Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/40F782C8B4AA11EEB330C137C4F9AE02.roa
File:                     40F782C8B4AA11EEB330C137C4F9AE02.roa (raw, json)
Hash identifier:          6omCuuVUgdbnOuuOFxfXDIcF+rrSXl7KykbR3GM1b/w=
Subject key identifier:   FE:BB:DA:D1:9C:9E:C0:A4:40:13:65:42:4B:E8:22:1B:44:0C:68:D0
Certificate issuer:       /CN=A9148526/serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344
Certificate serial:       7B
Authority key identifier: CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/40F782C8B4AA11EEB330C137C4F9AE02.roa
Signing time:             Tue 03 Sep 2024 07:19:32 +0000
ROA not before:           Tue 03 Sep 2024 07:19:32 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     131296
IP address blocks:        103.68.228.0/22 maxlen: 24
                          180.222.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl
                          rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148526/serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344
        Validity
            Not Before: Sep  3 07:19:32 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d6b884-1c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:92:ce:39:16:c7:27:47:95:49:99:7d:3a:4b:
                    a3:7e:87:c6:f5:40:13:40:1a:a8:8a:ef:06:f5:ad:
                    af:08:31:b3:ba:00:a4:d0:04:46:72:70:ac:32:44:
                    b4:58:d3:6e:41:57:64:7e:27:05:04:d7:8e:36:6e:
                    00:59:46:05:58:e5:64:20:41:5c:27:ee:77:4b:a4:
                    a4:e6:08:c8:db:f5:c5:1a:2e:17:17:2f:30:c7:14:
                    18:d5:8b:b3:81:24:2a:27:55:c9:3a:1e:42:45:3a:
                    ae:b3:e2:9e:5b:5e:a2:5e:3e:16:32:01:5b:9e:a4:
                    14:d8:d9:40:b1:72:51:d7:d9:f4:86:be:d0:df:b7:
                    cd:74:66:81:d8:df:6e:a3:17:b3:d2:e3:bb:ea:9b:
                    80:5a:a3:a7:45:8f:25:77:8c:c0:14:66:62:69:0f:
                    c8:77:b2:c4:4e:9f:23:b4:e6:3d:19:49:95:b3:42:
                    da:81:3a:a2:9a:1f:2f:91:0b:1c:81:76:5b:9e:56:
                    3f:d5:40:96:84:07:be:f2:4d:bb:55:5c:ed:0d:d1:
                    67:0d:92:8c:b0:f1:4e:cf:25:49:ff:d8:02:91:f4:
                    0e:97:79:4f:23:c5:ed:1d:cf:e5:d6:cc:a5:16:f7:
                    3c:2e:dc:b0:8e:ca:80:88:ca:26:cc:44:0c:28:56:
                    4a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:BB:DA:D1:9C:9E:C0:A4:40:13:65:42:4B:E8:22:1B:44:0C:68:D0
            X509v3 Authority Key Identifier:
                keyid:CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/40F782C8B4AA11EEB330C137C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.228.0/22
                  180.222.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:c5:57:d8:c5:50:4d:a6:80:4e:13:5f:a4:9d:d6:89:f7:88:
         87:cf:7e:d6:ff:9a:6c:cd:50:a3:7d:e1:66:f6:93:a5:40:a0:
         9d:02:f7:da:e3:20:9f:7b:1a:85:0f:c8:fb:4a:6c:3b:3e:62:
         22:c5:e0:99:d2:1c:88:10:53:a7:94:35:64:99:2d:3b:a0:65:
         8d:0c:d2:24:f9:c2:ba:bd:9b:a6:89:d5:1a:dc:41:dd:c4:42:
         db:76:e1:9d:1f:bc:f0:5a:15:df:0b:cd:f2:63:ed:90:7e:44:
         1c:47:2b:82:5a:f8:85:e5:db:14:4b:17:e7:67:ce:1a:b8:e3:
         4c:1a:fb:1c:8a:78:af:14:d8:5b:fc:f8:9d:79:65:03:e4:7f:
         7d:46:36:4b:ab:78:c5:d8:ba:a0:10:da:db:9b:6e:fe:73:be:
         e0:bc:d1:6d:f3:db:5b:ea:fb:6e:3a:82:0a:43:ce:0d:cf:97:
         fe:7d:fe:52:25:25:48:1d:07:fe:07:fb:2e:ab:09:2c:88:06:
         ea:6b:d9:93:1d:0c:b3:ba:7e:36:c6:d6:e0:10:57:2a:41:39:
         d0:ae:3c:05:3c:54:44:3e:43:61:d7:9c:40:7e:7b:a5:ab:eb:
         a3:79:50:01:a2:ed:16:62:65:67:8f:21:07:4d:0f:95:73:1f:
         5d:67:38:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:47 2024 by rpki-client on console-fra.rpki-client.org