Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/64D342B229B311EFBE0EBC5EC4F9AE02.roa
File:                     64D342B229B311EFBE0EBC5EC4F9AE02.roa (raw, json)
Hash identifier:          ZqmJMyygeSYlLrd6mxmHeyEGZT3DAmPmn3MyWtefGYw=
Subject key identifier:   D1:83:C3:4F:FD:D9:FA:F4:A5:52:48:8B:89:4E:7D:89:61:56:10:C5
Certificate issuer:       /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Certificate serial:       A4
Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/64D342B229B311EFBE0EBC5EC4F9AE02.roa
Signing time:             Thu 13 Jun 2024 18:33:14 +0000
ROA not before:           Thu 13 Jun 2024 18:33:14 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     139660
IP address blocks:        103.135.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl
                          rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 07:24:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
        Validity
            Not Before: Jun 13 18:33:14 2024 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=666b3b6a-7c4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:14:c3:7e:26:79:c8:26:80:a8:5f:3d:19:b9:
                    f6:60:fe:67:a2:31:88:2f:15:cb:49:de:d6:79:67:
                    44:8e:c1:f2:65:6a:fa:75:91:c7:dd:0f:95:83:ba:
                    04:fd:18:51:ec:35:e1:87:10:49:61:0c:f9:16:e0:
                    b0:0d:f8:f7:c5:86:86:a2:63:0e:ac:f3:92:10:17:
                    60:cb:33:df:60:aa:b5:d5:bf:6a:e3:9d:7d:ed:df:
                    fd:62:78:0e:70:19:68:17:b9:70:08:f9:96:ca:5c:
                    fe:f5:ec:b8:74:fc:a3:45:e0:b1:95:ed:fe:38:68:
                    82:43:63:1e:1e:86:25:f8:17:79:d9:0d:76:bb:65:
                    95:e2:e8:2c:2c:d1:81:6e:7b:63:a0:e6:c8:ce:4d:
                    4d:19:28:ab:95:46:ad:b3:86:ab:5f:4d:0c:d4:e5:
                    e0:f1:de:de:8a:bb:25:61:d0:e5:3a:dd:2a:ff:f5:
                    9c:4f:49:21:ee:2f:6f:9b:64:2e:9b:f3:b0:50:c4:
                    c0:45:62:f5:6f:3d:eb:8d:2e:14:25:c0:c5:c5:13:
                    c6:26:5a:c2:b1:71:a5:7f:3b:ad:99:c4:1c:ab:3a:
                    79:d4:5b:c3:2c:7b:8a:02:b1:c7:17:30:03:e2:ad:
                    19:e5:55:d5:b0:d1:c5:6d:82:a3:b9:c3:0d:b3:0a:
                    12:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:83:C3:4F:FD:D9:FA:F4:A5:52:48:8B:89:4E:7D:89:61:56:10:C5
            X509v3 Authority Key Identifier:
                keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/64D342B229B311EFBE0EBC5EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:df:ed:a0:2e:b3:a9:96:93:6b:9f:b4:f9:f0:56:30:39:83:
         d3:88:25:d8:cc:a1:e5:8f:ad:ff:75:f6:f8:6f:ca:8b:1b:c3:
         7b:ba:5d:07:79:aa:e2:a6:ec:ea:f8:6a:44:49:10:e4:02:d4:
         1a:ce:37:5f:4d:ca:94:c2:9e:1c:d8:16:05:c3:0a:55:94:da:
         ad:28:89:7b:e5:c9:6a:ee:80:93:eb:b2:1d:14:2b:1f:44:a1:
         8f:c3:5e:ec:9d:6a:ae:2b:85:7d:e1:28:c2:ae:66:51:13:dd:
         94:3a:41:4a:7b:30:89:d6:70:d6:94:64:f2:cd:7a:59:18:dd:
         1e:3d:a9:5c:5e:68:32:22:c8:b5:54:46:cd:13:23:99:4c:15:
         84:db:70:73:34:7d:f6:63:58:e5:95:4b:08:dc:71:77:56:e4:
         26:65:8d:ff:f5:bc:21:59:29:e8:3d:aa:13:0f:fd:e0:ad:30:
         38:f5:14:c9:40:e6:75:b4:3a:bd:d4:7d:8f:1f:f2:14:f4:18:
         b3:69:b7:56:90:38:d0:0c:f7:0f:e2:43:0f:1a:28:4e:e1:cd:
         fb:18:7d:07:0f:0a:9f:4f:3d:cf:84:c7:df:2b:4c:b3:ec:6f:
         fb:b9:ea:a9:d6:bc:79:e6:e3:17:e5:29:8f:e8:67:90:57:f0:
         ec:b5:44:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 09:40:49 2024 by rpki-client on console-fra.rpki-client.org