Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/93FB97A64ABD11EC92951C1DC4F9AE02.roa
File:                     93FB97A64ABD11EC92951C1DC4F9AE02.roa (raw, json)
Hash identifier:          NJqN8mNJT6pdgbBPNEHgwgtzCUZUCh7UJoaeWzVLJsU=
Subject key identifier:   C4:C5:90:A9:CA:58:F0:61:C3:83:85:73:2D:46:FD:23:38:21:32:00
Certificate issuer:       /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Certificate serial:       120A
Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/93FB97A64ABD11EC92951C1DC4F9AE02.roa
Signing time:             Fri 02 Jun 2023 18:18:43 +0000
ROA not before:           Fri 02 Jun 2023 18:18:43 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     135542
IP address blocks:        103.116.44.0/24 maxlen: 24
                          103.116.46.0/24 maxlen: 24
                          103.116.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl
                          rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 17:44:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4618 (0x120a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
        Validity
            Not Before: Jun  2 18:18:43 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=647a3283-2acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:09:99:84:2c:6f:34:7f:7e:0c:5d:fc:8e:38:
                    9f:d0:53:d6:0d:28:2a:6f:ca:94:69:b7:22:b1:97:
                    3b:4f:ed:67:c6:89:56:e5:42:72:67:13:da:17:c0:
                    c2:2a:31:b1:da:ca:50:86:9d:2b:33:3d:0c:bf:e8:
                    6b:04:64:4f:6f:82:21:ae:eb:2e:c3:4a:f4:cd:75:
                    4e:a5:06:f2:46:af:9b:ec:2e:68:60:d6:db:d6:8a:
                    1f:24:94:24:dd:de:86:91:f4:83:b6:0b:31:64:a8:
                    f9:35:14:53:7a:d9:e2:2c:8c:69:aa:34:5c:11:7a:
                    00:27:89:4f:f0:5f:51:b6:f7:52:8b:c4:21:ae:c2:
                    af:63:2a:45:77:0b:0e:5c:f2:d0:28:9e:d8:41:f8:
                    73:9d:03:16:03:ea:35:25:5a:e5:c6:d2:23:ec:54:
                    83:83:4a:b8:80:66:a1:a0:90:c6:ba:34:59:34:09:
                    ab:1d:a8:2e:8e:d3:d2:62:36:65:ed:bb:f2:03:29:
                    f9:29:67:a1:66:73:44:cc:ce:15:c9:b2:9d:fd:bf:
                    05:15:0c:8b:88:5e:1d:cd:a9:9a:df:3c:cc:ee:f6:
                    50:75:0a:27:33:e1:42:bc:f6:05:97:61:a3:c8:64:
                    6e:fb:10:57:33:4c:51:90:76:af:be:b9:1d:fb:10:
                    2e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C5:90:A9:CA:58:F0:61:C3:83:85:73:2D:46:FD:23:38:21:32:00
            X509v3 Authority Key Identifier:
                keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/93FB97A64ABD11EC92951C1DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.44.0/24
                  103.116.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:6f:4e:79:67:1c:86:b1:e5:4d:39:b2:b6:d0:81:76:49:e0:
         83:dd:42:97:bd:90:24:d4:3e:72:e7:78:cf:44:13:17:43:be:
         74:68:6e:99:b1:31:63:24:2e:f6:46:ae:51:c1:50:18:d2:a9:
         0f:71:37:75:63:fc:a5:3c:fd:7f:8d:5f:21:4c:c3:e0:ee:10:
         76:7e:f5:39:66:40:44:bd:85:9e:03:b7:c3:2d:31:ae:9e:43:
         e7:03:f0:1e:cb:a7:d7:7e:5c:d4:eb:f2:dd:4d:f3:81:c4:d4:
         42:10:b1:ab:ee:04:50:83:b8:2f:3d:f4:15:0d:d3:2b:02:54:
         e4:ec:bc:29:b5:a3:23:04:6a:c2:78:72:e3:18:56:28:29:5c:
         8f:ba:8c:b3:d0:3f:36:e3:f5:a5:ff:d4:26:17:db:17:1f:b4:
         f3:7d:f9:a5:68:2a:b3:b1:0d:cd:c8:ae:d4:aa:47:94:fd:23:
         99:22:c9:f3:48:2f:35:34:d2:87:02:00:e1:72:42:64:25:b9:
         1e:a1:f0:92:05:c8:86:34:0b:6e:89:c7:ba:b2:bb:cf:1b:3d:
         88:e2:0d:ac:69:e8:f1:bc:bf:f0:c6:75:46:ef:b9:d4:7f:a3:
         ce:36:85:13:91:1a:6a:2d:2e:dc:a6:4a:4c:31:53:2f:5b:e4:
         5d:c3:10:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 18:26:02 2024 by rpki-client on console-fra.rpki-client.org