Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/424F4EB0D86111ED8E82F133C4F9AE02.roa
File:                     424F4EB0D86111ED8E82F133C4F9AE02.roa (raw, json)
Hash identifier:          e6eUrz9dGV8gFQkq6CwvZZTH1Y1ZS1qXtIPuBBcr1eU=
Subject key identifier:   B5:26:61:FC:B8:2D:79:A1:84:8F:C6:F6:23:EC:7E:F5:A0:74:83:F4
Certificate issuer:       /CN=A9173C63/serialNumber=908A180F94949607ADC0113149BE882AEAA8E88F
Certificate serial:       DD
Authority key identifier: 90:8A:18:0F:94:94:96:07:AD:C0:11:31:49:BE:88:2A:EA:A8:E8:8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/424F4EB0D86111ED8E82F133C4F9AE02.roa
Signing time:             Mon 03 Jun 2024 06:55:51 +0000
ROA not before:           Mon 03 Jun 2024 06:55:51 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     151080
IP address blocks:        103.131.100.0/23 maxlen: 24
                          2001:df2:4340::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.crl
                          rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 06:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173C63/serialNumber=908A180F94949607ADC0113149BE882AEAA8E88F
        Validity
            Not Before: Jun  3 06:55:51 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=665d68f7-b279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:47:83:d2:b4:8a:35:81:3e:09:42:81:1d:5d:
                    f7:13:29:d4:9d:3c:84:be:82:a2:c7:3b:b0:f6:3a:
                    7f:37:42:9c:c2:ef:3d:ee:4a:12:e2:b9:41:31:c7:
                    33:76:46:a7:9e:a7:52:15:4e:28:16:91:1a:ae:ca:
                    28:6c:13:50:ca:30:3d:06:65:da:66:d9:1b:5c:e4:
                    bc:82:0e:15:94:85:e2:4b:c4:00:db:7f:38:3c:b8:
                    29:8c:6b:51:4e:42:fa:a7:e4:57:cf:9e:8a:8a:a9:
                    e8:d2:c2:3e:95:2d:97:d3:aa:b9:93:cd:6e:cd:ed:
                    9e:e2:b7:c1:a8:ff:e3:38:0e:4f:36:42:8b:2f:99:
                    fa:15:cc:19:00:c5:f8:2a:9c:e9:8d:71:42:06:b5:
                    09:0f:36:c2:2d:22:64:95:c0:b3:fb:60:64:fc:00:
                    5e:b2:5c:83:5d:c3:79:e6:fe:e3:3d:99:7a:04:cf:
                    58:15:18:05:52:ed:fc:4a:1e:36:5f:0b:46:94:77:
                    e5:b3:7f:ca:a8:46:cf:d1:24:13:7d:99:f5:b4:b5:
                    63:27:5d:34:d1:5d:f0:fe:c0:bf:20:a1:81:98:96:
                    c6:a6:bc:19:20:29:e7:95:e0:ea:ca:62:c1:b1:3e:
                    f4:52:9f:3e:f1:dd:a8:4a:9d:6a:21:bc:03:08:1a:
                    a9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:26:61:FC:B8:2D:79:A1:84:8F:C6:F6:23:EC:7E:F5:A0:74:83:F4
            X509v3 Authority Key Identifier:
                keyid:90:8A:18:0F:94:94:96:07:AD:C0:11:31:49:BE:88:2A:EA:A8:E8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/424F4EB0D86111ED8E82F133C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.100.0/23
                IPv6:
                  2001:df2:4340::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:8e:81:c1:a2:3c:9d:39:20:20:7b:af:79:ca:7e:d4:7c:05:
         6a:c2:cf:e6:4f:91:f9:11:ea:17:72:65:28:d6:9c:61:7d:05:
         ae:5a:33:7e:f0:8e:e4:94:49:29:26:f9:4b:cc:1a:1f:c7:d4:
         d6:f3:20:2d:25:68:38:cb:ce:68:37:15:3a:50:9d:b2:b3:8d:
         75:23:d2:60:c4:14:0a:64:5c:98:0a:c2:ca:f9:38:b9:8f:28:
         cd:7f:1c:8d:58:de:90:6a:97:47:81:41:79:e3:3d:41:f9:b9:
         73:43:30:3e:94:61:50:bb:fd:6b:b4:7b:cc:ab:49:23:2c:36:
         e0:ce:f2:40:35:42:c4:7b:b4:24:3d:05:f6:ba:25:ad:9c:17:
         ba:66:64:21:1f:df:e2:63:03:6d:9a:5a:4c:52:ed:02:95:a3:
         23:c6:27:3f:17:10:99:eb:b3:27:a1:e5:8d:1d:03:80:ed:70:
         1e:8a:bd:38:73:74:fc:7e:20:e6:4b:05:94:a0:d3:cf:ff:a5:
         b4:5c:83:1b:ce:20:87:40:5b:90:3b:82:e5:66:d9:64:f7:5b:
         85:a2:2d:69:e0:dd:db:02:a5:ec:0e:93:63:10:71:30:55:9b:
         ab:e1:ee:8a:8e:68:00:68:4d:2e:dd:c6:4f:bb:38:05:46:59:
         18:92:0e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 08:56:41 2024 by rpki-client on console-fra.rpki-client.org