Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/1ED5B13E30C111ECBB5A4116C4F9AE02.roa
File:                     1ED5B13E30C111ECBB5A4116C4F9AE02.roa (raw, json)
Hash identifier:          VECQZxdYNeax7w8PdOp72wQ1jo/3BdHCyClKAC1SUgo=
Subject key identifier:   5B:62:11:4D:06:6C:25:6E:98:10:58:75:F7:7F:F1:2F:8F:AA:D6:44
Certificate issuer:       /CN=A919608D/serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9
Certificate serial:       0FE8
Authority key identifier: D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/1ED5B13E30C111ECBB5A4116C4F9AE02.roa
Signing time:             Wed 10 Apr 2024 18:26:10 +0000
ROA not before:           Wed 10 Apr 2024 18:26:10 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     137491
IP address blocks:        103.134.38.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl
                          rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 18:26:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4072 (0xfe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919608D/serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9
        Validity
            Not Before: Apr 10 18:26:10 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=6616d9c2-6f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:a3:73:7d:f9:3a:c4:0d:9d:e2:16:aa:66:6c:
                    76:88:31:4c:cc:07:b9:60:57:9c:44:fd:05:42:e8:
                    d9:bd:88:d0:69:9b:0e:f0:1d:70:1a:60:e2:8b:dd:
                    e4:b1:e5:0a:3f:0e:eb:95:9a:bd:58:e0:62:91:eb:
                    d9:d8:ea:bf:f8:ee:9f:33:64:9f:04:1e:99:70:8e:
                    34:a2:82:1a:e8:f4:19:6f:6e:db:79:34:00:85:1d:
                    e6:e6:13:a9:c6:67:dd:87:1f:3a:32:13:9f:5e:ed:
                    80:7a:30:c2:76:d3:f5:b9:dd:0e:3e:31:86:7b:75:
                    7e:51:42:35:7d:35:ea:4e:d9:ce:ed:f8:bb:00:3d:
                    05:d1:d4:5f:08:e2:c0:0f:f8:c4:dc:0d:40:1a:b7:
                    55:c4:98:aa:cc:17:56:10:25:0c:20:e2:48:3f:7b:
                    1e:00:6c:19:32:da:3d:14:0d:fb:a7:1c:0d:1d:1b:
                    da:55:59:dd:e0:04:df:29:75:85:6f:80:ee:d7:20:
                    68:ae:dc:18:55:cb:98:d9:49:ca:08:0c:a9:28:23:
                    ab:9d:e0:07:2c:2e:88:c7:05:cd:a2:3d:bf:52:3d:
                    c5:5b:8e:f0:8c:5b:6e:14:8c:c3:26:ae:be:9e:de:
                    0e:94:36:f5:e1:4e:56:c3:9b:8c:1a:16:71:96:65:
                    4f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:62:11:4D:06:6C:25:6E:98:10:58:75:F7:7F:F1:2F:8F:AA:D6:44
            X509v3 Authority Key Identifier:
                keyid:D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/1ED5B13E30C111ECBB5A4116C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:d1:26:25:1d:e3:ae:4f:dc:aa:34:46:5f:19:c6:ea:b6:57:
         1d:02:64:76:42:94:86:86:a2:a5:7d:37:19:e3:c2:cc:1f:91:
         29:8a:70:ad:f2:06:db:a3:2c:5e:2c:ef:8f:ce:6f:bf:e2:b3:
         50:01:6f:18:5f:c5:ea:7e:fb:06:25:2e:dd:00:31:ad:83:15:
         7e:cc:9c:6c:e9:f7:9a:86:85:15:c1:d0:aa:58:ff:19:f3:d9:
         a3:21:c2:b4:4f:56:8e:b2:d3:1b:20:1d:d3:b3:c2:ef:81:c5:
         7a:34:56:f4:12:06:90:e4:24:d1:f8:59:61:7f:5f:a0:b9:0f:
         3f:31:00:4c:a0:b6:c7:75:f6:4b:92:0c:cb:5c:69:dd:78:ae:
         0c:7e:79:06:35:55:a3:31:92:97:22:2f:0b:8d:f4:34:87:0d:
         d3:96:1b:24:2c:f7:dc:48:ef:b7:ea:b5:22:a9:f6:bb:13:ec:
         45:9e:cd:a2:05:e8:d5:71:83:ad:de:0e:64:7f:f5:f0:18:a2:
         d4:0d:a3:4b:1e:72:48:70:a6:8f:62:21:86:e3:21:52:93:8c:
         80:83:42:51:8f:ac:e2:27:12:38:99:3f:22:78:83:1b:28:3c:
         d0:b9:61:bc:5b:81:05:1b:1d:b1:f8:f3:14:89:4c:24:95:c5:
         45:9c:8e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 19:47:51 2024 by rpki-client on console-fra.rpki-client.org