Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/67CDF190321211EEA6FE6D43C4F9AE02.roa
File:                     67CDF190321211EEA6FE6D43C4F9AE02.roa (raw, json)
Hash identifier:          Uk+1Q9FAw1uDzioiBrYxlscLw7cYbBLEdeBt1Xgwv9o=
Subject key identifier:   3A:5D:73:68:5C:AB:25:9A:9D:C3:84:31:34:7F:90:38:E2:66:16:02
Certificate issuer:       /CN=A9146ABC/serialNumber=574985E26D8C7716B09ED50319B4CE64961DE70D
Certificate serial:       35
Authority key identifier: 57:49:85:E2:6D:8C:77:16:B0:9E:D5:03:19:B4:CE:64:96:1D:E7:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/67CDF190321211EEA6FE6D43C4F9AE02.roa
Signing time:             Fri 27 Oct 2023 05:57:38 +0000
ROA not before:           Fri 27 Oct 2023 05:57:38 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     6939
IP address blocks:        103.100.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.crl
                          rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 06:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146ABC/serialNumber=574985E26D8C7716B09ED50319B4CE64961DE70D
        Validity
            Not Before: Oct 27 05:57:38 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=653b5152-d393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5c:8e:e9:97:be:ec:81:b2:a8:51:89:cc:1b:
                    7e:ce:61:21:64:62:ec:dc:b2:53:97:e0:12:6e:af:
                    40:97:5e:e0:23:bf:f4:b9:70:8f:2d:9f:fb:9d:2a:
                    7b:13:2b:b5:9c:7b:cb:95:d2:a3:c9:1e:79:41:0f:
                    a3:b1:00:74:69:a8:0f:48:cc:df:0a:88:a1:6f:b4:
                    3b:e0:54:a3:1a:e6:c1:67:16:db:36:7d:77:03:d5:
                    77:47:0f:ed:8c:19:19:b8:47:0c:46:99:8f:42:90:
                    a7:75:be:a2:9a:00:ca:f2:4c:3c:d6:ac:35:e9:51:
                    72:c5:07:b5:8a:13:19:79:15:46:ad:7a:9e:bd:56:
                    e4:53:c4:4c:8c:88:68:0e:c6:8d:d6:67:40:39:61:
                    59:30:37:b7:87:96:04:37:6d:16:43:7b:82:e4:1d:
                    c4:92:e6:0b:e5:06:52:e5:8b:aa:7d:4c:28:ae:d1:
                    03:7c:22:a4:ac:8d:5b:ae:db:a2:a8:63:6b:7d:8a:
                    71:a5:cb:b3:b8:66:17:e6:05:ad:23:e4:9d:b9:fc:
                    7f:18:78:80:16:97:c7:a1:47:66:ec:1c:9c:f3:17:
                    a7:0e:b8:bb:89:19:cf:3a:3a:4a:9f:26:42:5a:0e:
                    40:a9:5b:d6:0c:c9:04:71:e4:80:4a:2f:c2:1c:d8:
                    bf:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5D:73:68:5C:AB:25:9A:9D:C3:84:31:34:7F:90:38:E2:66:16:02
            X509v3 Authority Key Identifier:
                keyid:57:49:85:E2:6D:8C:77:16:B0:9E:D5:03:19:B4:CE:64:96:1D:E7:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/67CDF190321211EEA6FE6D43C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:39:da:2f:01:4b:4c:ef:60:e5:73:3a:63:d1:f5:e8:27:2f:
         2c:a4:60:33:be:d9:b7:b0:9d:59:f2:cf:9b:cd:5c:8d:15:a8:
         5c:49:04:0d:30:07:44:46:c3:da:16:81:05:33:47:04:a0:ca:
         e3:38:85:b9:e8:25:80:fd:b7:94:fa:49:5f:56:24:01:79:67:
         4e:58:e4:6c:9c:b5:4f:70:6e:c9:bd:4b:9e:fd:10:26:93:dc:
         4b:e0:d0:27:0b:af:70:b0:e9:3a:5f:6f:b3:f3:22:07:70:27:
         b1:e9:3b:ca:af:34:d3:a5:6b:e6:ba:ea:ed:17:c9:a8:36:69:
         bf:5a:3c:96:8b:f4:14:53:7f:ad:98:fb:f5:32:00:e3:e6:8e:
         dd:98:1d:5a:77:36:ea:f1:78:6a:f2:36:25:49:fd:92:4b:60:
         b9:87:b0:21:1b:b0:3f:46:4f:1f:1a:f1:90:a9:fd:74:ee:ca:
         04:3f:df:77:0c:f3:6f:91:87:85:55:6c:ea:ca:f7:82:55:0f:
         f5:8d:fc:63:e7:7e:88:29:73:21:a8:e1:cf:4b:96:7c:fe:cc:
         9d:f1:14:07:0e:66:0f:18:5b:c5:55:63:4d:c1:1a:3e:87:11:
         0a:b0:47:9b:07:7b:f3:18:af:38:88:64:de:91:c9:07:8d:39:
         69:57:0b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 08:39:02 2024 by rpki-client on console-fra.rpki-client.org