Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/608D76E61A6411EE8DCBF20BC4F9AE02.roa
File:                     608D76E61A6411EE8DCBF20BC4F9AE02.roa (raw, json)
Hash identifier:          6RJL6RzumDSYS3r6wXOLDStDH0YKEVYFft2xjryTc6o=
Subject key identifier:   1E:F5:EF:6A:CB:61:C1:85:A4:46:53:40:73:46:41:5B:69:4C:77:80
Certificate issuer:       /CN=A9198F69/serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91
Certificate serial:       03
Authority key identifier: 6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/608D76E61A6411EE8DCBF20BC4F9AE02.roa
Signing time:             Tue 04 Jul 2023 12:14:52 +0000
ROA not before:           Tue 04 Jul 2023 12:14:52 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     142647
IP address blocks:        103.186.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl
                          rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 06:31:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198F69/serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91
        Validity
            Not Before: Jul  4 12:14:52 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64a40d3b-2a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:db:f1:52:d3:e8:a5:b5:b2:cb:73:b8:c3:cc:
                    5e:54:71:60:72:58:c8:fe:35:dd:bc:01:d9:fc:54:
                    8c:31:83:2d:1d:36:81:c5:63:f8:36:79:04:a9:23:
                    9b:17:a9:a7:9f:23:ba:bc:b9:dc:dc:64:c6:32:07:
                    15:e3:67:ce:8c:4b:9b:32:0f:0e:a9:51:d9:f4:7a:
                    cd:4d:5e:71:cc:7c:54:d8:58:a5:0e:1b:8d:54:36:
                    b5:56:91:b3:81:6c:a3:93:60:b8:64:36:1b:d6:84:
                    73:22:fd:19:8f:b7:93:5d:04:31:9f:2b:ef:48:e7:
                    73:50:b4:f0:9a:57:80:0e:3a:66:4f:b9:dc:32:9b:
                    f1:c8:71:0c:ac:12:dc:e1:52:98:9d:e3:f4:64:36:
                    96:2d:fe:4d:29:e1:b0:2f:7a:fa:bf:7a:99:c0:e8:
                    13:78:c2:03:26:dd:9f:7f:30:2a:98:f6:d7:6d:34:
                    f2:62:01:85:c5:84:4d:5e:31:47:16:1e:2e:16:a3:
                    0c:f9:21:9e:12:c1:33:42:bf:82:35:43:f4:54:95:
                    dd:12:8e:ea:d2:57:3f:dc:6f:4d:5b:4b:cd:c8:b9:
                    f5:f7:1f:02:60:62:a7:d6:ca:16:b7:19:87:29:10:
                    76:6e:3c:aa:ac:41:c2:11:c7:80:db:ff:86:73:2a:
                    53:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F5:EF:6A:CB:61:C1:85:A4:46:53:40:73:46:41:5B:69:4C:77:80
            X509v3 Authority Key Identifier:
                keyid:6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/608D76E61A6411EE8DCBF20BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:39:c2:34:89:56:5b:00:08:e1:52:1d:c3:72:89:20:15:8f:
         7b:eb:83:14:e5:8d:5a:d3:e4:ff:e0:3e:86:75:08:3c:4a:e3:
         ad:c8:c7:eb:96:17:af:32:1b:f7:e6:4a:16:a3:53:a3:92:91:
         60:01:25:70:67:20:cf:cd:56:df:95:57:fd:d4:d9:da:a2:80:
         d3:13:10:8b:07:fb:83:e2:f7:76:37:20:a0:c7:d7:73:21:09:
         83:4b:aa:e8:08:56:ac:fc:85:d9:ab:94:33:f3:ab:5c:bf:c3:
         18:dc:ff:e2:14:9c:0d:aa:a1:90:0a:c0:6a:eb:0d:0a:02:a8:
         0f:15:2d:88:37:d0:0b:6a:0d:fe:63:17:10:84:ee:17:02:5c:
         0a:1a:36:13:3a:b3:68:c0:6a:eb:81:be:bb:8a:76:af:28:56:
         be:81:1e:bb:51:db:8b:a1:c5:c7:f1:02:2a:d3:67:e0:2b:8f:
         ed:6d:8b:b8:89:72:c9:06:f0:5a:5f:35:4b:21:f8:72:52:96:
         3c:41:22:42:1a:02:a9:d3:ca:ea:ac:04:cb:d1:6c:ab:80:3e:
         60:fa:bf:bd:40:b7:9d:51:ff:db:12:74:68:91:75:90:bb:ae:
         13:af:00:0c:09:62:9f:90:49:50:71:42:bf:48:c6:8d:58:21:
         d2:06:fb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 07:43:06 2024 by rpki-client on console-fra.rpki-client.org