Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/E3DD6362787A11ED89732760C4F9AE02.roa
File:                     E3DD6362787A11ED89732760C4F9AE02.roa (raw, json)
Hash identifier:          UivYPIeEF4bNwEIll2XyDrhcbZqGNmj3hiIA72aeZpE=
Subject key identifier:   75:8B:6F:0B:2F:56:D9:99:BC:33:94:4C:74:03:5E:2D:19:84:49:39
Certificate issuer:       /CN=A919A824/serialNumber=61E4017AFF4776713CFDC8205CC2FB2178462BA1
Certificate serial:       096F
Authority key identifier: 61:E4:01:7A:FF:47:76:71:3C:FD:C8:20:5C:C2:FB:21:78:46:2B:A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/E3DD6362787A11ED89732760C4F9AE02.roa
Signing time:             Sun 12 May 2024 16:33:08 +0000
ROA not before:           Sun 12 May 2024 16:33:08 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     134780
IP address blocks:        103.149.0.0/23 maxlen: 23
                          103.149.0.0/24 maxlen: 24
                          103.149.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.crl
                          rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:44:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2415 (0x96f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A824/serialNumber=61E4017AFF4776713CFDC8205CC2FB2178462BA1
        Validity
            Not Before: May 12 16:33:08 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=6640ef44-7c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:00:7b:cc:77:20:84:9a:39:8c:3b:2e:40:ba:
                    e8:cb:51:1b:69:54:bd:15:cc:dd:3d:e1:7b:6d:d7:
                    d2:3a:72:3a:26:24:50:73:97:20:87:85:b2:2e:b3:
                    cf:7e:30:3c:65:aa:34:82:91:40:ec:e4:2d:e9:81:
                    b3:4e:3e:d5:b0:5d:88:0a:85:68:90:46:56:71:e7:
                    53:a5:cc:ec:75:2c:1f:1a:f3:ce:f7:a4:00:31:69:
                    78:25:22:e2:32:80:57:50:71:57:21:b7:c5:d8:75:
                    4a:44:ae:c7:dd:ed:df:fb:09:56:46:eb:5c:a5:af:
                    50:98:bc:d4:80:7e:b5:35:d7:4f:e1:9c:eb:bf:7d:
                    f7:a7:88:88:1c:96:1e:d2:21:20:01:bc:24:e1:34:
                    c5:9f:92:86:9e:cb:e2:9d:61:c8:2c:cf:80:ee:53:
                    2b:05:39:bb:47:d6:d4:ef:0c:a4:97:90:cb:9a:78:
                    06:4a:d8:fc:72:d7:55:7b:01:34:1b:55:b3:e9:9a:
                    4a:4c:f0:61:d3:e8:c6:5a:51:61:e7:88:c2:47:be:
                    7a:ac:21:54:fb:a2:21:60:6f:8c:14:11:55:77:e1:
                    af:07:46:c2:5a:7d:79:37:b0:2a:ce:72:c9:c2:4b:
                    53:4a:98:79:a3:da:36:e6:25:44:87:c4:1e:67:06:
                    b3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8B:6F:0B:2F:56:D9:99:BC:33:94:4C:74:03:5E:2D:19:84:49:39
            X509v3 Authority Key Identifier:
                keyid:61:E4:01:7A:FF:47:76:71:3C:FD:C8:20:5C:C2:FB:21:78:46:2B:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/E3DD6362787A11ED89732760C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:0c:9c:8b:c8:8e:78:80:4f:b7:50:ee:fb:28:05:a9:e2:41:
         d2:74:62:ec:cd:1e:00:1f:26:34:ca:76:4b:8a:da:c8:11:67:
         1d:95:be:0d:dd:7b:49:73:f2:40:a6:b6:68:25:d6:12:42:9b:
         3c:26:31:59:f4:9f:62:d9:6d:5f:fb:c8:20:6e:1c:65:5e:e5:
         ee:c4:64:2d:d0:9b:d7:ac:bc:eb:6f:aa:ec:95:46:df:5a:88:
         ae:21:b3:3e:3d:23:17:a0:89:02:7c:54:28:f5:e2:69:89:28:
         9a:af:bc:1e:d7:e1:37:b6:0d:d6:9d:5b:1a:0b:ef:be:59:3d:
         a9:61:3d:f5:fa:ba:31:14:ce:7b:ca:ff:cb:3e:df:8a:07:c5:
         5a:4b:60:6d:f4:f3:85:82:60:81:8f:81:16:39:bb:c2:e6:ba:
         0a:cb:aa:46:a7:14:1b:ab:4d:77:e2:3e:8f:01:7b:87:d3:9a:
         5b:9a:1b:8b:be:b1:3d:a8:65:5f:6f:07:15:97:b6:f3:c0:cc:
         08:a5:a1:7f:bc:a7:53:13:30:ac:4c:8e:78:b6:2b:33:34:6d:
         85:a5:c5:4c:ed:b1:80:a8:cf:55:8a:43:2f:cd:bc:38:cd:d0:
         e4:f1:b8:26:86:f1:6f:48:6e:bd:09:a8:b2:cd:e8:0f:03:29:
         4f:71:a1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:31 2024 by rpki-client on console-fra.rpki-client.org