Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/9F14D15E70DB11ECACCABD21C4F9AE02.roa
File:                     9F14D15E70DB11ECACCABD21C4F9AE02.roa (raw, json)
Hash identifier:          zMAVaAwkc1/EVMSIYdfQTQ+1t6ZCtLmjf5ap7S+isIc=
Subject key identifier:   2F:58:F2:70:AB:D5:44:2A:FE:DD:7B:79:9A:33:73:80:F5:D0:8A:AB
Certificate issuer:       /CN=A9183DB7/serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
Certificate serial:       0CA2
Authority key identifier: E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/9F14D15E70DB11ECACCABD21C4F9AE02.roa
Signing time:             Sat 02 Sep 2023 18:26:09 +0000
ROA not before:           Sat 02 Sep 2023 18:26:09 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     396982
IP address blocks:        103.141.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl
                          rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 18:53:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3234 (0xca2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183DB7/serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
        Validity
            Not Before: Sep  2 18:26:09 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=64f37e41-f6a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:85:25:68:ed:2f:8a:db:ec:3d:1f:ac:02:4b:
                    2b:10:b2:ca:98:61:1c:1b:3b:ca:7b:31:c1:47:2d:
                    01:9e:52:a9:f2:51:df:74:90:33:12:b6:51:b5:20:
                    69:ed:97:4f:bc:94:55:28:8a:d7:10:0a:28:51:8f:
                    02:3a:46:a6:0e:fc:76:ba:b5:28:c5:8f:23:49:8f:
                    35:e9:02:ce:ee:9a:91:3d:08:ee:21:ba:34:c1:b0:
                    03:f1:28:48:a0:59:32:6f:f4:33:52:7d:29:23:4d:
                    75:a0:97:67:35:4d:2d:99:ec:2d:b4:ef:d3:09:bd:
                    5c:42:f2:4e:d1:a3:d7:20:d7:cf:6e:1f:3a:90:5f:
                    ee:4e:77:ad:59:a2:82:ed:d8:f1:85:12:8f:1b:9a:
                    92:46:e8:4b:a2:f4:f5:87:65:be:a7:29:ba:f3:0e:
                    aa:f4:8d:e7:72:ea:4c:eb:d8:68:0e:66:f4:f7:d9:
                    69:96:de:36:69:23:f8:b9:f7:15:86:c9:9e:6b:23:
                    97:08:6e:73:7b:94:c6:14:56:13:37:01:fe:46:d4:
                    58:66:cb:ed:b5:e7:72:7a:44:df:c5:02:4a:35:64:
                    b3:43:d0:a6:ca:9e:74:99:ce:1a:1a:ba:a9:8a:72:
                    d2:a5:3c:1d:ab:33:60:9f:d5:f6:1b:64:5c:83:a0:
                    74:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:58:F2:70:AB:D5:44:2A:FE:DD:7B:79:9A:33:73:80:F5:D0:8A:AB
            X509v3 Authority Key Identifier:
                keyid:E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/9F14D15E70DB11ECACCABD21C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:42:83:18:38:00:46:35:6d:c0:4c:cf:19:71:f2:6e:37:37:
         9d:a3:d4:ad:91:11:38:70:fd:18:6f:8c:18:80:28:bc:3e:17:
         86:12:98:f7:4a:4c:82:65:89:f0:30:ba:76:56:bd:a5:46:fe:
         04:7d:7a:2a:08:4f:f5:f0:6c:3f:6a:28:02:d9:46:2f:9e:82:
         92:a6:b2:92:bf:fb:49:d2:cb:e1:7d:ab:2f:49:59:49:9e:d2:
         70:6a:a9:5d:8b:4e:94:ca:16:cf:17:17:56:61:80:d5:ca:d7:
         e5:23:c4:0f:66:d1:29:c2:e6:79:ad:a9:06:b3:b1:a9:0b:b6:
         5d:a3:00:46:d5:aa:fa:04:de:9d:21:05:f5:88:d9:5e:3d:8f:
         4d:de:ac:51:a2:85:b5:c7:d1:23:af:84:f5:fb:bd:e2:e9:b1:
         46:b7:ec:1d:f6:0b:52:66:30:04:db:27:b7:c3:9e:00:6a:1a:
         96:dc:ce:a4:2b:4e:6e:f0:79:e7:55:b7:51:dc:b9:2e:2e:f1:
         22:23:a8:96:67:93:49:7a:cc:cd:d0:71:21:c2:f0:64:f4:94:
         37:51:87:01:d2:0a:ba:41:00:b8:3c:95:82:04:30:e6:68:fc:
         37:18:33:de:3e:c7:9c:21:6a:a3:57:4d:f7:82:5a:d9:79:8b:
         f1:82:f4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 20:37:11 2024 by rpki-client on console-fra.rpki-client.org