Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/1E809CD0845111EAA961467EC4F9AE02.roa
File:                     1E809CD0845111EAA961467EC4F9AE02.roa (raw, json)
Hash identifier:          Zy1GynMb02lEFndk3/8ZEzW8mxwp5i2kpGslOdi1Vh4=
Subject key identifier:   BA:8A:B2:29:E9:CF:AA:56:D4:F7:51:00:13:31:97:B7:1E:74:84:DE
Certificate issuer:       /CN=A9111ED2/serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
Certificate serial:       0860
Authority key identifier: 40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/1E809CD0845111EAA961467EC4F9AE02.roa
Signing time:             Wed 26 Jul 2023 20:57:38 +0000
ROA not before:           Wed 26 Jul 2023 20:57:38 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     131287
IP address blocks:        103.68.197.0/24 maxlen: 24
                          103.150.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl
                          rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 21:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2144 (0x860)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111ED2/serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
        Validity
            Not Before: Jul 26 20:57:38 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c188c2-f56b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6a:af:de:88:e7:8a:81:67:68:c6:26:bc:f1:
                    83:aa:af:9b:0c:fc:50:0a:80:83:a2:7d:f6:8a:c6:
                    20:fc:e7:45:67:e9:ed:a5:87:46:a3:e9:0e:ca:22:
                    f3:1d:2a:e2:98:9f:8e:4c:c6:b6:56:66:f9:2f:2d:
                    5d:82:83:53:2a:a5:14:f6:9e:03:24:71:c1:ea:31:
                    47:89:24:17:a3:c4:ca:81:af:f1:46:40:88:7f:ba:
                    4b:ee:2f:1d:11:fc:32:64:cd:0b:1d:99:63:a2:20:
                    d9:0e:f7:7e:d4:6a:42:9c:ce:69:70:51:c7:c3:76:
                    98:66:87:b9:c9:1c:11:8f:87:c5:fe:6a:55:47:74:
                    bd:07:7f:85:0f:c6:3e:53:25:0a:9d:8e:05:a9:b3:
                    cb:1d:81:aa:72:55:b3:23:ce:1f:a9:24:a7:7c:67:
                    3e:1b:d3:2b:e1:1f:65:e7:db:8c:5d:0e:7c:da:f8:
                    1e:64:11:a2:63:3e:a7:d1:10:0a:44:d5:e6:b3:e7:
                    ae:2a:a3:af:a4:4c:27:83:a6:28:6c:49:07:4d:19:
                    d7:3a:95:18:19:9d:8b:ef:4a:1d:08:8b:06:38:d5:
                    85:9d:84:1d:e0:1e:1a:af:d6:b5:18:c8:09:6a:b5:
                    03:d7:66:e6:63:d0:7e:a3:3c:14:32:8b:87:50:dd:
                    f7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8A:B2:29:E9:CF:AA:56:D4:F7:51:00:13:31:97:B7:1E:74:84:DE
            X509v3 Authority Key Identifier:
                keyid:40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/1E809CD0845111EAA961467EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.197.0/24
                  103.150.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:40:c1:8e:e3:34:85:bc:19:a5:7f:0f:5c:15:3d:90:50:a9:
         c3:18:4d:3f:76:b0:c4:51:5e:fd:d5:55:68:8f:fc:08:39:4d:
         63:c7:ed:08:6e:1c:1d:08:bf:84:42:3d:ae:01:00:35:df:c1:
         71:5b:62:b1:e3:f8:ee:c8:9c:82:7e:ad:fc:fe:31:0b:27:d5:
         38:3a:ef:65:f7:c4:5b:52:4c:41:e3:79:85:6f:f0:85:23:e2:
         76:9c:f5:7c:c1:9e:d4:26:8a:1f:f6:04:7f:a6:12:55:8e:9e:
         96:c1:ce:a8:0a:ac:3c:68:63:d9:3a:df:9a:e3:e2:5f:a2:70:
         f0:8d:5a:2e:06:85:87:28:9e:fd:83:be:61:15:ce:b4:e4:77:
         a3:7b:96:bf:d0:3d:aa:d9:7a:ca:35:30:d1:e5:7e:35:a1:47:
         ca:41:35:a6:b2:de:77:0d:36:dd:c5:98:a3:d8:21:96:2d:d1:
         f4:12:da:74:aa:58:30:f6:47:a1:fd:a3:05:44:08:ec:dd:ac:
         ab:a4:aa:91:6f:fe:d0:85:be:ee:3b:cd:c6:2e:ff:c0:1b:6e:
         70:08:cb:5c:79:a0:d0:fe:36:42:9a:65:91:da:8a:9f:93:7e:
         72:85:b2:08:08:11:13:5d:b9:dc:b2:88:d4:48:93:08:87:21:
         67:75:82:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:05:34 2024 by rpki-client on console-fra.rpki-client.org