Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/6A5EC93A70DE11EC8B944928C4F9AE02.roa
File:                     6A5EC93A70DE11EC8B944928C4F9AE02.roa (raw, json)
Hash identifier:          JlFQLvioPtKDHzgt/ccs15goXEYCvMHyBF9hWkPtf5Y=
Subject key identifier:   AF:BA:71:ED:2A:D1:73:BB:95:F8:D4:90:BE:A0:D3:8F:40:12:C5:1C
Certificate issuer:       /CN=A9183DB7/serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
Certificate serial:       0CA3
Authority key identifier: E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/6A5EC93A70DE11EC8B944928C4F9AE02.roa
Signing time:             Sat 02 Sep 2023 18:26:10 +0000
ROA not before:           Sat 02 Sep 2023 18:26:10 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     398542
IP address blocks:        103.141.214.0/24 maxlen: 24
                          103.141.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl
                          rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 18:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3235 (0xca3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183DB7/serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
        Validity
            Not Before: Sep  2 18:26:10 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=64f37e42-b662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ae:f3:cd:19:f7:b1:1d:d8:ea:96:7e:6d:c7:
                    30:d9:9f:94:19:1c:18:2e:9a:2f:8f:ff:13:42:03:
                    bf:5b:6c:f1:d3:06:2b:0c:6f:b9:c6:dc:67:83:79:
                    4a:e8:56:8a:95:33:b6:82:57:02:5c:13:17:48:2c:
                    9e:ba:09:d2:0e:36:b8:38:83:f7:00:f7:52:fd:9f:
                    a8:29:1c:c6:ef:78:88:e6:49:96:a7:21:c9:3d:1b:
                    4a:cf:7b:a4:58:f4:93:6d:92:00:0c:aa:24:4e:60:
                    1c:e7:46:83:a2:86:75:b1:69:51:4c:95:a0:e0:d1:
                    14:8f:03:57:9f:19:37:d4:f2:cf:49:2a:26:53:82:
                    c7:98:be:ac:37:1d:bd:58:c4:5a:ef:a7:d0:89:73:
                    cf:c3:46:6f:dc:3f:ff:cc:05:a4:68:12:fa:cf:d8:
                    06:ca:69:00:21:b4:dd:12:56:69:0c:ff:05:a7:93:
                    3f:50:9b:93:5a:cd:6a:86:3b:d6:68:ba:fd:af:f5:
                    a2:75:5e:af:32:82:bc:fe:23:6a:45:c4:9e:57:64:
                    16:3a:be:64:ba:a2:b8:c0:b9:b8:47:a4:8f:43:9c:
                    7c:69:c5:de:83:e9:8a:d3:8c:c3:55:5f:94:e2:c0:
                    3a:08:c5:87:90:d1:2e:49:74:76:b5:d0:cc:8f:1f:
                    e9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BA:71:ED:2A:D1:73:BB:95:F8:D4:90:BE:A0:D3:8F:40:12:C5:1C
            X509v3 Authority Key Identifier:
                keyid:E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/6A5EC93A70DE11EC8B944928C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:8d:44:a8:1d:3f:ed:02:ed:8e:a9:50:c8:c5:21:d5:ff:8a:
         d7:c7:5d:11:d7:af:6d:cb:46:81:61:32:2c:d8:99:33:32:0e:
         d2:37:15:82:62:ed:1f:dd:1a:62:3c:d4:fb:01:bb:c3:19:66:
         1d:83:85:e7:dc:6d:ff:39:95:58:01:f4:98:62:31:0a:e2:49:
         07:c2:bc:a9:66:23:a3:bb:7b:cb:1a:a8:c0:47:19:fe:01:e1:
         58:5d:c5:d5:75:56:dd:52:3b:f7:85:6b:4b:f6:07:f8:b9:f8:
         2a:f6:48:ec:2d:3f:09:60:06:bf:f6:ae:a8:74:4d:92:4f:b5:
         cf:81:3e:3d:ae:ba:02:08:23:2c:77:3b:b8:b3:4c:15:a2:b4:
         6f:9d:ba:a6:53:44:fd:a6:d4:5f:cf:36:6b:27:54:78:22:46:
         c1:2c:4e:30:68:1e:3f:a1:6a:10:cc:4e:a3:ad:67:e7:65:b5:
         6b:8c:ad:99:31:13:75:8e:0a:39:91:62:e5:48:d7:c2:5d:3c:
         b0:1f:3f:fc:c6:4d:ba:70:19:0e:2d:24:9e:f2:39:96:0d:fc:
         fc:b9:f5:a5:6c:92:62:05:4a:6f:63:ac:be:68:e5:d3:b9:3e:
         66:e8:7c:64:ac:e8:73:60:f8:4e:e1:97:dc:43:59:47:5c:45:
         30:9d:9b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 19:47:51 2024 by rpki-client on console-fra.rpki-client.org