Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/6897409A73E811EA93705B7CC4F9AE02.roa
File:                     6897409A73E811EA93705B7CC4F9AE02.roa (raw, json)
Hash identifier:          s6hBv6YxfWmimyfh00ce0AvSwTNpbanedXSX1YiE0EY=
Subject key identifier:   E9:66:16:2A:11:3D:36:CA:35:79:58:AC:05:49:8E:3B:A6:32:F8:56
Certificate issuer:       /CN=A91149EA/serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804
Certificate serial:       08DC
Authority key identifier: 4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/6897409A73E811EA93705B7CC4F9AE02.roa
Signing time:             Tue 12 Sep 2023 20:38:22 +0000
ROA not before:           Tue 12 Sep 2023 20:38:22 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     137969
IP address blocks:        103.142.172.0/23 maxlen: 23
                          103.142.172.0/24 maxlen: 24
                          103.142.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl
                          rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 21:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2268 (0x8dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91149EA/serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804
        Validity
            Not Before: Sep 12 20:38:22 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=6500cc3e-15d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f6:7e:b3:16:10:d2:9f:b7:b0:43:64:ac:fa:
                    b4:7d:70:f0:00:39:5a:81:3e:ed:01:b9:63:8b:93:
                    78:9b:ee:58:fb:28:94:29:d8:5d:74:c8:c3:d4:c9:
                    89:b4:69:e7:63:ec:7e:73:e5:db:21:04:c1:58:4c:
                    68:10:89:a2:81:88:c4:be:fa:60:68:76:d4:57:6f:
                    e5:56:5b:37:89:c6:49:a8:97:a6:5f:8e:d6:89:9b:
                    52:83:03:da:d3:43:f4:66:40:e6:f5:31:55:5a:4e:
                    9d:e6:ce:fc:a8:d3:b7:dd:47:4d:9c:9a:62:a6:f4:
                    9e:25:83:0c:31:dc:ed:a2:e9:b1:f8:42:c9:67:cf:
                    7c:d2:f8:43:8c:b3:7e:9e:fc:d7:2d:d0:2e:4f:84:
                    b0:9e:7c:f9:e6:46:8e:08:77:13:5e:a7:29:2c:28:
                    a4:05:fd:a4:29:97:1a:92:7e:23:3f:6d:8b:b1:4f:
                    f8:5d:63:d1:64:6c:37:7e:b7:78:0c:e5:10:92:10:
                    64:a3:c7:31:82:1d:18:66:05:62:f7:01:4a:89:c0:
                    3b:29:fd:9c:33:0c:30:33:0a:ba:cf:4c:53:85:96:
                    bf:69:6a:cb:4c:fb:98:d5:04:7b:e2:cc:33:33:a2:
                    2f:94:47:cf:5b:1f:41:6a:54:99:a6:d0:83:d5:5c:
                    93:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:66:16:2A:11:3D:36:CA:35:79:58:AC:05:49:8E:3B:A6:32:F8:56
            X509v3 Authority Key Identifier:
                keyid:4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/6897409A73E811EA93705B7CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:59:92:b5:17:25:1b:66:04:df:b8:e4:36:92:90:5f:01:c0:
         e3:1a:45:d4:c5:54:b3:55:0e:31:13:c0:9b:f9:00:2b:fa:32:
         7b:ae:08:1b:e3:5a:14:a0:65:74:a7:ab:5b:0f:82:f6:43:51:
         af:a7:68:26:44:43:e2:d4:94:fa:ab:09:ee:73:55:7c:80:01:
         95:95:3e:e6:3b:16:6c:a6:b3:cb:54:28:fd:87:4c:f6:ae:62:
         01:a7:79:08:2b:bf:67:3a:51:34:0e:e3:3a:08:50:89:74:3a:
         22:88:0c:97:4f:11:79:83:28:6b:32:e5:64:15:8b:71:8d:c4:
         97:93:6b:33:57:bc:52:c0:d8:50:08:3c:be:7f:e0:bf:d5:2e:
         11:b8:c2:44:21:d7:19:59:07:a5:ea:45:67:b8:bd:b8:ca:1c:
         67:08:2c:be:b5:43:cc:4f:a7:d3:98:e9:f9:f4:82:92:34:85:
         7b:88:98:c7:a9:cd:e1:fb:63:49:e7:a9:93:74:68:60:cd:a4:
         cc:f1:09:22:de:af:78:f2:02:b7:dd:32:d9:34:66:9b:d5:7e:
         ec:6c:1c:fd:85:85:6c:06:b5:a3:bf:87:c9:8b:b6:bf:f0:f4:
         4e:79:1f:f3:92:77:1a:32:23:d2:c8:f4:b2:5c:f5:05:ae:93:
         b2:59:ce:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 22:29:58 2024 by rpki-client on console-fra.rpki-client.org