Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/D3C1BBD687DF11EC9FAA242CC4F9AE02.roa
File:                     D3C1BBD687DF11EC9FAA242CC4F9AE02.roa (raw, json)
Hash identifier:          NvR9oTP8aVtW41+HpR5ZnWPqrkmQ4StnKs9ffYZOrLM=
Subject key identifier:   35:A7:1A:8E:3B:97:D2:C2:3B:F0:F6:24:A4:7D:7C:4D:A6:45:0A:FC
Certificate issuer:       /CN=A919290F/serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543
Certificate serial:       02F8
Authority key identifier: 98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/D3C1BBD687DF11EC9FAA242CC4F9AE02.roa
Signing time:             Fri 29 Mar 2024 03:05:15 +0000
ROA not before:           Fri 29 Mar 2024 03:05:15 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     149499
IP address blocks:        103.181.70.0/24 maxlen: 24
                          103.181.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl
                          rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 03:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 760 (0x2f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919290F/serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543
        Validity
            Not Before: Mar 29 03:05:15 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=66062feb-f0c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:3d:ad:8a:66:63:3b:ad:8d:21:31:5b:13:29:
                    46:ec:f2:0b:3c:8a:d2:3a:eb:0d:84:5a:a6:1a:0a:
                    07:84:42:01:c9:64:96:79:2e:3b:1a:c8:8e:54:80:
                    7f:af:72:06:6b:28:62:41:91:20:10:3a:8b:c9:db:
                    b3:5f:58:38:a8:29:7c:53:4c:eb:ee:9e:1f:b0:8b:
                    e4:18:30:ab:e3:f1:eb:69:29:f9:38:08:b8:07:a4:
                    5b:64:90:ef:47:08:8f:ed:d2:9c:3b:43:09:e6:08:
                    7b:3f:67:4d:e2:d2:77:14:b2:a8:10:c8:86:ff:97:
                    7b:56:5f:63:b6:93:22:8c:93:3a:4a:b2:41:9c:73:
                    f0:e9:23:41:f7:5a:3c:4c:b4:f2:59:5a:76:56:d9:
                    7e:eb:94:02:ea:05:20:cb:0e:ff:a2:ed:61:fd:3a:
                    94:12:93:ab:34:fa:4a:30:b0:d7:21:d8:28:46:8a:
                    0b:4c:e5:64:2f:6b:b8:1a:00:15:14:c7:0e:2c:3a:
                    66:1f:46:6a:66:f6:64:bb:7c:06:a2:a2:62:ff:c4:
                    16:9f:d3:b4:c0:71:cf:eb:97:f6:cd:9a:62:24:32:
                    09:1f:8c:7d:81:aa:d7:c3:5e:4b:71:c9:ce:b0:39:
                    00:a4:be:d5:c6:82:81:7c:f0:42:3a:18:15:4b:c9:
                    c9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A7:1A:8E:3B:97:D2:C2:3B:F0:F6:24:A4:7D:7C:4D:A6:45:0A:FC
            X509v3 Authority Key Identifier:
                keyid:98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/D3C1BBD687DF11EC9FAA242CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:0f:18:59:18:d7:ec:a0:f4:15:73:80:72:8f:60:7a:35:1a:
         67:1a:c3:f4:56:de:bd:55:f1:c5:c5:ef:f5:57:ac:81:f3:b7:
         22:47:b5:06:7f:f6:02:47:bd:b3:e8:66:18:dd:f3:af:36:00:
         54:ae:c4:b2:f7:0c:d6:f0:0d:0d:b2:f6:18:1c:87:f5:e9:23:
         dc:ea:24:04:ca:4e:2c:b9:b0:95:b5:9d:86:60:89:0a:d3:ab:
         3a:ee:1a:7a:2c:8d:4f:1b:53:43:ad:72:35:88:29:8d:4b:8f:
         31:2e:30:b0:3a:c5:7e:d3:c0:9d:c9:4c:f2:94:cb:94:82:4c:
         52:ce:d8:65:63:a0:c7:da:24:4d:08:4f:0c:9e:03:80:b0:41:
         f2:2b:bb:42:82:2d:9f:39:1a:5e:5e:b3:d0:74:2f:fd:32:d9:
         47:2f:b7:56:29:5e:b4:e0:cf:8a:cf:54:18:97:a0:cb:0b:a6:
         8a:ed:66:ff:26:63:b2:a2:96:9e:2a:b8:48:65:aa:bf:ab:31:
         7c:b7:2b:18:66:fb:cf:54:31:1b:79:97:61:aa:d9:d6:27:c6:
         68:00:df:9a:3a:cc:e9:a2:83:95:b7:38:d1:a1:d5:d7:75:a5:
         ff:03:22:6d:2f:cc:08:48:ad:d2:82:58:b1:8d:c3:08:8f:ab:
         83:4e:c1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 04:16:22 2024 by rpki-client on console-fra.rpki-client.org