Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/424653EEC6CB11ECB185E43EC4F9AE02.roa
File:                     424653EEC6CB11ECB185E43EC4F9AE02.roa (raw, json)
Hash identifier:          7JiWFqhBl+5PIZglplshZldbASR1wWHWbzxcXJ7lT5w=
Subject key identifier:   7B:29:4E:02:D3:C1:8A:A6:42:D7:27:3F:13:17:D4:8C:47:9E:F8:22
Certificate issuer:       /CN=A9110650/serialNumber=78B79CF82751861F279A5FA504931538DADCDAFA
Certificate serial:       0200
Authority key identifier: 78:B7:9C:F8:27:51:86:1F:27:9A:5F:A5:04:93:15:38:DA:DC:DA:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eLec-CdRhh8nml-lBJMVONrc2vo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/424653EEC6CB11ECB185E43EC4F9AE02.roa
Signing time:             Mon 09 Oct 2023 02:54:43 +0000
ROA not before:           Mon 09 Oct 2023 02:54:43 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     132742
IP address blocks:        43.243.240.0/22 maxlen: 24
                          103.39.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/eLec-CdRhh8nml-lBJMVONrc2vo.crl
                          rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/eLec-CdRhh8nml-lBJMVONrc2vo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eLec-CdRhh8nml-lBJMVONrc2vo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 04:55:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512 (0x200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110650/serialNumber=78B79CF82751861F279A5FA504931538DADCDAFA
        Validity
            Not Before: Oct  9 02:54:43 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65236b73-9759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:da:37:2c:83:5d:18:c7:44:c7:6b:8d:b9:b5:
                    f3:24:c3:39:94:3c:04:c3:09:f5:0b:3b:a6:16:39:
                    67:6d:dd:8d:32:8f:b9:39:fd:58:40:be:a5:3a:7b:
                    ba:78:5a:3d:aa:05:d5:b3:41:e4:a3:69:0f:c3:1f:
                    6a:fe:5a:ca:14:d8:49:06:aa:56:bc:e8:a1:6b:ba:
                    4f:b6:76:49:fb:c6:98:91:49:37:4b:94:bb:62:59:
                    be:3e:df:27:3f:f1:9d:2f:5b:6c:97:07:5a:05:10:
                    94:11:ec:d2:f3:9f:0f:d7:ab:6c:61:ef:54:89:61:
                    89:e2:70:3c:7d:b2:55:23:b3:79:24:f2:f1:7a:48:
                    6d:c1:d9:3c:87:13:5c:25:d2:4a:28:78:b2:9b:3a:
                    9d:fa:64:78:90:72:d8:05:76:1a:eb:79:8e:a6:3f:
                    cb:df:c3:51:cf:21:9a:b7:40:e7:67:51:5c:e9:ad:
                    6c:75:97:f6:71:9c:49:37:9c:d0:d9:a0:07:d1:f2:
                    c1:38:81:78:5e:65:7b:96:92:0b:5c:41:30:2e:38:
                    7b:06:1d:aa:ae:43:7d:ec:00:c9:d2:78:d4:de:7c:
                    cd:06:b3:b7:34:25:7c:ca:a6:e1:bc:e1:bf:7c:75:
                    ee:0a:f8:5d:ee:76:3d:71:a0:16:f8:16:12:70:67:
                    79:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:29:4E:02:D3:C1:8A:A6:42:D7:27:3F:13:17:D4:8C:47:9E:F8:22
            X509v3 Authority Key Identifier:
                keyid:78:B7:9C:F8:27:51:86:1F:27:9A:5F:A5:04:93:15:38:DA:DC:DA:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/eLec-CdRhh8nml-lBJMVONrc2vo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eLec-CdRhh8nml-lBJMVONrc2vo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/424653EEC6CB11ECB185E43EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.243.240.0/22
                  103.39.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:87:0d:23:e3:55:2f:69:94:ae:9c:10:c0:b3:46:91:82:d5:
         73:5f:ca:56:65:b3:15:e6:3e:0e:96:07:2d:27:ad:e1:18:95:
         17:3c:6e:e0:c5:64:19:35:f8:ef:19:7d:db:e8:6e:fc:5d:c4:
         40:0d:7f:94:a2:db:ca:c1:c1:af:e6:05:a3:bb:50:a4:02:07:
         ea:36:9e:4c:df:2d:7c:5c:d5:fa:31:da:a8:93:b8:c1:87:23:
         4a:35:cf:d8:b1:27:cd:c9:ab:fd:e5:be:db:27:bd:b7:99:84:
         44:75:6d:47:a8:a8:4b:ff:ba:d8:e8:42:4d:cb:6c:57:ef:e7:
         4c:06:f2:8e:a7:86:0f:44:4c:65:da:36:46:86:92:48:a7:b3:
         eb:e7:61:2d:8c:02:ef:2a:d5:28:c1:51:50:0d:ce:d6:40:8a:
         f4:83:ad:13:d3:8f:d0:8d:ee:a6:6f:99:b0:55:0c:b4:9e:0f:
         a1:48:1b:76:6f:6c:20:3c:21:33:95:21:dd:80:e3:4e:c5:e1:
         80:f3:c1:d7:1b:fc:b7:5b:e3:da:a5:25:b2:e4:0f:11:3d:86:
         3a:5d:1d:55:bc:b2:d3:e7:31:23:25:13:b7:99:37:2d:42:e1:
         c4:20:63:91:aa:0d:aa:aa:0a:40:53:ed:98:c9:2f:40:13:0f:
         60:d4:97:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:08:09 2024 by rpki-client on console-ams.rpki-client.org