Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/6A4842A69F8611ECBE806D30C4F9AE02.roa
File:                     6A4842A69F8611ECBE806D30C4F9AE02.roa (raw, json)
Hash identifier:          H/1cwDaEHE11fCD8qKCsRtyT9enDyusjOKBljw+UDXo=
Subject key identifier:   2E:B6:9E:E9:31:D8:51:15:A6:66:99:A4:80:7B:D5:C0:7E:9A:66:E9
Certificate issuer:       /CN=A913979C/serialNumber=752F7B4853C3A9C9F07FD9DAC5DB96AB7EF2DFDF
Certificate serial:       0222
Authority key identifier: 75:2F:7B:48:53:C3:A9:C9:F0:7F:D9:DA:C5:DB:96:AB:7E:F2:DF:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dS97SFPDqcnwf9naxduWq37y398.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/6A4842A69F8611ECBE806D30C4F9AE02.roa
Signing time:             Fri 09 Jun 2023 05:16:16 +0000
ROA not before:           Fri 09 Jun 2023 05:16:16 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     138915
IP address blocks:        103.152.98.0/24 maxlen: 24
                          103.152.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.crl
                          rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dS97SFPDqcnwf9naxduWq37y398.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 04:33:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 546 (0x222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913979C/serialNumber=752F7B4853C3A9C9F07FD9DAC5DB96AB7EF2DFDF
        Validity
            Not Before: Jun  9 05:16:16 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=6482b5a0-8a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2b:c7:e2:5d:ce:86:0a:a8:55:00:bc:39:98:
                    48:27:b1:73:1a:22:d9:04:db:06:3a:5a:dc:7d:42:
                    bb:c9:e7:22:e4:fd:34:f6:3c:04:d1:11:4c:32:6c:
                    23:77:83:fd:00:79:c9:9d:e5:ff:40:17:cd:81:32:
                    bb:53:a9:fa:60:de:9f:73:31:14:0a:80:dc:d0:4b:
                    11:2e:ac:9f:94:4f:da:d7:26:f7:06:58:4a:ce:6b:
                    08:ee:08:db:58:c9:8b:34:29:78:6a:17:12:bf:da:
                    64:9f:59:b0:79:54:eb:11:87:01:06:65:e1:81:85:
                    13:96:21:e2:16:58:93:1d:11:82:1b:c5:bd:0b:17:
                    ed:09:6f:68:7a:d6:4e:09:b1:c5:09:1e:1f:3c:ed:
                    10:2b:ce:3f:d1:f6:28:3a:98:88:dd:d2:59:c1:70:
                    39:c8:47:2f:fe:97:19:3a:5b:50:c8:8b:92:8a:72:
                    71:80:36:cf:7f:18:bd:0f:e6:22:b8:5b:06:61:bc:
                    c3:21:e6:97:22:9d:5a:cb:8e:1d:18:34:fa:b8:1b:
                    fe:ae:3e:20:6d:95:30:37:59:46:a6:b6:fe:2f:db:
                    75:23:7f:0f:a1:be:e8:b7:35:86:68:d1:4c:1d:97:
                    66:18:28:4b:cb:65:42:4a:df:50:37:eb:e6:a4:fa:
                    20:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B6:9E:E9:31:D8:51:15:A6:66:99:A4:80:7B:D5:C0:7E:9A:66:E9
            X509v3 Authority Key Identifier:
                keyid:75:2F:7B:48:53:C3:A9:C9:F0:7F:D9:DA:C5:DB:96:AB:7E:F2:DF:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dS97SFPDqcnwf9naxduWq37y398.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/6A4842A69F8611ECBE806D30C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:5d:59:32:fb:fe:e9:4c:26:23:34:94:9f:b4:8f:c3:ff:d5:
         d4:41:57:3a:ce:fc:6d:a0:80:a4:a6:ea:fa:07:d2:37:4c:a0:
         bb:3f:38:7e:4b:80:d8:7e:ae:47:3f:52:08:d0:07:c1:d9:6c:
         54:71:40:68:4c:a7:11:d6:f7:08:3c:21:75:5a:a7:49:ef:26:
         b7:43:a3:fc:82:ff:a9:52:04:07:85:a2:e3:fa:56:51:c3:cb:
         1c:e1:e6:fb:96:96:5b:eb:ab:fb:40:32:e2:6f:f1:7c:cc:34:
         86:59:b0:e1:9d:fc:6a:d1:d2:46:a9:b6:3e:7f:a5:42:4f:04:
         2a:ba:82:de:dd:81:d4:5b:26:aa:21:59:24:da:b2:19:97:ed:
         0d:c4:3d:80:55:59:18:fd:d2:8a:9d:c6:c3:df:46:de:2f:6f:
         05:42:e6:c5:dd:94:86:94:b4:d0:cb:34:78:d8:76:6b:6a:83:
         cc:d0:4e:f8:96:5e:be:44:c0:c2:b4:c1:53:e4:23:21:73:4a:
         f4:d9:ad:79:3b:1d:96:87:a5:54:dd:fa:bd:bb:bf:03:20:07:
         c4:bb:b1:5c:dc:e5:57:44:9b:3a:48:34:6f:16:eb:ce:93:b2:
         3f:98:af:24:35:d0:08:c8:d0:14:14:3c:bc:cb:69:1a:42:3f:
         32:02:85:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 05:48:42 2024 by rpki-client on console-fra.rpki-client.org