Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/BC6E83E0D4E411EC976A7E55C4F9AE02.roa
File:                     BC6E83E0D4E411EC976A7E55C4F9AE02.roa (raw, json)
Hash identifier:          P0qEB44hIqjtgoxJbWTuafMgiRenfg8d6UvJuS/K3BM=
Subject key identifier:   3F:7D:E6:F3:ED:60:8D:1B:5C:94:28:F0:27:36:67:0B:A6:D8:A7:2E
Certificate issuer:       /CN=A911580A/serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3
Certificate serial:       025F
Authority key identifier: 73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/BC6E83E0D4E411EC976A7E55C4F9AE02.roa
Signing time:             Sun 23 Jun 2024 03:23:44 +0000
ROA not before:           Sun 23 Jun 2024 03:23:44 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     134732
IP address blocks:        103.187.94.0/23 maxlen: 23
                          103.187.94.0/24 maxlen: 24
                          103.187.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl
                          rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911580A/serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3
        Validity
            Not Before: Jun 23 03:23:44 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66779540-2266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:50:38:05:36:54:ac:b5:11:1d:ef:99:61:63:
                    c9:7f:98:ab:c7:33:b3:eb:3b:4b:de:82:f7:30:0a:
                    6c:18:86:6d:2c:47:23:bb:75:f7:aa:64:2d:12:b6:
                    cc:1d:6c:f0:e9:98:bc:6f:a7:64:28:06:b6:0e:65:
                    fe:ee:a6:fb:2e:66:93:54:59:e1:10:7d:58:4f:ec:
                    40:f3:d1:85:e6:ce:c2:9d:da:c2:ff:9f:90:a2:d6:
                    25:d2:68:82:2d:c6:f0:8a:9f:cf:31:9a:49:59:e4:
                    10:48:f5:b8:74:70:37:db:8a:4c:16:6a:8c:18:dc:
                    1e:97:2b:3d:0d:e9:72:fd:dc:81:7a:e8:1b:1f:a3:
                    38:3a:78:9a:b5:e3:c1:08:17:72:e5:9c:39:e4:09:
                    3c:c9:59:31:a4:04:27:05:2f:66:27:d8:23:7b:92:
                    6a:1d:b1:88:93:ac:8b:04:a3:92:26:b7:7f:df:10:
                    09:ee:c4:46:23:80:70:c0:92:f1:38:6a:26:37:0a:
                    f6:ee:f1:5e:4a:14:43:d3:f4:30:00:d3:aa:96:f0:
                    41:40:3a:6e:9f:1a:c1:2a:b3:ca:93:8a:ed:dc:cd:
                    0b:08:9b:0d:ec:a3:e8:23:a8:2b:04:9b:7d:c4:00:
                    3c:f3:06:ba:ca:37:06:d7:de:12:9e:03:fc:02:e8:
                    99:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7D:E6:F3:ED:60:8D:1B:5C:94:28:F0:27:36:67:0B:A6:D8:A7:2E
            X509v3 Authority Key Identifier:
                keyid:73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/BC6E83E0D4E411EC976A7E55C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:08:ed:11:99:3d:fb:ed:26:99:f1:ae:f2:30:90:a8:cf:57:
         b0:7a:1a:36:43:04:b0:dc:46:22:99:5b:41:44:be:56:3f:52:
         ec:68:4f:7a:ec:9c:d1:d4:0d:0d:56:b4:7f:67:a4:41:cf:31:
         4f:1e:18:87:cf:ca:26:90:f0:c7:fb:46:8f:fc:74:31:33:7d:
         60:ae:4d:98:96:48:83:48:1a:63:ea:2f:cf:ba:b6:5a:3b:0a:
         50:22:b9:3c:92:e4:ba:29:fb:00:1e:cc:0c:2a:36:0a:8f:73:
         fd:6c:46:ac:39:61:aa:7d:c9:a5:ee:6f:46:f6:b7:4b:13:42:
         c5:1e:0c:23:6e:81:0a:2f:57:aa:c4:09:ec:87:76:57:47:6c:
         0f:dd:f7:d5:19:bb:26:98:60:4e:1e:78:b7:46:78:bf:95:00:
         8c:04:21:67:24:40:72:55:34:e0:12:79:66:69:b4:33:7a:3f:
         2c:cc:14:96:b6:a4:0e:6e:c0:cb:95:49:35:f2:c6:60:f4:bf:
         c9:ef:07:89:07:c2:6a:e0:f9:9c:64:d7:fb:61:a8:2f:31:06:
         48:db:f2:d0:0c:67:5a:99:b4:16:8b:70:7e:18:a0:87:87:35:
         4f:f8:06:ad:cd:ad:7f:54:3c:bd:b9:31:64:b9:68:e6:f4:2f:
         81:7a:3c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:32 2024 by rpki-client on console-ams.rpki-client.org