Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/E386F672068711EDA1C2070DC4F9AE02.roa
File:                     E386F672068711EDA1C2070DC4F9AE02.roa (raw, json)
Hash identifier:          pgW2HGqxPEc6bhBwtiyxHITeZ/6F8jFtPrUAExwaxN8=
Subject key identifier:   1E:7D:27:7B:74:49:2C:57:79:53:4D:29:4B:67:5E:59:22:BD:A5:26
Certificate issuer:       /CN=A9112DEF/serialNumber=E3EB954B44721E411AAF0938310CC103EA4C8BB4
Certificate serial:       01F2
Authority key identifier: E3:EB:95:4B:44:72:1E:41:1A:AF:09:38:31:0C:C1:03:EA:4C:8B:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/E386F672068711EDA1C2070DC4F9AE02.roa
Signing time:             Wed 31 May 2023 05:28:29 +0000
ROA not before:           Wed 31 May 2023 05:28:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     140674
IP address blocks:        103.185.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl
                          rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 02:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 498 (0x1f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112DEF/serialNumber=E3EB954B44721E411AAF0938310CC103EA4C8BB4
        Validity
            Not Before: May 31 05:28:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6476dafd-7832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a7:88:ec:62:33:02:73:70:19:b8:44:f3:b9:
                    17:a2:dc:96:43:5b:57:34:94:06:d9:ba:37:55:27:
                    75:a3:59:f5:b3:c7:a5:44:e3:19:d5:67:36:4e:67:
                    f5:22:72:e3:77:61:f3:4c:00:68:28:67:57:b2:c6:
                    a3:ba:ee:6e:80:9d:84:87:21:09:b3:42:21:10:79:
                    fc:cc:52:5a:68:f5:30:cc:f0:73:bc:51:bc:9c:4e:
                    6d:91:a3:6c:2f:8e:4f:f6:7a:0c:98:3e:7c:b5:cd:
                    47:6a:e4:95:08:52:4d:c3:37:90:d6:3f:11:71:30:
                    fe:94:ba:0d:b0:7c:47:fd:7c:fb:57:ce:64:a4:12:
                    01:e0:2a:06:a7:63:90:cd:5a:81:76:eb:2f:fa:12:
                    4f:2d:dc:1f:75:1c:ee:3d:dd:d1:a6:67:74:6c:0c:
                    1b:3b:42:70:25:bd:f9:38:25:53:a2:49:b8:ad:1d:
                    34:6a:75:06:94:26:63:9d:9b:3c:10:5d:7f:c7:30:
                    a1:0d:3f:6f:63:ae:e4:92:99:f8:61:28:ed:be:10:
                    0f:59:38:f5:51:11:c8:02:ca:3d:34:9a:01:ce:d2:
                    f3:52:c4:50:0c:b9:00:8f:d9:d1:85:13:9e:17:54:
                    6d:86:7d:4b:f1:fd:fa:96:27:1e:2a:f1:f8:3b:c0:
                    56:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7D:27:7B:74:49:2C:57:79:53:4D:29:4B:67:5E:59:22:BD:A5:26
            X509v3 Authority Key Identifier:
                keyid:E3:EB:95:4B:44:72:1E:41:1A:AF:09:38:31:0C:C1:03:EA:4C:8B:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/E386F672068711EDA1C2070DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:34:62:04:ad:01:86:b7:8f:87:e6:22:2a:7e:72:c2:8a:10:
         b0:95:65:15:84:24:b3:62:56:aa:0d:85:3b:a6:69:26:2e:0b:
         7a:5d:16:6a:4e:9f:b8:54:b1:8e:67:d0:b0:a4:af:e2:6a:4c:
         19:7b:b7:66:00:c1:34:bb:b5:0c:9b:7c:12:28:e0:0c:63:06:
         84:12:70:e9:a0:1b:40:46:1b:ab:46:9d:47:c1:9a:af:3b:fd:
         51:0f:aa:74:bd:9a:b4:4f:ef:76:31:5e:c0:b0:7d:db:ff:20:
         e1:60:0e:5e:fe:9a:44:db:bf:2c:5a:61:1e:42:73:3a:04:6c:
         8e:27:71:04:c4:db:43:f8:4e:09:29:6e:0e:64:3f:fc:72:3e:
         06:7b:98:b6:69:4c:dd:1b:82:dc:6f:25:e9:5f:ed:44:a6:f8:
         42:e3:43:66:d4:3c:06:9c:ec:6b:5b:a2:83:e2:ce:e6:8d:91:
         02:aa:d8:88:06:8d:7a:c8:86:50:dc:6d:8c:96:a5:0a:83:c7:
         71:de:f5:80:ea:72:b5:68:fd:86:b2:db:56:b9:6c:e8:8c:c8:
         29:0d:67:df:62:12:69:15:9f:97:b3:3c:87:ff:16:8d:d6:b0:
         5b:0c:83:5a:5d:67:b3:4c:7a:fe:e5:34:91:df:34:ec:0d:6b:
         11:ea:51:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 04:44:29 2024 by rpki-client on console-ams.rpki-client.org