Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/738195EEB11811ED997EA457C4F9AE02.roa
File:                     738195EEB11811ED997EA457C4F9AE02.roa (raw, json)
Hash identifier:          Y3uWvVWc5h8AjMOh0rbq998afPQd3Tj5ztFh5AezKOE=
Subject key identifier:   22:43:E2:8B:A8:D9:F4:27:21:98:F8:64:BF:FE:1D:31:20:1A:C2:ED
Certificate issuer:       /CN=A912E367/serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE
Certificate serial:       0111
Authority key identifier: 26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/738195EEB11811ED997EA457C4F9AE02.roa
Signing time:             Thu 25 Jul 2024 04:45:51 +0000
ROA not before:           Thu 25 Jul 2024 04:45:51 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     134926
IP address blocks:        103.189.88.0/24 maxlen: 24
                          103.189.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl
                          rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 02:24:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E367/serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE
        Validity
            Not Before: Jul 25 04:45:51 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a1d87f-62b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5e:99:09:66:e5:84:8a:ba:62:3e:89:2a:6d:
                    da:ea:66:0e:88:7c:5d:e9:1a:21:4f:e7:f0:50:9d:
                    aa:1d:4d:83:80:b0:45:bd:d5:f9:ce:e2:ef:da:c2:
                    ca:37:ad:5f:20:5d:c1:59:63:38:4a:e8:c8:f6:2c:
                    74:56:b3:0d:0b:e2:7e:0e:73:45:05:d3:15:db:c7:
                    80:0e:37:22:5a:16:f1:ad:c3:e0:95:d4:56:c0:1c:
                    ea:75:75:4e:ae:c8:e8:85:e1:a9:7b:53:a0:83:39:
                    4a:0c:93:66:ed:bf:16:e6:50:3d:8f:be:02:e7:a9:
                    98:5a:dd:49:5b:35:6f:77:31:b5:2c:aa:01:a7:7d:
                    35:4e:9f:c3:45:87:5b:98:92:a8:6f:d9:f2:23:0e:
                    f1:9f:57:df:93:f2:e1:61:9a:67:a0:72:d8:79:af:
                    b0:aa:3e:70:e2:44:55:3f:e7:52:6c:61:79:8e:56:
                    0d:32:c2:4d:51:af:82:48:35:10:8b:a5:8e:d8:9a:
                    af:75:3f:c1:d5:61:6c:08:4b:50:0c:19:5b:99:98:
                    16:87:5a:e2:04:26:a2:b1:30:cb:02:a1:9e:16:6e:
                    6e:94:71:65:c6:81:60:c1:7c:bc:a2:27:4c:95:a2:
                    ee:a0:f9:dd:be:2c:24:5d:62:6a:47:9a:f7:af:33:
                    15:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:43:E2:8B:A8:D9:F4:27:21:98:F8:64:BF:FE:1D:31:20:1A:C2:ED
            X509v3 Authority Key Identifier:
                keyid:26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/738195EEB11811ED997EA457C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:27:c5:b6:90:0a:ca:8e:3b:72:f0:c2:f0:d8:4b:7c:73:91:
         18:ed:e3:0f:79:ea:3d:6e:e5:ae:c9:40:85:3a:84:e4:be:ca:
         d2:f7:71:32:d4:25:2c:35:a7:39:d6:fc:ab:76:7d:64:99:93:
         a5:e0:26:66:b8:dd:ba:80:92:8c:a3:2f:e0:79:47:2f:0a:39:
         0e:87:1c:95:95:28:71:64:79:72:2d:98:ac:ff:9e:a9:8a:b6:
         53:88:94:63:35:2d:99:40:55:c1:e1:9e:75:fb:86:9a:30:2f:
         2c:bc:45:26:68:dc:1a:a6:f1:29:99:03:c2:15:21:df:e8:28:
         01:fd:8c:55:e2:7b:21:44:63:4f:4d:f3:0b:ed:23:7e:e3:45:
         1d:d0:dd:11:82:20:1f:bd:8c:01:c3:86:15:d4:c6:5f:1c:1b:
         e3:18:74:b2:95:d5:96:9e:54:9e:29:06:7e:03:35:53:14:9f:
         91:01:f1:1d:ae:59:bb:f3:ef:7b:02:e3:64:e0:b9:a9:4d:20:
         04:48:be:1c:b1:a3:48:d6:7c:ad:7c:38:ec:1e:a0:52:8a:e6:
         9c:79:b4:ef:1d:11:ec:81:b7:6f:71:cc:ec:1e:3d:46:1b:bd:
         f8:7d:f3:92:89:c0:88:20:47:9d:0b:09:bd:6c:36:e8:4c:d6:
         8a:9a:d3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:54:29 2024 by rpki-client on console-fra.rpki-client.org