Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194437/9EE26F901EBB11E98672BB64C4F9AE02/7B1F34FE1EBF11E98AA24870C4F9AE02.roa
File:                     7B1F34FE1EBF11E98AA24870C4F9AE02.roa (raw, json)
Hash identifier:          RAjPaN25uQB9B7uH9YzPEJVbt+LzoDIE020j5YWyze0=
Subject key identifier:   ED:41:D2:62:35:3E:4F:67:AF:E0:B2:00:C6:BE:BB:5B:DE:E8:77:80
Certificate issuer:       /CN=A9194437/serialNumber=0EDFF4FE44298576F6EF6D37671268026886818A
Certificate serial:       0F83
Authority key identifier: 0E:DF:F4:FE:44:29:85:76:F6:EF:6D:37:67:12:68:02:68:86:81:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dt_0_kQphXb27203ZxJoAmiGgYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194437/9EE26F901EBB11E98672BB64C4F9AE02/7B1F34FE1EBF11E98AA24870C4F9AE02.roa
Signing time:             Sat 22 Jul 2023 17:54:50 +0000
ROA not before:           Sat 22 Jul 2023 17:54:50 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        103.238.156.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194437/9EE26F901EBB11E98672BB64C4F9AE02/Dt_0_kQphXb27203ZxJoAmiGgYo.crl
                          rsync://rpki.apnic.net/member_repository/A9194437/9EE26F901EBB11E98672BB64C4F9AE02/Dt_0_kQphXb27203ZxJoAmiGgYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dt_0_kQphXb27203ZxJoAmiGgYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 18:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3971 (0xf83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194437/serialNumber=0EDFF4FE44298576F6EF6D37671268026886818A
        Validity
            Not Before: Jul 22 17:54:50 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64bc17e9-d94a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ee:29:0d:94:fe:db:95:7c:e2:dd:8c:f9:6c:
                    b8:17:36:6c:26:3d:42:3e:27:17:a0:4b:37:b5:0b:
                    1b:3b:57:9b:36:4e:d0:cc:32:c0:83:f9:92:f3:25:
                    4f:e6:fa:e3:99:97:a3:1e:f2:ad:cf:36:29:c8:0e:
                    28:63:b7:ba:4e:0b:a2:ab:8f:18:9c:7b:31:e0:24:
                    76:9c:02:92:1c:bf:90:4f:8d:ce:65:1c:53:3a:17:
                    26:72:41:1b:ef:71:28:69:65:0d:6a:f6:f1:57:37:
                    ef:ea:6b:2c:43:0c:8c:7a:8f:4f:0a:5a:7d:3d:af:
                    3e:a4:be:09:c2:44:fe:2a:62:60:c8:a5:4a:31:a7:
                    4d:fa:c1:d0:63:e8:bd:e7:5b:1a:ec:8f:6a:25:21:
                    5a:61:9a:b7:d4:e0:e1:21:3c:01:7f:f1:3e:1f:1c:
                    24:70:7e:db:ba:aa:48:be:72:1a:5b:c2:18:d9:f6:
                    45:39:54:20:30:7d:aa:b5:29:d5:34:c3:6c:b5:bb:
                    d2:ef:d2:b4:32:39:54:84:75:76:54:84:74:12:58:
                    05:6d:4f:35:e3:09:60:61:ec:76:f7:3c:d8:fe:a1:
                    c8:1a:6d:e2:96:34:5f:0d:67:c1:1a:04:a0:3f:85:
                    e7:e8:ac:32:02:4a:b2:65:fb:49:26:5f:8a:74:26:
                    54:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:41:D2:62:35:3E:4F:67:AF:E0:B2:00:C6:BE:BB:5B:DE:E8:77:80
            X509v3 Authority Key Identifier:
                keyid:0E:DF:F4:FE:44:29:85:76:F6:EF:6D:37:67:12:68:02:68:86:81:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194437/9EE26F901EBB11E98672BB64C4F9AE02/Dt_0_kQphXb27203ZxJoAmiGgYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dt_0_kQphXb27203ZxJoAmiGgYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194437/9EE26F901EBB11E98672BB64C4F9AE02/7B1F34FE1EBF11E98AA24870C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:1c:2e:41:68:ef:7a:b5:c9:c5:ab:14:09:75:03:85:ce:3c:
         a5:db:7f:e6:58:15:b8:66:c1:c7:9d:f0:af:95:9a:d5:e5:7c:
         e7:42:d7:48:b5:34:ce:1a:1f:8f:74:1b:d2:f0:ed:ae:ce:02:
         e6:2d:08:c7:0d:ee:fa:2d:e5:b6:e2:03:34:7c:ce:a0:5f:4a:
         c1:51:1a:f7:e3:a9:10:9c:0e:f6:7a:53:be:b6:a2:ab:d8:e0:
         67:69:42:1f:6f:72:d4:65:33:e5:3e:91:57:7c:7d:a6:1b:7f:
         53:0b:11:0e:1b:be:4f:df:3d:42:46:ca:d2:bb:89:f7:de:ae:
         ae:e9:44:31:98:7b:9f:77:1a:e8:c1:f8:5a:01:02:31:5e:01:
         93:c7:66:22:5a:55:10:e0:28:f6:cc:ec:5d:d1:81:ff:95:b1:
         84:8d:c1:10:b4:ae:44:c4:d0:f2:c9:78:3c:26:5d:01:28:ed:
         2c:e1:58:5e:11:86:79:b0:e9:fd:72:d1:6b:49:aa:e8:03:09:
         45:51:34:ea:3c:c0:1b:22:46:1a:cb:f1:f4:3f:7e:60:29:93:
         47:96:87:7e:b8:01:1c:81:50:86:0a:fe:44:35:7f:2e:fb:33:
         fd:d8:d6:8e:47:91:40:e1:c2:a9:38:24:58:50:c9:8a:8e:a1:
         9d:31:01:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 20:10:44 2024 by rpki-client on console-fra.rpki-client.org