Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/BD6C86326AEC11ECB61ECF30C4F9AE02.roa
File:                     BD6C86326AEC11ECB61ECF30C4F9AE02.roa (raw, json)
Hash identifier:          pMYN1gxNifDL2LdQmKqpC3aYx3QFKCr7008509Ozo8Y=
Subject key identifier:   5D:4F:5F:FB:E2:7B:37:1D:E2:47:81:F5:CB:FD:78:28:F5:F5:38:87
Certificate issuer:       /CN=A9130128/serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5
Certificate serial:       035A
Authority key identifier: 2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/BD6C86326AEC11ECB61ECF30C4F9AE02.roa
Signing time:             Thu 02 May 2024 08:03:28 +0000
ROA not before:           Thu 02 May 2024 08:03:28 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     137403
IP address blocks:        103.178.242.0/24 maxlen: 24
                          103.178.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.crl
                          rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 858 (0x35a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130128/serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5
        Validity
            Not Before: May  2 08:03:28 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=663348cf-b032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:da:4e:13:09:bf:ef:e5:0c:b8:59:6c:ae:be:
                    a8:40:0c:bc:c9:b9:5c:c5:2a:35:1b:ca:dd:b3:ac:
                    df:80:b6:16:3a:d6:c8:a5:18:d3:8f:6e:da:33:e2:
                    e8:93:b2:ed:66:45:b9:a0:2d:4d:db:2a:17:e9:c2:
                    3f:78:64:ec:ed:af:b8:3d:4f:d7:7f:0f:66:17:97:
                    47:8a:6b:de:7c:4f:d2:86:a1:f4:86:d5:ae:3c:d6:
                    89:1d:a1:84:19:66:d7:cf:16:cb:5b:d6:3b:d8:48:
                    48:bb:09:c8:58:15:0a:41:ab:54:98:3a:ef:26:eb:
                    2f:90:68:19:21:08:3d:bb:05:75:80:d7:a9:d4:ae:
                    91:5c:31:b5:b6:41:67:01:a0:e6:a8:cf:ac:56:c0:
                    ac:ae:1c:5e:9e:f0:a5:dd:7d:fd:21:bf:73:52:68:
                    74:d0:d5:69:e2:2c:93:f3:27:85:57:49:63:74:15:
                    66:a9:b0:ce:26:4b:b6:e1:0e:0f:a2:2a:64:a7:f0:
                    87:f5:0d:cc:c1:61:49:48:19:7d:af:f4:b6:9e:dc:
                    c5:21:29:2d:1d:61:d9:6f:ba:c5:84:50:9b:df:27:
                    1a:7b:e0:51:33:d4:87:02:67:bf:06:69:90:e1:48:
                    65:c8:1a:66:34:ce:41:aa:21:e4:c2:78:e3:a3:dc:
                    92:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4F:5F:FB:E2:7B:37:1D:E2:47:81:F5:CB:FD:78:28:F5:F5:38:87
            X509v3 Authority Key Identifier:
                keyid:2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/BD6C86326AEC11ECB61ECF30C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:13:d3:99:93:04:4d:69:ee:39:62:6d:e6:f7:11:e3:e6:f0:
         d9:c3:bb:df:6d:20:e8:6c:62:ed:dc:cb:96:82:27:c3:29:c2:
         2b:ea:e4:4c:06:2d:43:4f:46:07:2b:a2:8e:c3:41:1a:07:03:
         b9:36:1f:48:d5:0c:3b:a0:ce:76:48:92:be:7d:29:ee:97:f3:
         02:7d:2c:a5:fd:ca:4a:e9:e7:de:85:dd:e2:d3:6c:1b:b4:93:
         e8:ec:c0:66:64:3c:c9:69:87:79:ae:a9:37:e2:f6:e5:1f:c7:
         72:6d:66:a4:b8:0e:e5:9b:81:d9:26:14:23:c4:67:f4:73:16:
         44:0c:c8:92:8f:4c:b0:75:94:8d:41:86:e4:d9:32:e9:f9:7f:
         7f:3a:c1:0f:75:d0:2f:ce:1a:5b:f4:09:d4:f4:6e:95:2e:20:
         5d:48:06:b8:26:ca:fd:bf:a2:26:90:22:de:6c:0d:86:bb:22:
         cf:71:8c:bc:66:68:5a:fb:e4:85:ae:0a:33:85:b3:c1:7c:ab:
         9f:ab:de:29:6c:24:bb:c8:c0:c9:75:05:d5:9f:44:31:ef:d2:
         24:14:2f:a9:5a:fe:d5:94:fd:d1:12:6a:e5:a4:71:52:c2:cd:
         97:ed:b6:ac:49:e3:7a:b9:34:e8:86:68:34:d8:cb:79:0d:3c:
         38:9f:26:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 03:49:54 2024 by rpki-client on console-fra.rpki-client.org