Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/F47561669C3B11EABC59DA11C4F9AE02.roa
File:                     F47561669C3B11EABC59DA11C4F9AE02.roa (raw, json)
Hash identifier:          4YobdsxDwRIrk/z/bKC20Bc3suxWt2VmXdAQxoroaO4=
Subject key identifier:   7E:62:36:37:45:63:7A:66:3D:BF:1C:24:A4:D5:D5:9B:E5:D5:9E:4C
Certificate issuer:       /CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
Certificate serial:       0F5A
Authority key identifier: 5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/F47561669C3B11EABC59DA11C4F9AE02.roa
Signing time:             Thu 08 Feb 2024 18:16:00 +0000
ROA not before:           Thu 08 Feb 2024 18:16:00 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     138576
IP address blocks:        103.136.184.0/24 maxlen: 24
                          103.136.185.0/24 maxlen: 24
                          103.136.186.0/24 maxlen: 24
                          103.136.187.0/24 maxlen: 24
                          2404:9ec0::/32 maxlen: 32
                          2404:9ec0:100::/48 maxlen: 48
                          2404:9ec0:101::/48 maxlen: 48
                          2404:9ec0:102::/48 maxlen: 48
                          2404:9ec0:103::/48 maxlen: 48
                          2404:9ec0:104::/48 maxlen: 48
                          2404:9ec0:105::/48 maxlen: 48
                          2404:9ec0:106::/48 maxlen: 48
                          2404:9ec0:107::/48 maxlen: 48
                          2404:9ec0:108::/48 maxlen: 48
                          2404:9ec0:109::/48 maxlen: 48
                          2404:9ec0:110::/48 maxlen: 48
                          2404:9ec0:111::/48 maxlen: 48
                          2404:9ec0:112::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl
                          rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 18:14:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3930 (0xf5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
        Validity
            Not Before: Feb  8 18:16:00 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65c51a60-8162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:61:91:32:1a:39:02:0d:9c:b2:c1:5a:6e:ee:
                    01:b8:a0:45:05:75:00:34:5a:cf:f0:fe:bb:ce:c7:
                    6d:ab:83:17:00:78:f0:e5:5e:e4:e0:ee:d0:4e:97:
                    dc:c7:65:dc:9c:1e:70:6a:42:61:89:85:ce:49:60:
                    7c:f9:12:02:62:f9:9f:44:fc:4e:71:58:61:93:59:
                    b4:c8:59:38:23:8b:3a:fc:1a:26:d2:2c:e6:fb:e7:
                    51:e1:11:60:f0:3b:76:4e:b2:0d:0c:cb:4b:83:32:
                    94:ae:e7:32:fb:9f:cd:ef:ea:26:37:24:e4:9d:1e:
                    51:ce:cd:13:6c:3f:48:1c:73:32:29:62:2f:e4:65:
                    ca:60:0e:f3:e9:a2:3f:ae:33:38:1d:74:15:e4:4e:
                    44:4b:db:70:ab:57:10:3a:80:58:b2:85:2a:d7:19:
                    d3:de:e8:f2:83:01:df:83:09:16:86:54:5b:fe:54:
                    15:e6:28:d1:9a:ac:32:d3:9f:67:43:eb:98:40:14:
                    67:de:62:2d:c6:a5:77:5c:a0:b7:e3:99:71:b0:9e:
                    53:37:c6:88:18:37:fc:8a:be:07:78:5e:37:d6:86:
                    94:d9:4e:4b:46:b1:bd:02:91:98:6d:78:77:c0:35:
                    b9:20:82:62:40:f5:d1:a4:a2:d4:0c:81:66:1d:03:
                    04:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:62:36:37:45:63:7A:66:3D:BF:1C:24:A4:D5:D5:9B:E5:D5:9E:4C
            X509v3 Authority Key Identifier:
                keyid:5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/F47561669C3B11EABC59DA11C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.184.0/22
                IPv6:
                  2404:9ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:83:85:ec:b7:bd:14:88:53:4c:55:75:04:9a:10:fa:61:73:
         40:64:64:56:44:da:72:36:ca:4c:42:33:70:0e:d2:d3:b5:fa:
         d4:b7:fc:4e:f4:c1:fe:f7:cb:97:9d:05:f7:6e:1a:92:01:bd:
         51:a4:2d:a1:5b:ac:01:3e:b8:b6:b4:0b:6b:53:28:b4:28:9b:
         68:0b:e8:7d:13:c2:b3:81:92:ff:c3:f8:88:65:62:69:a3:5e:
         1f:e9:3b:3e:07:ca:db:08:73:1a:6e:ea:41:80:ae:bd:cf:c6:
         d1:b6:ab:98:57:e4:24:72:c4:0b:1f:15:dd:0d:70:ea:9f:13:
         8f:ac:e1:b9:18:08:75:38:49:88:05:81:cf:d0:15:de:28:cf:
         1f:fa:ec:e3:da:c5:35:8c:75:9d:a2:1b:87:4a:54:fa:68:90:
         36:32:36:c2:69:2a:a4:b4:3a:01:7b:f7:0c:e2:c0:0e:f6:a9:
         b1:ce:06:20:d8:1a:7e:3b:30:39:89:2b:f0:a3:bd:7d:19:fb:
         1c:cd:94:3a:c2:1f:72:7c:44:e6:34:63:ee:ab:57:fe:fc:f1:
         5a:b2:a6:a5:e6:ae:68:84:5d:60:de:4e:10:1b:9d:c3:39:bd:
         83:d1:58:3a:a9:84:21:e8:da:8a:1a:35:8b:58:88:21:86:de:
         43:85:5f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:18:32 2024 by rpki-client on console-ams.rpki-client.org