Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/B82FA738111C11EBB805F52AC4F9AE02.roa
File:                     B82FA738111C11EBB805F52AC4F9AE02.roa (raw, json)
Hash identifier:          UvQSMfDXUem5+lf8IaHOf0vTqXsFnLhPIDxXf3hulrQ=
Subject key identifier:   3C:3A:E0:57:19:3A:C5:5A:1C:D3:64:31:FD:EB:E2:1C:C2:5B:1B:B6
Certificate issuer:       /CN=A912677F/serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E
Certificate serial:       095A
Authority key identifier: 36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/B82FA738111C11EBB805F52AC4F9AE02.roa
Signing time:             Sat 30 Dec 2023 20:38:21 +0000
ROA not before:           Sat 30 Dec 2023 20:38:21 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     139807
IP address blocks:        103.145.118.0/23 maxlen: 23
                          103.145.118.0/24 maxlen: 24
                          103.145.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl
                          rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Jun 2024 21:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2394 (0x95a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912677F/serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E
        Validity
            Not Before: Dec 30 20:38:21 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65907fbd-e67f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d8:3c:d3:03:cd:20:95:95:68:0f:12:af:2c:
                    a2:23:09:7b:85:9f:c5:fb:07:d8:f1:67:3a:48:fc:
                    b1:3f:cd:fd:3a:97:de:d5:0b:b2:7f:7a:08:57:54:
                    2e:48:e1:8b:c6:db:c3:b7:a5:a4:84:b4:13:b4:f0:
                    2e:69:7e:37:a4:54:c8:8b:bd:f0:c1:7a:b6:d9:1d:
                    48:3b:9b:81:4c:da:9f:ba:18:b0:2b:8d:21:fd:92:
                    86:49:a0:49:f6:94:44:a5:e2:c6:6c:94:d4:5c:da:
                    c3:69:57:1b:df:08:70:d0:e0:99:23:cb:1d:0f:26:
                    e3:cb:7c:21:30:6e:35:6e:3f:30:73:b9:6f:e9:e0:
                    c9:82:14:ea:02:93:39:8d:8a:c6:43:c1:09:b4:14:
                    4b:42:30:c6:25:4e:32:d1:a1:0c:1a:eb:ae:3b:a8:
                    db:ea:9c:0e:04:6c:43:be:dc:34:91:8c:a5:b1:79:
                    da:ae:34:5a:8c:57:6d:ac:1e:2e:f6:96:4e:48:bc:
                    c0:2e:22:3c:18:ca:74:2a:fd:03:43:e3:9b:f9:a3:
                    75:5c:f9:08:ac:1c:95:1a:53:6e:ef:2a:45:5f:64:
                    9e:76:59:b3:6f:c5:26:70:fd:33:c5:a4:23:f3:ef:
                    98:12:dc:b6:e6:e8:fc:2c:a6:ac:b3:cf:c1:6a:56:
                    33:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3A:E0:57:19:3A:C5:5A:1C:D3:64:31:FD:EB:E2:1C:C2:5B:1B:B6
            X509v3 Authority Key Identifier:
                keyid:36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/B82FA738111C11EBB805F52AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:9a:94:58:40:40:ac:7c:6b:5e:da:ed:8c:58:d3:88:3d:d2:
         b5:0d:58:40:3a:e7:be:ee:a6:4b:ba:37:73:b1:7d:9a:28:94:
         6c:00:d0:3b:7e:6b:ae:6a:84:0b:de:20:d7:1e:1a:3b:e3:ba:
         e3:af:6d:92:87:06:4c:ac:c4:90:e4:f6:db:8b:f1:95:cc:1a:
         97:34:9f:52:cf:0f:07:e8:e0:4f:f8:9d:fa:60:20:5e:45:e1:
         a6:5a:1a:26:cb:91:11:d0:19:55:3d:b7:b3:6d:8f:47:6a:52:
         db:21:ee:89:bd:bc:4a:8c:c2:89:6b:d4:2d:9b:22:2a:8f:10:
         a8:86:fb:5d:14:9c:cd:0c:a8:a5:19:f1:56:25:75:11:cf:06:
         a7:68:23:56:b1:3a:34:21:61:54:e6:ab:d1:f7:34:dc:50:04:
         41:83:98:19:71:ec:36:3f:45:bf:88:df:5f:03:3a:f5:e7:e7:
         be:75:8f:f5:78:85:d6:dc:8a:a8:d3:cb:ca:5b:86:e7:ff:79:
         61:b3:0c:84:ba:e0:a7:e5:5e:3b:7d:f5:b1:99:38:50:b3:f9:
         20:d0:66:73:0a:3a:24:ba:15:b4:d6:45:06:51:d6:c5:6d:20:
         9e:ad:68:bd:91:1b:4b:32:87:af:12:9c:b6:bb:c0:95:99:98:
         ff:26:e8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 21:40:09 2024 by rpki-client on console-fra.rpki-client.org