Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/113D35904DD611EE8F798349C4F9AE02.roa
File:                     113D35904DD611EE8F798349C4F9AE02.roa (raw, json)
Hash identifier:          zZMjlW7mt8s9+wkRT1gs72SYLs9YVGqv3EHfklyaWZc=
Subject key identifier:   14:BF:9A:88:6F:35:5F:04:D2:29:BF:CE:88:3C:8E:1D:A9:6C:82:88
Certificate issuer:       /CN=A917EFA9/serialNumber=7B91A8B011D619C4271D45203A0E33D9185EF781
Certificate serial:       29
Authority key identifier: 7B:91:A8:B0:11:D6:19:C4:27:1D:45:20:3A:0E:33:D9:18:5E:F7:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5GosBHWGcQnHUUgOg4z2Rhe94E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/113D35904DD611EE8F798349C4F9AE02.roa
Signing time:             Thu 07 Sep 2023 23:28:21 +0000
ROA not before:           Thu 07 Sep 2023 23:28:21 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     135889
IP address blocks:        103.79.23.0/24 maxlen: 24
                          103.102.50.0/23 maxlen: 23
                          103.102.51.0/24 maxlen: 24
                          103.102.52.0/24 maxlen: 24
                          182.16.152.0/22 maxlen: 22
                          182.16.152.0/24 maxlen: 24
                          182.16.153.0/24 maxlen: 24
                          182.16.154.0/24 maxlen: 24
                          182.16.155.0/24 maxlen: 24
                          202.62.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.crl
                          rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5GosBHWGcQnHUUgOg4z2Rhe94E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 07:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EFA9/serialNumber=7B91A8B011D619C4271D45203A0E33D9185EF781
        Validity
            Not Before: Sep  7 23:28:21 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64fa5c95-742f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a1:1d:c3:58:d4:47:78:a1:0b:4a:35:1a:27:
                    09:e7:e8:f0:32:60:21:a5:9c:7a:46:d1:5d:47:ed:
                    38:4d:2f:e2:f3:48:11:56:4f:62:ad:d8:64:1c:26:
                    4d:7d:59:88:30:1e:17:f6:28:e6:89:11:fd:f6:a3:
                    a3:e9:e6:fd:ff:73:b3:0e:b7:9d:e1:be:f5:d1:68:
                    75:92:c7:0a:63:23:ea:a9:49:88:3c:64:d9:ed:23:
                    fd:c8:2e:81:44:aa:a4:eb:dc:17:75:26:d3:be:3f:
                    b1:30:0e:73:ee:a1:39:38:92:c5:63:3e:08:e5:9c:
                    5c:42:80:61:2b:06:ec:e5:4f:4e:c0:ca:1c:24:0d:
                    7b:60:7b:20:e9:ce:f0:53:07:9e:50:2c:e2:a3:d8:
                    17:e3:a6:ca:2e:aa:2a:50:a5:5c:fe:aa:e0:05:2c:
                    b6:b1:0c:94:03:68:96:b5:a8:66:bf:5c:07:d9:1c:
                    2d:c6:0a:28:bd:cd:77:85:a6:ea:fb:2d:39:46:a3:
                    ab:5f:26:75:63:b5:90:91:d6:14:43:e3:c3:95:f2:
                    b0:55:ef:9a:91:b0:0d:8a:a4:58:a1:bd:45:33:11:
                    65:3f:5c:5c:50:c8:29:90:cc:5f:f1:6e:93:ed:f4:
                    4b:4e:60:11:cd:be:ba:61:48:76:43:9a:9e:6b:1a:
                    40:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BF:9A:88:6F:35:5F:04:D2:29:BF:CE:88:3C:8E:1D:A9:6C:82:88
            X509v3 Authority Key Identifier:
                keyid:7B:91:A8:B0:11:D6:19:C4:27:1D:45:20:3A:0E:33:D9:18:5E:F7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5GosBHWGcQnHUUgOg4z2Rhe94E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/113D35904DD611EE8F798349C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.23.0/24
                  103.102.50.0-103.102.52.255
                  182.16.152.0/22
                  202.62.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:5e:03:59:4c:96:c2:da:fc:9b:3a:98:cb:d9:5c:1c:e4:c8:
         f7:8b:87:de:8e:e3:1c:79:05:b0:f4:07:6a:e1:3f:ed:2d:22:
         17:be:00:5f:2a:8d:e1:ce:be:1c:c3:7e:93:f5:c0:37:b7:9d:
         a8:20:7e:a4:1a:d7:42:a9:76:56:1c:4d:51:c9:51:fe:6e:ba:
         b2:f1:ff:2d:62:41:21:da:10:9f:64:c5:30:a9:ab:11:bc:3d:
         24:e2:f5:13:ec:c2:58:a3:29:42:c7:a7:ca:05:e7:7e:6d:70:
         f7:3e:2d:29:97:d1:01:56:3a:6f:64:a6:85:d7:31:de:83:43:
         6e:2c:ad:27:c3:a1:39:cb:97:f2:8c:ee:b6:9c:e4:cc:79:e9:
         cc:8b:49:25:81:55:df:c5:8e:cf:9b:5c:db:7a:33:7d:69:70:
         cb:4a:db:5e:fd:ad:61:1e:8d:64:1a:9e:c8:b5:6a:1a:e7:48:
         8a:b5:a3:57:3e:3f:71:bd:6a:4c:ea:df:4b:ce:da:b1:20:d8:
         b6:10:2e:e3:74:dd:9b:13:6c:ba:1f:0f:7f:a9:e9:d8:c0:63:
         45:c7:4c:e4:51:0a:c1:5b:0c:7f:60:4c:fd:3b:46:97:08:9a:
         61:9e:5c:0a:2e:a1:b2:fe:f8:9b:df:a6:c1:c9:84:70:06:6e:
         3e:d3:8e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 08:56:41 2024 by rpki-client on console-fra.rpki-client.org