Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/0BEA53F841AE11EAADED2C2CC4F9AE02.roa
File:                     0BEA53F841AE11EAADED2C2CC4F9AE02.roa (raw, json)
Hash identifier:          ADv71CV5g+ahow5B40nSTbJqpien9dZ4YGn7ERryy60=
Subject key identifier:   28:86:CF:FE:50:BD:74:DF:30:E2:D2:27:24:A5:34:FD:95:A4:61:EC
Certificate issuer:       /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
Certificate serial:       3362
Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/0BEA53F841AE11EAADED2C2CC4F9AE02.roa
Signing time:             Mon 02 Oct 2023 15:31:04 +0000
ROA not before:           Mon 02 Oct 2023 15:31:03 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     17819
IP address blocks:        103.3.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl
                          rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 15:25:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13154 (0x3362)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
        Validity
            Not Before: Oct  2 15:31:03 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=651ae237-7193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c0:76:7a:bb:7f:90:aa:45:c3:8f:9f:c5:cd:
                    5b:11:dc:52:0e:4b:11:ff:40:7c:dc:3f:2f:66:ff:
                    fd:f5:9a:41:0d:2b:ec:73:d4:1e:97:ea:06:7d:1a:
                    f8:34:9c:3c:e8:d0:14:5e:74:4b:0d:89:16:69:8c:
                    aa:49:b3:06:e4:c3:10:da:69:f5:b1:1a:6b:0b:8c:
                    c5:2e:26:87:d8:cd:e7:c5:d9:ac:53:b6:8f:2e:82:
                    b7:b2:9b:65:0f:00:90:88:93:02:69:86:27:3f:eb:
                    6f:c0:85:43:47:a3:0d:34:7a:05:15:22:36:b4:97:
                    4b:0c:a3:ee:17:39:30:96:55:41:e0:a7:66:dc:17:
                    dc:a7:6e:9f:f0:f2:1c:f0:15:f1:2b:3b:b7:59:9c:
                    c4:a9:80:ca:cd:0f:09:2a:8d:a8:7d:e4:f8:cf:5a:
                    8e:3c:dc:0a:0a:3c:93:62:85:ff:b9:bb:bb:a5:8b:
                    ba:56:73:15:2c:1e:6d:74:42:f4:4d:29:fb:68:5b:
                    90:e9:47:e6:80:9d:fc:56:e8:b7:f9:1b:c2:a5:90:
                    1e:67:79:d8:b6:70:45:5d:32:10:90:8e:56:98:47:
                    e2:fa:6f:9c:ef:8b:fc:83:66:84:22:a6:28:9c:80:
                    e4:5f:be:5d:da:fb:81:aa:6f:34:fa:d8:77:35:fc:
                    7b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:86:CF:FE:50:BD:74:DF:30:E2:D2:27:24:A5:34:FD:95:A4:61:EC
            X509v3 Authority Key Identifier:
                keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/0BEA53F841AE11EAADED2C2CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.3.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:a7:8f:69:0d:34:4b:e6:3c:a1:09:3c:30:e3:0d:c7:5b:41:
         8f:43:9b:ca:1b:12:4c:37:da:fb:6a:f5:83:6a:2b:55:0d:af:
         58:39:0b:2a:5e:ca:e1:83:7d:cf:1b:67:9a:14:1a:b7:94:27:
         c4:36:f1:ef:5d:3b:57:eb:7c:a1:87:d9:aa:c3:02:4e:63:77:
         d9:d8:3b:8d:86:6e:24:52:2a:2d:58:cd:4f:3a:a7:93:31:65:
         50:85:93:d4:ea:a7:21:41:a7:85:9c:be:d5:55:e6:0c:06:4f:
         4e:16:05:4b:22:1e:3b:08:d4:2b:ab:6e:24:b6:14:ee:64:39:
         da:4a:d4:d6:5c:20:3c:81:cf:cf:a1:51:fa:ed:6f:de:d9:e5:
         55:c5:28:a2:73:e0:c7:f8:ef:b1:a8:18:c4:15:66:40:82:89:
         5e:4e:3f:b6:b9:71:3a:f6:ab:c1:d5:47:68:88:80:e3:aa:f6:
         f9:7d:9c:76:a6:3e:24:d2:09:15:85:be:1b:dd:78:0a:61:1c:
         f1:23:42:9c:a5:ae:71:d1:0b:b6:89:5c:50:60:6a:9d:97:dd:
         86:6f:17:96:2f:14:58:e3:ac:40:6f:25:2c:67:ce:d6:a1:68:
         e5:5f:91:01:0f:b2:2e:3f:30:15:e7:48:16:bb:23:6a:b9:e5:
         fa:c7:50:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 16:11:15 2024 by rpki-client on console-fra.rpki-client.org