:d4:94:4f:bc:17:f6:fc:f6:a9:53:8b:5b:20:be:
         49:2c:39:9b:42:e0:c5:be:e8:3c:43:b0:d4:de:7e:da:ca:2a:
         be:f1:7f:c7:1f:a0:d0:d1:a5:3a:da:0c:80:08:f2:6a:98:84:
         7f:24:77:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 20:00:28 2024 by rpki-client on console-fra.rpki-client.org