Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/9F7C20921ADD11EC80226B61C4F9AE02.roa
File:                     9F7C20921ADD11EC80226B61C4F9AE02.roa (raw, json)
Hash identifier:          WaJSz9699pG7qcLaxQ6AJA6vMlt4Fr0cRL3epnSQT5E=
Subject key identifier:   5A:CA:C9:5B:2D:EB:22:A4:D9:B1:4E:A4:BE:52:12:1B:DD:69:84:61
Certificate issuer:       /CN=A91283E7/serialNumber=30F2DC001BD658CD163E23771F41476972E0D14F
Certificate serial:       037E
Authority key identifier: 30:F2:DC:00:1B:D6:58:CD:16:3E:23:77:1F:41:47:69:72:E0:D1:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/9F7C20921ADD11EC80226B61C4F9AE02.roa
Signing time:             Sun 09 Jul 2023 01:01:10 +0000
ROA not before:           Sun 09 Jul 2023 01:01:10 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     136735
IP address blocks:        103.94.207.0/24 maxlen: 24
                          103.163.5.0/24 maxlen: 24
                          2001:df1:8700::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.crl
                          rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 00:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 894 (0x37e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91283E7/serialNumber=30F2DC001BD658CD163E23771F41476972E0D14F
        Validity
            Not Before: Jul  9 01:01:10 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64aa06d6-8579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:92:e2:f6:25:20:c8:82:b4:87:ef:ef:e2:86:
                    65:27:b5:39:cc:20:3e:3c:19:83:8f:88:c5:86:d9:
                    c9:23:94:6e:34:81:e3:5b:84:a2:97:de:30:d2:99:
                    e8:02:f2:17:65:57:d4:1c:c7:3c:c1:7e:7a:a5:ee:
                    4f:4f:59:65:9f:3f:4e:99:16:7f:3b:6d:14:03:18:
                    fa:50:67:38:bf:ff:69:5e:e0:4d:d8:9b:19:23:19:
                    30:f2:32:8c:ca:79:96:1a:92:98:19:57:2c:2f:5e:
                    d2:5f:92:a9:c2:7d:6a:ad:cb:e0:e8:bc:7c:5b:0e:
                    1b:73:76:79:47:67:4a:f1:98:65:e9:5c:39:03:4f:
                    3a:d4:aa:e6:47:e8:16:28:9a:9b:f9:56:55:95:37:
                    33:4e:88:49:51:d8:94:2a:44:c8:a4:ee:d3:ae:6e:
                    6d:f2:58:10:7d:b3:61:19:8a:89:19:2a:a4:82:1c:
                    0e:72:52:c5:90:a1:10:c2:f8:bb:d0:f8:4c:68:d7:
                    de:68:8a:72:03:61:20:72:66:69:a0:2f:dd:60:ed:
                    01:d7:17:6b:d5:c5:f5:de:49:b2:52:9b:61:21:e2:
                    be:d7:48:15:f4:c6:68:e2:55:a2:3a:b4:2d:e7:63:
                    23:6a:71:29:0d:4d:f2:d6:6e:dd:23:dd:41:85:be:
                    82:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:CA:C9:5B:2D:EB:22:A4:D9:B1:4E:A4:BE:52:12:1B:DD:69:84:61
            X509v3 Authority Key Identifier:
                keyid:30:F2:DC:00:1B:D6:58:CD:16:3E:23:77:1F:41:47:69:72:E0:D1:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/9F7C20921ADD11EC80226B61C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.207.0/24
                  103.163.5.0/24
                IPv6:
                  2001:df1:8700::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:0f:0c:ee:29:35:02:fe:64:52:c4:81:2a:dc:9e:2c:72:ee:
         8d:a5:e1:1e:50:4a:a9:d0:fc:96:e2:ff:4d:fa:01:62:26:25:
         c7:7c:23:65:9c:be:aa:26:31:ad:12:73:a4:b6:ed:93:5f:a1:
         38:a8:30:c6:34:e2:be:7a:a2:97:10:79:78:c7:78:cd:44:9f:
         62:c9:b5:fd:b8:4a:3d:5c:bf:d8:c4:a1:12:a3:5d:b3:f7:ab:
         a0:5a:44:02:46:ab:d1:7e:eb:6a:3f:94:ae:f8:90:fd:45:9b:
         9c:52:4c:d1:b0:41:3b:0b:79:7e:b8:15:2a:f5:d9:83:17:96:
         ef:db:ac:45:5d:02:a7:93:e5:80:a6:9c:9e:59:93:45:60:58:
         dd:00:1c:5a:c2:be:30:95:6a:57:c7:f4:ac:3e:49:35:dd:bf:
         24:92:df:8e:44:9a:b5:a5:35:0b:11:02:f1:44:6d:26:32:53:
         4c:0a:55:92:f3:4c:39:9a:66:6c:b9:55:5d:63:59:54:f3:bc:
         48:9e:b5:c8:d0:a9:23:2a:a5:cb:82:33:5d:cd:8f:a9:52:37:
         43:29:65:93:7b:e2:56:81:fa:c3:d8:53:72:54:56:05:33:b6:
         96:20:4a:0d:71:ed:b3:b1:c5:77:1e:5b:3d:70:b5:94:0f:48:
         89:6c:3b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 02:57:01 2024 by rpki-client on console-fra.rpki-client.org