Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/64D427963D8B11EE80D1E96DC4F9AE02.roa
File:                     64D427963D8B11EE80D1E96DC4F9AE02.roa (raw, json)
Hash identifier:          gBIKs4XmMND7w0DU3kH9ZwUeTGqIQhJH8GYnsaSZqCg=
Subject key identifier:   C4:3F:CF:2D:65:19:1C:85:AD:47:8E:1B:B5:9E:5F:16:85:D3:BA:AE
Certificate issuer:       /CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA
Certificate serial:       85
Authority key identifier: E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/64D427963D8B11EE80D1E96DC4F9AE02.roa
Signing time:             Fri 18 Aug 2023 05:52:20 +0000
ROA not before:           Fri 18 Aug 2023 05:52:19 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     133534
IP address blocks:        103.234.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl
                          rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 05:33:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA
        Validity
            Not Before: Aug 18 05:52:19 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64df0713-d464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4f:67:c0:9f:2c:8a:cf:29:58:70:cd:55:c9:
                    6a:f9:22:19:b6:e0:7b:78:55:63:f3:98:41:97:5a:
                    6d:c9:26:63:15:23:99:4d:84:68:23:b6:64:5b:00:
                    a0:35:50:8a:d4:61:00:f8:74:a4:45:bb:73:ec:55:
                    dc:07:1c:03:87:a2:49:7d:0b:9d:d3:d3:0b:46:b2:
                    27:eb:fe:6e:1d:f3:2c:4d:09:52:fe:c0:7a:8c:c9:
                    7e:66:59:d2:b1:da:ba:e3:f5:02:c3:76:b5:e1:51:
                    90:df:55:b7:37:41:51:bd:8d:34:1a:a7:b4:e9:5a:
                    b3:e1:71:1b:6c:78:eb:96:42:f6:52:fc:31:05:a6:
                    11:35:ca:bf:05:a3:d7:cd:40:3d:6a:f7:5b:fa:aa:
                    ab:42:06:fc:7a:1a:f7:54:0e:69:da:f8:0b:34:5e:
                    09:34:e2:c5:be:fe:26:58:5c:fd:73:de:78:65:e8:
                    de:20:0e:53:f0:90:7c:6d:77:da:5a:f1:08:39:f7:
                    af:d3:4d:ee:4a:9e:c5:93:99:f2:27:9c:a5:19:0c:
                    ee:af:0c:6a:24:93:47:4a:f8:f2:1d:92:cd:b5:e0:
                    f1:8f:4f:bc:fc:b6:35:c6:0a:26:c5:0d:c5:39:38:
                    59:d4:eb:b7:8e:05:ef:eb:eb:6d:92:d8:3d:da:ff:
                    70:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3F:CF:2D:65:19:1C:85:AD:47:8E:1B:B5:9E:5F:16:85:D3:BA:AE
            X509v3 Authority Key Identifier:
                keyid:E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/64D427963D8B11EE80D1E96DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:72:0a:88:66:23:17:81:51:67:fc:bf:66:be:6c:b3:18:4f:
         ea:f2:e5:a8:4d:33:78:d4:6d:9d:79:3e:ad:92:59:0c:3a:63:
         3b:b0:0a:78:47:fd:7c:c4:82:67:90:48:77:ec:97:cc:97:3f:
         47:9c:70:b1:8d:d1:da:b5:54:32:9b:0d:27:ea:34:56:c4:d0:
         7f:7f:88:17:0f:94:b8:58:02:af:31:80:e2:d1:dc:40:34:b0:
         0f:16:96:71:65:37:36:85:51:b7:ba:1b:71:f6:34:c6:46:57:
         0a:f4:b6:74:81:ce:8e:db:14:f6:b2:10:64:71:aa:c6:14:65:
         b7:03:83:96:7a:e4:ef:fd:00:93:6e:73:76:a5:67:8a:b8:89:
         83:8e:e3:53:39:b3:6c:0f:f3:4d:84:6c:c2:05:12:33:14:98:
         40:eb:0a:8e:e8:46:ed:6b:2f:b6:68:1f:9e:66:6b:9f:21:13:
         52:00:17:33:91:8d:80:ce:43:6c:37:3a:d2:d0:03:54:ab:eb:
         17:71:65:7b:d3:d7:be:5e:a2:d7:1b:dc:3c:0a:b3:f1:f3:9e:
         dd:02:a9:af:4f:f8:e1:f4:59:c9:27:9d:19:aa:2a:48:84:3c:
         2d:37:9d:69:c9:fb:c1:3d:b0:35:83:33:a6:8c:13:79:b8:fa:
         9b:38:16:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:46:20 2024 by rpki-client on console-ams.rpki-client.org