Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/141F86F437EA11ECA7D1B309C4F9AE02.roa
File:                     141F86F437EA11ECA7D1B309C4F9AE02.roa (raw, json)
Hash identifier:          sqwRRmaJwuQFiN3xLvOQrdUvxWPfQqgc0sMkOZ08KEg=
Subject key identifier:   43:AB:EF:10:9C:9F:80:A7:83:1D:66:36:1B:E5:F0:23:87:C5:71:B5
Certificate issuer:       /CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
Certificate serial:       0DA7
Authority key identifier: C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/141F86F437EA11ECA7D1B309C4F9AE02.roa
Signing time:             Fri 26 Apr 2024 18:37:25 +0000
ROA not before:           Fri 26 Apr 2024 18:37:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     137263
IP address blocks:        103.136.32.0/24 maxlen: 24
                          103.136.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl
                          rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 May 2024 18:35:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3495 (0xda7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
        Validity
            Not Before: Apr 26 18:37:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=662bf464-816e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:4b:1f:da:db:8c:d4:0a:85:c0:21:80:ab:9d:
                    24:82:5d:a1:6d:1b:f8:5b:36:74:45:c4:20:92:3a:
                    80:92:a9:48:46:1d:3f:87:19:b2:c1:31:54:34:c4:
                    67:be:4e:b0:70:66:94:37:4e:5b:d4:6a:df:ec:f4:
                    80:7c:c5:ff:4e:4a:52:bc:5f:e1:40:e6:2e:8e:7f:
                    3b:ff:ad:6e:7f:34:dc:84:b6:e3:2e:93:e3:b9:b1:
                    46:83:ce:fb:e0:ac:f4:02:a5:72:34:cb:aa:9e:c4:
                    e0:60:70:32:b7:fe:ae:a3:c1:0f:75:fb:72:b1:2f:
                    3e:f3:af:b0:66:14:e8:e8:6d:66:ff:7f:dc:18:84:
                    45:36:c1:6f:94:a9:90:15:a4:54:91:d7:e3:8f:95:
                    20:a2:06:6e:95:c5:fc:98:f8:3b:9c:d6:e6:34:5a:
                    71:92:9d:8c:ab:2f:cd:dd:31:70:8c:62:29:c2:f5:
                    3d:6d:fc:80:28:b2:d2:c6:3f:00:83:fe:64:5b:d3:
                    79:78:c5:f5:f8:61:8c:c8:1b:c4:73:43:a5:5a:79:
                    01:7c:a2:4e:3f:e1:a6:67:79:f1:5d:ac:de:cc:dd:
                    15:3f:cb:6b:40:ef:fb:06:99:9b:27:3c:f3:81:b8:
                    df:e7:5e:c8:20:31:6a:ea:bb:15:a9:d6:ab:d8:68:
                    90:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AB:EF:10:9C:9F:80:A7:83:1D:66:36:1B:E5:F0:23:87:C5:71:B5
            X509v3 Authority Key Identifier:
                keyid:C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/141F86F437EA11ECA7D1B309C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:64:eb:b5:09:85:61:20:ba:71:50:af:b1:00:29:b4:55:12:
         b4:9c:4b:49:85:51:21:59:31:7c:6b:f3:5f:b2:02:9b:f6:cb:
         09:e2:8a:ea:b2:f3:c5:37:ff:21:2a:d9:fc:9c:d7:a9:63:fb:
         9a:3c:15:c7:12:42:40:47:1a:40:37:51:9c:d5:a2:33:dc:e9:
         dd:fb:25:2b:90:ed:ff:1a:00:67:f9:72:65:62:5a:93:b3:f4:
         5d:ce:7a:a2:62:60:59:8d:12:27:7b:f2:74:c5:15:4f:74:a2:
         c7:05:16:e6:1b:76:9f:d8:2f:b5:b6:44:91:35:ac:cd:b0:a5:
         0d:14:51:b3:e2:ec:cd:f7:93:a6:43:4a:cf:d5:fc:26:32:7c:
         ff:b2:07:72:e9:c4:c4:55:6e:b8:26:10:06:7b:de:9e:58:77:
         21:b2:62:8d:8f:43:f9:86:7c:2c:d6:f2:42:78:c4:80:d4:0d:
         b7:d9:da:a8:b5:d1:dd:74:b4:b1:87:41:ea:95:1a:37:1d:2f:
         43:76:3e:2b:b0:dd:1c:1f:eb:73:e4:6f:09:46:87:13:bf:fe:
         e7:8e:7b:15:18:d4:0e:c6:45:2a:69:68:2d:f4:5a:61:0c:21:
         a4:9d:ee:0f:6c:9a:42:d9:0e:c2:3d:37:64:00:c5:5a:08:d9:
         bd:e7:10:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 19:20:04 2024 by rpki-client on console-fra.rpki-client.org