Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/4E18682450A911EEA39AAE41C4F9AE02.roa
File:                     4E18682450A911EEA39AAE41C4F9AE02.roa (raw, json)
Hash identifier:          UEP6ePzBERtQHgyGtP7PY4xc2h9fSUeeMx68So968PU=
Subject key identifier:   2C:6D:0F:1F:97:DD:C1:87:AF:74:33:3A:9B:4A:AA:50:46:AD:1B:17
Certificate issuer:       /CN=A91435F3/serialNumber=9213B5047A40F23C7C600480E6DAA7A1CF7FA2E8
Certificate serial:       02
Authority key identifier: 92:13:B5:04:7A:40:F2:3C:7C:60:04:80:E6:DA:A7:A1:CF:7F:A2:E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khO1BHpA8jx8YASA5tqnoc9_oug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/4E18682450A911EEA39AAE41C4F9AE02.roa
Signing time:             Mon 11 Sep 2023 13:44:19 +0000
ROA not before:           Mon 11 Sep 2023 13:44:19 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     135643
IP address blocks:        103.77.129.0/24 maxlen: 24
                          103.119.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.crl
                          rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khO1BHpA8jx8YASA5tqnoc9_oug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 07:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91435F3/serialNumber=9213B5047A40F23C7C600480E6DAA7A1CF7FA2E8
        Validity
            Not Before: Sep 11 13:44:19 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=64ff19b2-57bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:67:35:f1:78:0e:6f:fa:99:96:20:73:12:bc:
                    8c:7d:a9:af:1b:8e:8c:65:99:ed:97:eb:8e:02:01:
                    74:d3:42:eb:ad:6b:e8:82:08:b2:2a:51:fb:e6:f2:
                    11:76:a5:13:75:0d:57:f5:22:11:15:f5:a4:a8:1c:
                    d4:04:ac:33:24:b4:e9:e3:4b:ab:7e:82:e8:04:43:
                    51:55:b5:4d:01:f6:3b:3d:39:27:5a:29:f0:ef:0e:
                    b3:59:4b:89:ac:e8:a9:e5:f8:d5:24:ca:d5:78:9c:
                    a0:1e:71:54:fe:cd:22:d1:e1:3b:fe:27:be:53:f6:
                    f8:81:d4:c5:0b:59:a0:46:7f:b6:50:74:34:b6:ce:
                    ee:3b:7c:aa:dd:15:c6:88:60:cb:25:07:68:53:58:
                    3a:5a:f5:36:b8:b0:0d:ed:75:9b:37:9e:b5:f6:36:
                    ee:b4:ed:7e:3f:df:88:f3:3a:ce:66:17:8c:2d:62:
                    db:f6:af:f5:d1:1b:c3:81:af:a8:e6:cd:7e:82:33:
                    37:7d:34:a1:32:9a:79:2f:11:b4:75:6c:79:4b:3d:
                    c7:0e:50:67:a4:f6:1e:1d:0b:5d:73:67:2d:08:95:
                    3e:f1:b4:5c:34:80:07:fc:68:dc:34:c5:68:05:39:
                    a1:7d:e5:13:a1:1e:15:c6:58:71:10:2f:c0:ff:c6:
                    de:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:6D:0F:1F:97:DD:C1:87:AF:74:33:3A:9B:4A:AA:50:46:AD:1B:17
            X509v3 Authority Key Identifier:
                keyid:92:13:B5:04:7A:40:F2:3C:7C:60:04:80:E6:DA:A7:A1:CF:7F:A2:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khO1BHpA8jx8YASA5tqnoc9_oug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/4E18682450A911EEA39AAE41C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.129.0/24
                  103.119.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:c2:e4:32:41:b2:e3:1b:62:d9:e1:e9:4c:9a:7c:fa:9c:4a:
         51:ee:24:92:6c:03:7f:4c:ea:b6:11:15:0c:89:d8:9f:d3:64:
         c6:b1:78:fc:c9:15:a0:b3:06:6a:d8:7a:13:0a:d4:6a:d7:b3:
         9c:cb:76:a4:31:90:e6:ed:51:cb:4d:9a:af:3f:0f:1e:28:33:
         7d:8e:a4:78:b3:f7:08:14:8d:21:71:8a:97:c4:b1:ae:88:cf:
         f5:6c:25:5a:4d:90:71:c3:58:34:8f:5d:e0:2c:8a:84:4c:eb:
         b9:80:c3:80:7e:39:4e:83:a2:33:f9:a5:e9:c9:16:93:ec:e2:
         a0:c0:a6:41:ea:af:4e:1f:b7:4d:6e:90:b7:d2:dd:0e:e8:55:
         10:78:49:0e:77:e5:82:6a:b1:58:c1:ec:72:45:7a:85:70:f6:
         61:38:70:fe:62:e5:22:34:c0:24:91:b9:82:66:08:b4:bd:f3:
         7d:cb:2f:fc:ea:68:c7:92:0d:ca:4e:6d:89:10:3d:b0:8b:13:
         2b:d4:dc:b8:e3:85:a8:90:18:35:15:4c:8b:52:0a:1b:f0:e3:
         4c:94:67:7f:de:59:f1:48:07:62:ae:c2:98:b4:c7:de:0c:00:
         1b:4b:82:f8:75:11:b1:c5:90:ec:1c:1a:f4:03:6c:ae:51:29:
         d1:c9:ff:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 08:56:39 2024 by rpki-client on console-fra.rpki-client.org