Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/38D5D8D0197111EE86688756C4F9AE02.roa
File:                     38D5D8D0197111EE86688756C4F9AE02.roa (raw, json)
Hash identifier:          kzi0KQ9ZEMCUP2vXFdh+HmBpVIrIEaO/65LeWyh5tmM=
Subject key identifier:   EF:5A:F4:F2:09:EC:B8:F3:1E:79:25:E6:6C:FE:D7:1B:34:7B:54:00
Certificate issuer:       /CN=A912F76A/serialNumber=118B8361E44D50525CB61350B2526B59F6DE2DCD
Certificate serial:       0105
Authority key identifier: 11:8B:83:61:E4:4D:50:52:5C:B6:13:50:B2:52:6B:59:F6:DE:2D:CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/38D5D8D0197111EE86688756C4F9AE02.roa
Signing time:             Fri 15 Nov 2024 03:26:52 +0000
ROA not before:           Fri 15 Nov 2024 03:26:52 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     151476
IP address blocks:        103.231.34.0/23 maxlen: 23
                          103.231.34.0/24 maxlen: 24
                          103.231.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.crl
                          rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F76A/serialNumber=118B8361E44D50525CB61350B2526B59F6DE2DCD
        Validity
            Not Before: Nov 15 03:26:52 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=6736bf7b-8627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a0:c2:bc:3d:b6:72:8e:14:36:37:ca:f2:16:
                    a3:4c:c2:0a:ea:c6:2c:d3:25:81:23:15:4c:4b:5d:
                    42:79:53:40:19:9c:30:b3:ae:00:60:7e:5d:e5:31:
                    17:87:ca:e9:8d:86:40:bb:47:34:74:13:ec:f2:75:
                    45:65:1b:92:c2:c1:e4:c1:54:0a:58:4d:a3:f8:29:
                    f7:21:d4:02:a9:ba:32:a7:ba:70:13:71:f8:dd:a6:
                    1a:5e:6a:f7:4b:ae:92:ad:44:26:c1:b8:f3:cb:f0:
                    4c:09:ac:95:1a:dc:66:c0:72:f4:25:5c:c1:b5:7b:
                    0d:75:51:33:9d:00:a4:e6:eb:41:f1:a2:34:49:b9:
                    7a:f8:94:8f:ef:36:30:9f:43:6a:73:1b:22:0f:6c:
                    07:02:24:79:73:4c:23:92:e1:61:84:fe:ba:d8:a4:
                    de:d3:21:8c:cc:73:84:ff:6f:0e:66:ef:09:f6:e6:
                    b1:76:c9:c2:c8:ec:b1:4c:16:2e:c9:c3:63:a7:b2:
                    b2:8e:73:0d:ea:7c:5d:a2:4d:5f:b5:c5:67:9a:fd:
                    28:93:b6:13:b1:28:c9:a4:be:56:27:33:62:fe:ac:
                    a2:02:0c:1c:f2:b6:dc:c0:be:a2:57:8a:1f:3b:5d:
                    23:ef:43:eb:2f:11:1f:a1:56:aa:2e:b6:59:d4:fa:
                    c9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5A:F4:F2:09:EC:B8:F3:1E:79:25:E6:6C:FE:D7:1B:34:7B:54:00
            X509v3 Authority Key Identifier:
                keyid:11:8B:83:61:E4:4D:50:52:5C:B6:13:50:B2:52:6B:59:F6:DE:2D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/38D5D8D0197111EE86688756C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:e4:33:e9:a5:14:e1:2a:0f:11:a0:e7:36:ba:0a:d1:5d:bc:
         2f:c7:3e:0a:e4:f0:93:22:ec:01:78:c9:fd:d4:57:3a:87:5a:
         e9:cc:63:43:b9:1d:3f:96:2a:43:f4:6e:e1:fa:ab:1d:a5:3b:
         98:d8:07:0c:11:0d:24:c1:41:b6:1f:ec:56:46:c3:66:a7:72:
         72:a6:da:c7:f9:13:c0:30:68:b0:96:bf:01:ef:24:94:d1:d5:
         80:bc:f4:13:1a:80:1f:15:d1:71:3d:4a:ca:d3:85:3c:40:15:
         ba:bc:fe:57:bb:85:fe:88:d8:23:ca:12:05:50:b8:c9:58:29:
         d0:c4:a1:d4:84:ea:b1:e5:71:9c:f2:f1:15:97:84:d4:e3:af:
         f9:e5:2c:90:62:10:fc:e5:24:62:6b:13:f6:8a:07:2f:b8:1c:
         ba:75:63:23:ee:fe:05:b3:30:51:e8:8a:36:10:93:9a:3d:4e:
         66:49:43:3f:e7:a8:df:3e:86:2f:0f:50:04:62:06:5f:33:97:
         b7:89:9b:7e:00:48:f7:44:8f:fe:13:ee:88:3f:2f:80:8b:48:
         62:b8:59:35:38:3e:a4:4c:36:3d:78:3d:d1:2d:eb:6a:95:78:
         47:86:d0:57:93:2d:70:cc:04:90:b6:a7:58:7f:98:2f:51:a5:
         fe:0e:3b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:46 2024 by rpki-client on console-fra.rpki-client.org