Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/0FC8B3A8778211EE997FD552C4F9AE02.roa
File:                     0FC8B3A8778211EE997FD552C4F9AE02.roa (raw, json)
Hash identifier:          IMtfBAvniIHcb6Wpi9jwXj5jPy7W4IfT+sOIL7hpIOY=
Subject key identifier:   78:58:22:AC:DE:FB:B6:65:82:4F:9A:19:34:68:CE:9A:5B:5E:3C:0B
Certificate issuer:       /CN=A9193235/serialNumber=5A56F89F50812A810FF2DE845470F1092724A1AB
Certificate serial:       03
Authority key identifier: 5A:56:F8:9F:50:81:2A:81:0F:F2:DE:84:54:70:F1:09:27:24:A1:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/0FC8B3A8778211EE997FD552C4F9AE02.roa
Signing time:             Tue 31 Oct 2023 00:11:39 +0000
ROA not before:           Tue 31 Oct 2023 00:11:39 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     140077
IP address blocks:        103.151.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.crl
                          rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Jun 2024 01:08:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193235/serialNumber=5A56F89F50812A810FF2DE845470F1092724A1AB
        Validity
            Not Before: Oct 31 00:11:39 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=6540463b-36ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1a:27:15:ce:aa:08:cf:bb:d0:32:3d:a2:56:
                    6c:e3:e0:e5:37:55:8f:29:a7:51:da:77:a2:35:5f:
                    85:e9:1a:ad:89:4f:0b:bf:32:3f:05:b7:34:c7:a1:
                    7d:ef:5c:d5:94:61:d9:cc:29:1a:78:e4:24:48:15:
                    9b:1c:98:d2:3e:43:20:df:c2:49:66:58:2a:fa:db:
                    95:e6:92:ce:53:35:73:6d:9d:69:47:4d:5f:3e:92:
                    53:e1:2b:a7:ff:39:a5:07:3a:66:84:9a:b9:a2:91:
                    ca:f8:34:95:9c:f8:eb:6a:90:05:13:d9:7d:3d:4e:
                    98:15:fc:e1:09:f7:53:4d:42:ce:1f:cc:97:df:7f:
                    34:f1:f4:80:ae:50:f5:9e:76:6f:fe:87:5d:f6:02:
                    a5:37:7e:c8:b0:8d:8d:dd:15:0c:3d:ab:ea:82:a7:
                    b6:01:e4:cd:c9:c8:94:cd:cb:cd:1d:1f:f7:14:6f:
                    df:a4:d2:cc:1d:e6:ee:10:11:92:94:ad:e8:e7:c4:
                    ee:94:3a:6d:37:bc:5e:6f:3d:36:a2:ce:95:dd:2b:
                    1b:62:a4:77:f4:1e:a7:5e:1f:1a:fe:6b:89:a2:fe:
                    7d:8c:8b:2b:34:6e:4f:0e:8a:4f:1f:6e:0b:4c:65:
                    c3:4e:b2:45:a9:c9:f1:04:0c:5d:80:44:9e:bc:af:
                    43:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:58:22:AC:DE:FB:B6:65:82:4F:9A:19:34:68:CE:9A:5B:5E:3C:0B
            X509v3 Authority Key Identifier:
                keyid:5A:56:F8:9F:50:81:2A:81:0F:F2:DE:84:54:70:F1:09:27:24:A1:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/0FC8B3A8778211EE997FD552C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:0b:9c:72:ac:6c:d0:cc:57:91:ab:69:5d:af:1c:88:10:ec:
         1f:23:e7:9b:5d:8a:df:82:2d:1f:d3:83:c5:a8:86:01:9d:b2:
         b2:a8:d0:c8:48:10:49:54:b8:eb:46:f5:7a:c6:11:77:b5:7c:
         59:ab:4c:50:51:a7:db:79:22:38:95:0b:92:12:d0:32:90:68:
         61:33:5e:74:1d:89:ea:6f:3d:4a:91:7b:51:d9:3e:68:fa:e2:
         10:d7:6e:5e:c9:9a:91:4d:fe:ee:9a:d8:63:a5:9d:9e:b1:ed:
         06:63:bc:87:38:2e:fb:57:4a:8a:f7:74:0b:1b:20:f0:6d:47:
         c6:0b:75:32:b6:44:9f:0c:10:f9:67:2b:3a:29:c2:2c:77:9a:
         c6:dc:fb:ab:a4:31:26:81:1e:56:56:96:07:b0:0a:8e:fc:90:
         b6:f5:f3:de:2e:70:17:80:a0:e7:58:7c:04:fa:4b:e3:db:f6:
         19:6d:82:d8:6c:a2:ad:b4:ab:4f:9d:64:d1:20:cb:cd:b5:e7:
         90:03:a4:d9:1d:07:54:cd:9d:2c:14:a7:bb:39:62:a1:87:46:
         44:84:56:f0:6e:13:0b:22:97:4d:f7:2d:21:b4:65:12:ed:8b:
         68:15:17:80:39:bb:ed:11:93:6a:31:84:17:0e:15:c7:1f:d7:
         f9:5b:2e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:47 2024 by rpki-client on console-ams.rpki-client.org