Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/9398F508619611EBA485B448C4F9AE02.roa
File:                     9398F508619611EBA485B448C4F9AE02.roa (raw, json)
Hash identifier:          aZpG2PubXQXBfPTPfuluIVdJmVtmOjsZn+iE18XtJvo=
Subject key identifier:   3B:CB:9B:7C:F1:41:9A:39:C1:A2:81:C3:9B:38:38:2F:3A:F8:49:A4
Certificate issuer:       /CN=A9190960/serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
Certificate serial:       0591
Authority key identifier: 2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/9398F508619611EBA485B448C4F9AE02.roa
Signing time:             Thu 02 Nov 2023 23:51:21 +0000
ROA not before:           Thu 02 Nov 2023 23:51:21 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     141187
IP address blocks:        103.155.244.0/24 maxlen: 24
                          103.155.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl
                          rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 00:39:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1425 (0x591)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190960/serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
        Validity
            Not Before: Nov  2 23:51:21 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=654435f9-8826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5b:e2:7b:a0:e5:62:85:b4:bb:eb:82:91:17:
                    28:b7:d3:96:9f:37:dd:c8:9f:f2:12:0a:b3:c4:fb:
                    d5:d7:26:63:1f:5c:20:a1:c1:73:2c:f8:63:56:c3:
                    0e:04:64:c7:e0:cb:2e:cf:7b:0e:6e:5a:b6:2e:fa:
                    b0:ab:dd:a7:fb:cd:5c:54:1f:b8:03:7c:47:cb:b6:
                    65:3d:5e:12:20:fe:e1:1d:43:17:c5:c0:97:95:9d:
                    cd:f3:2c:94:7c:69:84:94:5c:00:fb:cb:38:d2:3f:
                    01:9d:93:06:cb:c9:20:4e:fe:5c:cd:0d:29:31:1b:
                    2e:ef:ee:2a:5a:50:52:82:22:ea:cf:9f:1a:4f:fd:
                    79:57:c3:8d:f0:d5:3c:2b:b0:9e:e5:31:78:37:89:
                    80:ff:93:9a:13:57:60:f5:8b:5d:52:f4:3f:8a:3d:
                    e8:b6:95:da:1d:f2:25:67:7b:91:c1:a9:3b:16:56:
                    16:ff:81:36:8a:6c:6d:92:6f:90:9f:f0:5b:db:20:
                    69:cf:5e:58:55:d4:d3:fb:98:0c:3a:53:ca:34:86:
                    a6:b5:9e:8a:7b:81:5f:41:a5:50:85:eb:ec:b2:89:
                    5d:22:f0:c7:a4:c0:fd:24:5f:cd:13:df:6d:52:b4:
                    33:fa:7e:ff:d3:80:33:f3:7f:67:71:28:98:76:c8:
                    99:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:CB:9B:7C:F1:41:9A:39:C1:A2:81:C3:9B:38:38:2F:3A:F8:49:A4
            X509v3 Authority Key Identifier:
                keyid:2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/9398F508619611EBA485B448C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:6b:e4:7d:4e:1b:ab:78:63:fd:de:87:f7:58:42:99:50:c1:
         0f:8b:63:ec:de:7b:71:3c:42:11:84:1f:46:ac:66:66:53:c2:
         87:09:aa:fe:36:91:35:98:24:1b:44:dd:c9:02:2c:c4:96:d4:
         00:cf:61:49:4f:3b:91:5a:22:02:79:44:a4:02:d5:5b:78:4c:
         3e:2a:7e:a7:00:68:8e:b2:f5:a5:06:94:1e:8b:10:d7:39:48:
         54:db:d0:da:69:02:7e:d4:ea:1c:9f:26:a5:f3:71:57:e6:4c:
         f8:fb:74:ae:50:7e:ad:fd:0e:74:98:52:5b:59:8f:7f:76:df:
         e2:c2:72:d2:a8:29:bb:21:ff:2c:0b:21:d2:5a:38:e5:62:57:
         42:13:bc:8e:12:b3:10:9e:a3:74:68:fa:c2:2e:3e:30:89:d1:
         d2:47:de:25:2e:69:03:c6:63:73:d9:f4:b5:13:d3:c9:35:a9:
         91:f2:35:b0:4e:45:2e:c6:11:66:23:62:a9:9b:af:6a:fd:9f:
         dc:0e:49:ff:ad:39:ea:b5:15:c2:3e:1e:c2:90:7b:a5:45:27:
         cb:75:c6:cb:00:d7:a0:34:98:81:1b:8c:59:40:fa:82:0a:0e:
         84:77:d0:cb:d4:6c:c0:66:af:09:79:3b:b8:d4:87:62:f8:d6:
         3f:a2:b6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 01:41:45 2024 by rpki-client on console-fra.rpki-client.org