Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/0FA62A50214011EA90EFFE63C4F9AE02.roa
File:                     0FA62A50214011EA90EFFE63C4F9AE02.roa (raw, json)
Hash identifier:          HTGV+/hUaosCSp7RHZgq707SKnf5flE29JXS30lFZzs=
Subject key identifier:   0A:AC:AA:A5:B7:8C:AD:02:A2:63:45:AD:9A:90:7F:33:0A:56:42:A5
Certificate issuer:       /CN=A9119624/serialNumber=EAD81E45BE41476729C3562A346FB6F62FC81FBD
Certificate serial:       0C1F
Authority key identifier: EA:D8:1E:45:BE:41:47:67:29:C3:56:2A:34:6F:B6:F6:2F:C8:1F:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/0FA62A50214011EA90EFFE63C4F9AE02.roa
Signing time:             Tue 31 Oct 2023 19:06:51 +0000
ROA not before:           Tue 31 Oct 2023 19:06:51 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     136972
IP address blocks:        103.100.224.0/22 maxlen: 24
                          2401:c3c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.crl
                          rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 18:59:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3103 (0xc1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119624/serialNumber=EAD81E45BE41476729C3562A346FB6F62FC81FBD
        Validity
            Not Before: Oct 31 19:06:51 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6541504b-491c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:43:88:3c:69:26:b2:49:60:b2:17:4d:b9:f2:
                    b6:24:2d:06:0d:ab:47:57:bf:6e:46:6b:15:43:b3:
                    7b:bb:b2:75:b1:cc:e4:bd:89:e8:78:19:e9:f3:ef:
                    53:71:ef:1a:4c:6d:39:56:52:d0:07:f7:0f:ce:4d:
                    e4:08:54:2f:ea:18:9c:ab:26:0a:73:f1:f3:96:5f:
                    f3:27:ff:92:0c:47:5c:af:13:62:1e:69:65:4d:30:
                    de:e9:49:c8:c3:bd:bf:36:02:d6:1e:9e:4d:f6:40:
                    3b:b0:99:55:33:84:46:ea:ec:ec:e3:e0:42:bf:15:
                    0a:67:2f:e5:bf:9f:cf:de:15:1b:7b:05:82:80:38:
                    db:31:1b:95:66:c2:d7:6e:aa:e6:d0:56:88:5f:28:
                    57:81:00:3f:1c:22:5c:0b:31:1a:15:4a:b6:b7:3b:
                    13:ef:91:ae:d1:e2:0b:33:45:d1:9e:da:b8:49:ac:
                    2c:db:8a:ed:8b:2c:e3:ec:b3:be:73:d7:a9:c4:76:
                    5c:bb:16:28:45:cf:b8:c8:60:78:40:51:ff:41:65:
                    ad:2a:57:f7:ce:24:63:f5:52:34:17:17:96:a1:fe:
                    45:d5:3f:a6:09:a4:27:e9:0f:d1:4f:67:a4:7d:10:
                    4c:2c:b7:bd:aa:55:75:7c:85:80:bb:1f:a6:1e:ba:
                    5c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AC:AA:A5:B7:8C:AD:02:A2:63:45:AD:9A:90:7F:33:0A:56:42:A5
            X509v3 Authority Key Identifier:
                keyid:EA:D8:1E:45:BE:41:47:67:29:C3:56:2A:34:6F:B6:F6:2F:C8:1F:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/0FA62A50214011EA90EFFE63C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.224.0/22
                IPv6:
                  2401:c3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:f1:08:7c:ed:d2:63:de:c1:6a:b6:e1:a7:78:16:1d:ba:ad:
         b0:e8:f9:b9:40:30:d8:d5:93:76:c8:03:7e:d6:d0:c0:40:39:
         ff:7e:75:54:05:35:ac:f6:cd:15:4b:7a:f2:e6:fd:6e:47:a5:
         c2:37:56:1a:3a:53:7d:c0:52:87:16:a0:66:b8:8e:e4:77:45:
         26:1a:d5:d2:3b:04:82:0b:34:06:04:60:af:4f:25:0c:35:b6:
         db:cd:48:f7:94:e5:6b:0c:d1:ea:a5:00:fd:b7:fb:90:b4:10:
         20:00:24:4e:13:51:93:e6:90:eb:e7:c4:8d:71:f4:27:d0:09:
         bc:e5:6b:55:41:86:07:b2:4c:39:1a:e7:d5:f7:b2:c8:a5:78:
         9a:70:8a:e5:d5:c6:fc:d2:20:2c:97:ca:9a:01:1c:c8:d0:0e:
         af:0c:10:1c:6d:2e:e4:ef:10:4a:09:f5:ae:cb:91:87:0e:e2:
         ee:30:c3:34:cd:e4:f2:8b:31:e4:73:12:8e:74:f9:ed:91:28:
         17:98:a8:54:23:1c:3c:9a:a8:40:f5:02:af:2e:36:fb:0f:ab:
         c6:9b:4b:48:d8:67:5d:e6:d6:25:e7:28:98:20:af:94:fa:22:
         d9:31:eb:aa:77:16:85:19:97:a1:b3:c5:3d:b8:f8:96:c7:9d:
         9c:d4:4b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 22:51:16 2024 by rpki-client on console-ams.rpki-client.org