Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/6001781C1A6411EE8DCBF20BC4F9AE02.roa
File:                     6001781C1A6411EE8DCBF20BC4F9AE02.roa (raw, json)
Hash identifier:          jVCqRx69iTNEzM+5hsZCrWTKfkpXDLC4bC/S0QuEirA=
Subject key identifier:   0C:6E:B8:A2:77:0F:79:53:08:09:6F:08:F0:41:7B:13:AE:71:79:C8
Certificate issuer:       /CN=A9198F69/serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91
Certificate serial:       37
Authority key identifier: 6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/6001781C1A6411EE8DCBF20BC4F9AE02.roa
Signing time:             Wed 11 Oct 2023 14:04:25 +0000
ROA not before:           Wed 11 Oct 2023 14:04:25 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     136969
IP address blocks:        103.186.76.0/24 maxlen: 24
                          103.186.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl
                          rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 07:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198F69/serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91
        Validity
            Not Before: Oct 11 14:04:25 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6526ab69-8ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:94:9a:7c:f7:a0:63:cc:21:21:9a:18:47:63:
                    1d:34:5f:27:84:96:fa:c8:dc:93:a2:2a:a6:df:64:
                    52:14:2c:b6:15:2b:9d:3e:75:1c:5e:44:f3:1d:0e:
                    89:96:c1:d1:a2:25:42:a9:84:c6:cb:52:cf:31:43:
                    85:29:2f:d9:68:93:65:1f:14:17:8d:0a:8d:dc:05:
                    ab:ee:18:e1:ef:6d:b9:fa:c6:d4:51:f2:cc:dd:ec:
                    67:ca:2b:f0:78:27:40:07:db:e0:63:2c:48:70:b7:
                    1e:fc:1c:bd:34:eb:d2:06:33:b8:73:b8:d8:64:40:
                    9f:15:51:28:4c:b8:8b:4b:2e:94:c6:90:c4:4f:37:
                    6b:5c:de:6c:b8:85:56:68:a2:bf:e7:2f:0b:bc:b9:
                    72:53:63:a7:69:e8:15:79:0b:c5:87:46:6c:3e:7a:
                    3b:6f:0c:36:c4:75:94:a3:21:71:f8:e2:f6:52:49:
                    fc:0b:f6:f2:a3:e2:ad:5a:15:63:9f:c8:71:c3:5d:
                    a5:fc:53:49:2c:dd:81:bb:03:73:21:58:6f:75:c5:
                    c3:b4:16:98:5d:ea:1f:b5:53:ac:4b:e9:48:f6:5f:
                    eb:8e:86:3c:16:23:c9:e2:37:94:61:63:0b:e8:97:
                    8b:88:c3:7e:97:73:5c:35:34:d7:da:e4:e7:aa:2e:
                    9f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:6E:B8:A2:77:0F:79:53:08:09:6F:08:F0:41:7B:13:AE:71:79:C8
            X509v3 Authority Key Identifier:
                keyid:6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/6001781C1A6411EE8DCBF20BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:4e:9f:93:81:f2:1a:80:36:f1:0b:d4:0f:75:11:ee:e5:c4:
         6b:02:c6:84:aa:96:11:46:fa:0c:fe:13:5f:62:12:d0:ef:39:
         60:0f:4b:6d:9b:9a:04:7f:08:bc:6c:5e:53:ff:60:5e:a9:86:
         8f:bb:c2:a8:84:35:fa:0c:80:c1:7d:c3:96:8b:63:92:2e:68:
         a5:c2:b3:cb:06:41:0e:7b:7c:4d:e7:3c:d2:47:26:03:9e:a7:
         0f:b0:b6:0c:33:22:4e:d7:a2:eb:26:bc:87:b8:7e:5e:74:8c:
         65:6a:ab:d8:57:90:38:00:50:75:0a:6b:7f:27:cb:96:50:fc:
         24:4e:47:03:54:bb:b2:48:54:0d:cb:28:13:a7:03:87:2b:a0:
         fb:01:f5:a8:ed:42:00:2e:3f:85:cc:b7:56:da:ed:3b:6f:aa:
         fa:63:77:8f:b0:f9:f1:7d:c5:9f:42:1e:70:55:01:39:34:2d:
         90:d4:b4:68:bd:36:24:d5:73:2b:df:23:a0:68:f3:46:a3:91:
         af:1a:db:5d:b1:27:d2:75:d9:ee:08:9d:b5:d4:58:f5:90:d9:
         dd:21:36:e5:f1:2f:32:7f:66:88:fd:e7:e9:99:87:68:2e:d2:
         ed:e4:06:5e:8c:76:08:bf:24:66:53:1a:90:56:be:ae:10:7f:
         1f:4c:b4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:35 2024 by rpki-client on console-fra.rpki-client.org