Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/06184FEC07C411EC8F79EC2FC4F9AE02.roa
File:                     06184FEC07C411EC8F79EC2FC4F9AE02.roa (raw, json)
Hash identifier:          +Hit9S7xn4KKn3w7aDqiZzcfw5tOLDjZT862u/toJE8=
Subject key identifier:   D0:E6:EB:1D:77:C8:4D:2B:F5:DB:6D:E8:A6:EB:41:6C:BF:9F:9A:2C
Certificate issuer:       /CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
Certificate serial:       03C3
Authority key identifier: 37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/06184FEC07C411EC8F79EC2FC4F9AE02.roa
Signing time:             Sat 01 Jul 2023 00:50:57 +0000
ROA not before:           Sat 01 Jul 2023 00:50:57 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     33011
IP address blocks:        103.116.4.0/22 maxlen: 24
                          2402:f2c0::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl
                          rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 01:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 963 (0x3c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
        Validity
            Not Before: Jul  1 00:50:57 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=649f7870-5d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f1:fa:29:0b:d2:00:f9:96:3a:66:57:9b:d4:
                    f8:c0:b2:a2:51:27:06:b4:0c:f7:e2:bc:fc:12:5f:
                    6f:60:9f:21:39:4a:df:11:e2:df:80:f4:85:5c:ce:
                    22:1c:02:e9:2c:48:ae:d3:ec:98:b6:15:59:4f:24:
                    8c:66:26:dd:20:e5:53:4a:37:17:54:1c:65:c8:02:
                    3d:c5:7c:bd:27:3a:f7:82:2f:16:1e:6f:33:70:db:
                    7c:9d:e9:21:10:d5:43:b9:c1:00:1d:17:1b:25:e3:
                    52:b7:7a:00:8f:78:71:63:7c:6c:84:10:0c:0d:c5:
                    3a:8e:00:d6:47:9d:b3:77:f8:58:4e:47:45:35:3d:
                    79:0b:12:12:d3:87:49:2b:ed:ac:1a:5b:dd:de:db:
                    ac:63:04:4a:6a:72:01:fb:4c:eb:23:d0:7b:2f:82:
                    81:5a:bd:b1:b8:4f:48:7f:c9:f0:45:00:ad:a5:ad:
                    a6:30:e5:01:0a:31:6b:58:e9:42:81:d6:00:e5:8f:
                    7b:2f:8c:0e:ff:89:2b:9f:d0:98:34:de:17:de:b2:
                    c0:a9:d9:2c:de:bb:7f:80:b5:40:b1:1f:7c:d3:ef:
                    c5:f6:34:11:c2:ba:37:eb:ea:4b:60:2a:17:8a:82:
                    46:38:9d:2e:b2:d1:16:30:e2:3c:3a:d2:b2:d8:e5:
                    57:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E6:EB:1D:77:C8:4D:2B:F5:DB:6D:E8:A6:EB:41:6C:BF:9F:9A:2C
            X509v3 Authority Key Identifier:
                keyid:37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/06184FEC07C411EC8F79EC2FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.4.0/22
                IPv6:
                  2402:f2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:9f:0a:5e:26:d2:06:b4:6b:04:1d:20:ef:52:9a:2f:f1:52:
         a1:bc:10:c9:b7:74:9f:22:f9:a0:6b:a6:68:d6:e6:01:4c:a7:
         0d:5d:75:9e:6d:f4:5a:e8:45:60:8b:91:a6:a6:ba:f1:ff:49:
         87:6e:88:b1:a1:e2:df:90:8f:55:12:db:95:34:ed:a4:2a:6a:
         1d:31:e6:97:31:c5:fb:6a:c8:5d:69:40:19:1f:f7:a6:a2:2b:
         20:da:ab:79:47:8a:c0:2e:57:2d:f1:b1:2f:77:c2:c0:ac:e3:
         e4:ac:0c:8c:98:32:06:49:fe:48:6b:33:47:b1:52:f2:38:b9:
         a1:3e:fb:e2:1f:f0:99:8b:b0:c3:cf:c3:1c:cd:d7:a0:94:9d:
         12:42:5c:0b:ed:29:67:5f:d2:a8:41:f5:18:91:f6:b0:12:06:
         6b:ab:6a:bf:69:2c:9f:1c:f0:60:93:4b:74:3b:12:ee:71:da:
         de:ff:82:49:5b:db:8a:a8:98:43:93:09:57:7b:65:0e:22:41:
         05:73:4e:bf:21:e5:11:4c:b9:4f:2f:f1:18:9c:2d:a4:50:ba:
         db:13:0b:e7:71:51:3d:15:d4:13:99:e4:98:a4:7f:70:ee:38:
         46:5e:92:49:5e:dc:1c:78:52:d5:93:47:21:10:23:e5:b7:c5:
         f2:2e:db:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:39:35 2024 by rpki-client on console-fra.rpki-client.org