Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/38D5D8D0197111EE86688756C4F9AE02.roa
File:                     38D5D8D0197111EE86688756C4F9AE02.roa (raw, json)
Hash identifier:          S+GM/hI5DIbUGtBZ9+vBFOwWsIkF8lcgs3bgRA+/mHQ=
Subject key identifier:   0E:77:D6:8C:5E:07:03:0B:48:B6:E5:36:D9:35:EE:47:AB:B4:F0:95
Certificate issuer:       /CN=A912F76A/serialNumber=118B8361E44D50525CB61350B2526B59F6DE2DCD
Certificate serial:       02
Authority key identifier: 11:8B:83:61:E4:4D:50:52:5C:B6:13:50:B2:52:6B:59:F6:DE:2D:CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/38D5D8D0197111EE86688756C4F9AE02.roa
Signing time:             Mon 03 Jul 2023 07:14:17 +0000
ROA not before:           Mon 03 Jul 2023 07:14:17 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     151476
IP address blocks:        103.231.34.0/23 maxlen: 23
                          103.231.34.0/24 maxlen: 24
                          103.231.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.crl
                          rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 07:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F76A/serialNumber=118B8361E44D50525CB61350B2526B59F6DE2DCD
        Validity
            Not Before: Jul  3 07:14:17 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a27549-4f41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5c:da:a6:a2:0f:dc:8f:9a:55:bc:8c:e9:ca:
                    86:26:12:c5:40:32:af:32:fd:03:b4:35:00:fd:1d:
                    c0:98:2d:2f:38:0f:0c:8a:b6:0b:b0:a7:04:76:66:
                    f1:6c:de:0e:3f:1e:14:c5:32:ca:f2:4f:71:b1:5a:
                    62:2e:5e:08:c7:d1:3d:b9:44:35:c4:ea:5d:f6:4e:
                    37:62:fb:e6:db:64:55:f2:37:7d:d5:07:2c:da:c0:
                    e2:c4:62:bf:95:3f:47:26:cc:95:7a:52:05:88:c1:
                    91:61:d6:d7:3c:5d:95:ea:01:08:d9:e1:21:48:19:
                    75:26:d0:9c:42:ff:7e:81:6e:aa:35:ea:b1:9c:fa:
                    45:50:6c:07:02:e0:93:b0:e1:30:2d:b2:78:1a:33:
                    83:f3:e3:45:5a:8c:af:7f:e8:7d:83:36:25:88:70:
                    00:02:b1:57:44:35:66:ab:1c:2f:ae:06:6d:24:8a:
                    f4:56:1c:03:8c:de:61:da:af:f3:bf:64:0e:ab:b5:
                    a6:f2:1a:39:36:71:40:81:a5:47:43:4f:a1:56:4d:
                    5e:35:51:2e:cc:e2:a2:2d:ef:68:e1:f3:de:ec:1e:
                    17:a9:64:30:33:82:0a:c9:b6:b4:d0:4f:f9:69:7f:
                    90:a9:ae:aa:03:c9:2f:57:13:a5:b7:e6:14:56:46:
                    b4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:77:D6:8C:5E:07:03:0B:48:B6:E5:36:D9:35:EE:47:AB:B4:F0:95
            X509v3 Authority Key Identifier:
                keyid:11:8B:83:61:E4:4D:50:52:5C:B6:13:50:B2:52:6B:59:F6:DE:2D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/38D5D8D0197111EE86688756C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:27:08:f1:51:2b:a6:be:3a:1b:5a:31:27:ab:c8:f9:d0:7e:
         f4:b8:da:ec:06:55:27:7f:b3:82:85:e2:bf:5f:b7:d9:91:ae:
         90:27:da:02:2b:92:6f:9c:e6:83:91:dc:cb:10:18:ac:2b:bc:
         1f:4a:6b:3f:d4:a1:f1:7b:da:03:40:61:75:83:53:47:14:75:
         46:8a:48:fe:dd:28:3c:89:bf:ce:a8:32:b3:60:88:2f:dd:26:
         3f:55:df:ab:22:aa:bf:a1:89:c5:14:1f:ea:a1:b3:d9:2e:d4:
         7e:12:0d:8a:09:64:0a:8f:73:04:00:b3:76:60:7f:e9:ca:49:
         95:30:38:c5:57:68:ca:c0:f1:98:71:46:1a:4b:99:94:d4:61:
         7a:fa:7d:a6:fd:8f:cc:57:da:34:2d:cf:63:1a:ec:92:af:ae:
         e4:0a:8f:a9:8e:cf:8d:ec:45:28:a2:5f:67:7c:ce:57:ff:bc:
         7b:bf:b8:64:e4:92:53:12:a6:a3:28:7d:eb:1e:48:d3:25:df:
         b5:e2:9b:7d:2b:14:ed:76:28:7d:21:10:77:30:e3:f4:e2:ee:
         08:05:bd:99:15:c0:82:27:32:7f:88:2d:cd:05:b7:07:c6:1e:
         18:a5:77:3c:45:96:9b:f9:81:7c:6a:35:05:7a:35:74:2e:71:
         fa:88:62:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:29 2024 by rpki-client on console-fra.rpki-client.org