Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/D1E294C2A34411EC803D2585C4F9AE02.roa
File:                     D1E294C2A34411EC803D2585C4F9AE02.roa (raw, json)
Hash identifier:          yo9SEqLGcmex9C09wY83WYGn02bnEn/n+KvZMeB0gnU=
Subject key identifier:   9B:BF:66:32:6C:19:9B:40:84:25:AE:17:83:0A:AB:CE:75:79:78:77
Certificate issuer:       /CN=A9194040/serialNumber=A07CD3D1021A58C240A12137400B97B18B7998D0
Certificate serial:       020C
Authority key identifier: A0:7C:D3:D1:02:1A:58:C2:40:A1:21:37:40:0B:97:B1:8B:79:98:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHzT0QIaWMJAoSE3QAuXsYt5mNA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/D1E294C2A34411EC803D2585C4F9AE02.roa
Signing time:             Mon 15 May 2023 05:24:08 +0000
ROA not before:           Mon 15 May 2023 05:24:08 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     138915
IP address blocks:        103.151.138.0/23 maxlen: 23
                          103.151.138.0/24 maxlen: 24
                          103.151.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.crl
                          rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHzT0QIaWMJAoSE3QAuXsYt5mNA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 04:35:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194040/serialNumber=A07CD3D1021A58C240A12137400B97B18B7998D0
        Validity
            Not Before: May 15 05:24:08 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=6461c1f8-eca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:76:da:c7:d0:f4:f2:5c:f1:ab:42:ad:1d:08:
                    da:a9:7c:9a:eb:8b:e6:fe:75:77:08:6f:33:99:1d:
                    88:d5:78:32:4f:96:82:9a:86:e8:20:d6:2a:63:25:
                    c0:d6:1e:cb:b8:5d:17:03:d2:39:d7:86:4d:53:d6:
                    4a:23:92:6a:a7:c9:59:07:89:98:46:57:eb:c5:5a:
                    2c:09:79:29:9c:95:c4:0f:1b:a0:7c:7a:da:85:7e:
                    c6:90:f7:a5:d1:1d:7e:e7:ca:fc:94:65:a6:c2:60:
                    fb:21:d6:00:82:44:a7:8c:93:09:48:d1:d1:7a:47:
                    a0:21:4a:ac:03:3b:e3:69:ae:b7:94:80:9f:18:d0:
                    59:58:5a:9a:0d:f4:be:f2:7e:d8:1e:fe:31:5f:f8:
                    06:1c:4c:56:67:a1:75:69:5f:96:a1:c7:7d:5f:13:
                    45:1f:7f:d9:71:9b:f6:ab:14:bd:ee:0a:3e:06:ef:
                    01:d6:9f:b6:b1:c4:4c:f5:a3:7b:04:d2:c0:9c:ee:
                    55:d6:47:44:1f:08:cf:20:1d:20:33:15:52:d3:2c:
                    39:40:53:80:6b:4b:a4:8e:f8:c2:af:bc:fd:eb:10:
                    1f:fc:bc:7a:b4:e1:b4:5a:26:42:a9:01:0e:42:95:
                    50:10:c2:18:19:70:48:48:a9:04:d8:bb:35:39:41:
                    7d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BF:66:32:6C:19:9B:40:84:25:AE:17:83:0A:AB:CE:75:79:78:77
            X509v3 Authority Key Identifier:
                keyid:A0:7C:D3:D1:02:1A:58:C2:40:A1:21:37:40:0B:97:B1:8B:79:98:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHzT0QIaWMJAoSE3QAuXsYt5mNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/D1E294C2A34411EC803D2585C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:78:a5:76:0c:0f:db:ad:90:14:e0:62:fe:6e:ef:69:64:1f:
         d4:fd:96:80:f4:b0:0c:2f:14:76:b5:c2:95:f2:8e:82:33:82:
         0a:a9:78:d3:c2:be:12:d6:71:06:4c:84:c5:12:5c:2e:05:c1:
         08:55:16:ad:8d:26:28:55:3a:01:40:e8:3d:4b:13:d5:7c:19:
         e0:06:ab:08:92:36:60:fe:c3:33:37:f5:57:4a:6c:08:af:8f:
         8e:53:4f:ce:67:c7:83:77:cb:5f:cb:58:4a:01:c0:3d:80:47:
         8e:7b:3e:fd:20:20:58:b1:d5:20:02:03:36:c7:a4:8b:ed:1f:
         eb:53:62:03:25:02:29:c0:d4:c2:44:6b:ea:a2:19:f7:21:72:
         b8:04:27:a0:be:5b:00:ca:a6:8e:df:04:e1:51:f6:36:b6:55:
         22:73:55:c6:b6:8a:67:4c:be:36:8d:e4:a3:00:fd:e9:2c:71:
         c4:89:4a:da:ed:34:d3:b7:e1:41:de:63:8a:06:08:b2:0d:e9:
         f8:46:42:2b:54:95:da:7a:c8:b7:10:78:89:27:3d:8b:48:fb:
         a8:99:82:8a:2c:99:77:77:09:07:4a:ce:4f:c8:51:60:ff:fc:
         96:b3:bb:38:c8:b7:e5:aa:05:80:23:9e:36:90:70:05:d8:a3:
         9d:95:11:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:08:22 2024 by rpki-client on console-ams.rpki-client.org