Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/755581D40D7E11EDA9F2CA4AC4F9AE02.roa
File:                     755581D40D7E11EDA9F2CA4AC4F9AE02.roa (raw, json)
Hash identifier:          PDL8r9tZRfgflY7VPbsALk8qdKKZXRf5oj0NmGKRBus=
Subject key identifier:   6F:8D:B4:2B:AB:36:6E:FB:C0:B6:6A:A4:1E:3B:83:7D:39:CA:A2:34
Certificate issuer:       /CN=A9162914/serialNumber=CB1C80B4034BE41B58C3C64B24A08CD9C77B963B
Certificate serial:       0131
Authority key identifier: CB:1C:80:B4:03:4B:E4:1B:58:C3:C6:4B:24:A0:8C:D9:C7:7B:96:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/755581D40D7E11EDA9F2CA4AC4F9AE02.roa
Signing time:             Tue 15 Aug 2023 03:43:40 +0000
ROA not before:           Tue 15 Aug 2023 03:43:40 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     62184
IP address blocks:        103.12.0.0/24 maxlen: 24
                          2001:df1:f40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl
                          rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 05:43:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162914/serialNumber=CB1C80B4034BE41B58C3C64B24A08CD9C77B963B
        Validity
            Not Before: Aug 15 03:43:40 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64daf46c-4113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:31:90:80:05:00:c0:35:fc:0f:1d:d9:f5:c0:
                    94:89:8c:a9:d4:b9:dc:18:06:05:a7:e4:dc:56:73:
                    53:33:26:4a:81:d2:53:12:ac:f9:44:e8:83:e6:04:
                    d9:03:b9:76:d1:93:f9:61:07:d2:a4:fe:b3:65:f8:
                    98:60:dd:f5:99:e9:27:fd:db:82:13:2b:a1:b8:f3:
                    aa:3f:ea:96:e3:98:91:6a:8c:d3:ba:8b:3e:c7:17:
                    a6:23:f2:7e:7f:f8:8a:ad:1c:6b:d1:70:6e:0c:e9:
                    b7:11:ef:79:cf:6d:73:cc:25:6c:f3:5e:65:9f:56:
                    7e:3f:6d:e6:f4:c3:0d:47:92:11:b6:6f:3d:45:4d:
                    4e:52:a1:67:c1:c9:a1:2a:cd:a6:e4:9d:82:2c:ef:
                    12:14:03:11:99:0d:66:92:33:14:2f:d2:fb:3b:bb:
                    68:d7:d4:5b:4d:59:e3:ed:eb:48:04:cb:5c:39:6d:
                    25:d0:c7:0b:6a:e0:4f:91:6d:33:0c:6f:29:50:62:
                    32:09:c3:11:b5:6a:22:94:e1:3d:7c:ee:0f:73:f3:
                    c7:f8:05:0b:49:83:66:1a:fe:e1:dc:e2:37:94:1a:
                    c7:ba:fa:13:07:39:f9:6e:98:6f:da:80:cf:2d:21:
                    0e:29:a8:59:7b:41:a5:39:7f:5b:4c:b3:4b:2f:93:
                    c8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8D:B4:2B:AB:36:6E:FB:C0:B6:6A:A4:1E:3B:83:7D:39:CA:A2:34
            X509v3 Authority Key Identifier:
                keyid:CB:1C:80:B4:03:4B:E4:1B:58:C3:C6:4B:24:A0:8C:D9:C7:7B:96:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/755581D40D7E11EDA9F2CA4AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.0.0/24
                IPv6:
                  2001:df1:f40::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:b6:1f:8d:92:29:39:13:a3:62:88:ce:ab:05:71:b0:f9:ca:
         aa:f0:51:7e:50:d4:a7:2a:52:f5:c8:0c:83:9d:a6:a7:0e:62:
         ad:0a:09:a6:46:7f:e9:df:ad:ba:d4:d7:47:51:fd:14:22:96:
         d0:de:87:ad:e9:57:a3:79:d3:54:40:95:d8:19:a7:79:49:15:
         3c:6a:85:5e:6c:7f:ba:f3:39:cf:12:74:62:f9:50:90:fd:ea:
         e5:15:68:0c:f1:26:14:dd:9d:a9:97:dc:7b:be:ca:82:cc:b4:
         de:c2:3d:8d:47:20:b0:bf:f7:2d:a8:d2:14:d5:d7:fe:38:ac:
         29:a3:46:60:6b:93:fe:1f:8b:a5:d6:98:da:85:f4:65:5b:e4:
         6a:e2:7b:00:02:ef:20:ce:fe:35:85:f0:02:a9:3a:03:67:df:
         49:42:66:fe:55:2c:45:31:7d:a3:71:9c:19:35:08:19:92:2c:
         cc:88:79:af:7a:15:6e:c0:f0:9f:32:ad:8f:6d:59:8c:95:d6:
         46:41:81:d9:c4:ed:99:c9:5d:ef:e8:df:27:10:d3:cd:0e:eb:
         4a:85:51:6e:1e:c1:21:e1:d5:68:e1:b8:fc:b5:7a:3a:70:5a:
         c2:3f:41:52:f6:b4:6d:46:7d:10:95:3b:c5:20:6d:59:fa:af:
         df:2c:dd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:08:17 2024 by rpki-client on console-ams.rpki-client.org