Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/C9836F3A314C11EEB33F3686C4F9AE02.roa
File:                     C9836F3A314C11EEB33F3686C4F9AE02.roa (raw, json)
Hash identifier:          ZfmIY6qBamuTFcWcnnOhUOkgTdUVRtxdIetJEuqWEHg=
Subject key identifier:   44:B6:C5:40:B2:81:0F:B5:B4:BD:C4:C8:AB:68:2F:AE:90:E5:94:59
Certificate issuer:       /CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
Certificate serial:       04
Authority key identifier: 80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/C9836F3A314C11EEB33F3686C4F9AE02.roa
Signing time:             Wed 02 Aug 2023 15:54:45 +0000
ROA not before:           Wed 02 Aug 2023 15:54:45 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     142111
IP address blocks:        103.158.74.0/23 maxlen: 24
                          2401:1da0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl
                          rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
        Validity
            Not Before: Aug  2 15:54:45 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64ca7c45-86e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fc:6b:64:d4:0b:76:22:37:42:bb:d7:d2:7e:
                    6d:ca:76:48:45:3d:07:b3:63:ba:48:76:f6:a4:f3:
                    d4:0e:a1:05:71:62:55:56:8d:b1:c6:6a:ef:9a:d3:
                    e6:37:b7:f5:4e:62:d3:25:2c:52:f6:ff:70:e7:d7:
                    9a:36:d2:13:67:85:72:07:31:3e:32:88:35:72:7f:
                    50:1e:6f:13:db:54:00:27:48:f6:c0:4f:e7:5d:ed:
                    12:ca:77:5e:ba:d7:7f:94:f9:97:20:0b:cb:40:b8:
                    e9:12:cb:79:7a:ce:bf:6c:54:3e:04:1f:40:42:ce:
                    93:38:d4:3c:e5:f3:7b:c5:3c:3e:a0:31:eb:cf:04:
                    33:ed:5f:4b:81:9b:ed:33:93:13:f4:0f:30:8e:5c:
                    11:e3:4c:22:cb:32:9d:32:58:e2:b4:f3:72:6c:b1:
                    a5:07:6a:c8:89:2a:7b:20:d9:ea:55:a2:f9:ad:86:
                    c5:61:1e:a1:c9:2e:ba:84:f4:f2:4e:08:25:5d:11:
                    f4:fc:19:53:25:c3:3a:dd:2d:84:2f:bd:03:0c:24:
                    64:cd:fc:3c:f5:0f:ce:4e:b0:3b:57:ab:87:0c:97:
                    0f:51:2e:2b:da:6d:eb:68:c5:ac:e7:47:e7:cd:8e:
                    af:ca:77:2c:2f:ea:89:62:16:81:a5:4d:e4:47:c2:
                    35:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B6:C5:40:B2:81:0F:B5:B4:BD:C4:C8:AB:68:2F:AE:90:E5:94:59
            X509v3 Authority Key Identifier:
                keyid:80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/C9836F3A314C11EEB33F3686C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.74.0/23
                IPv6:
                  2401:1da0::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:5c:6d:72:35:8c:72:93:a8:1d:f9:3c:32:59:92:9e:b1:02:
         a6:2b:c9:44:ad:03:17:b7:ac:8a:14:7c:65:82:eb:a2:35:d7:
         e6:65:df:9e:e6:48:c7:60:9f:d7:1c:b1:e3:48:16:19:f4:22:
         49:b2:49:c9:e4:86:b9:ae:26:6d:41:05:2f:2a:74:fb:de:c7:
         b7:d4:5c:d2:ea:21:f2:5b:e9:3f:3b:d1:45:7e:c2:2a:b3:40:
         41:fc:44:d1:70:ff:15:ba:8a:1d:53:70:94:8a:24:0c:90:12:
         b8:cb:e7:d6:ee:ff:d0:85:16:4c:c6:8d:76:7f:1b:1e:e3:13:
         c3:b8:2a:86:6a:5b:49:73:39:ea:b1:cf:b3:da:46:a2:bd:8c:
         4f:73:09:9c:fb:ec:0a:4a:34:2f:f5:b8:7e:84:d5:d5:29:32:
         c7:e6:cf:37:f6:59:f5:06:5f:37:b1:05:32:38:60:48:e0:16:
         96:20:4f:c6:f2:c0:30:49:84:6e:5e:ee:00:53:e4:67:71:5f:
         aa:aa:37:b8:e6:8e:2a:00:eb:8f:b8:c5:82:1c:fe:c8:61:de:
         c9:cf:f6:d0:36:e9:fc:db:f4:03:75:04:f7:90:d7:a7:a5:71:
         bf:bc:b6:af:80:1f:f3:7a:cf:70:3a:6e:70:18:46:29:50:a3:
         3d:60:44:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:24:59 2024 by rpki-client on console-ams.rpki-client.org