Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B3682FEC21D711EB9CFAC46EC4F9AE02.roa
File:                     B3682FEC21D711EB9CFAC46EC4F9AE02.roa (raw, json)
Hash identifier:          Ox9R9PiD8T0HlZTCVj50DkgG3vmsXlU+75pqLoh4Z1Y=
Subject key identifier:   8C:61:3D:CB:BA:15:A8:37:0A:FD:A5:1D:8A:ED:A8:BF:41:57:81:D3
Certificate issuer:       /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
Certificate serial:       0EBF
Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B3682FEC21D711EB9CFAC46EC4F9AE02.roa
Signing time:             Tue 26 Mar 2024 18:36:42 +0000
ROA not before:           Tue 26 Mar 2024 18:36:42 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     18013
IP address blocks:        103.133.176.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl
                          rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3775 (0xebf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
        Validity
            Not Before: Mar 26 18:36:42 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=660315ba-9f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:60:1d:7e:bb:03:7c:f5:46:e8:b5:08:6e:ac:
                    3e:e4:0a:b8:63:86:cc:d6:ce:b3:ed:89:7f:dd:d4:
                    f1:ab:6b:0d:b6:45:3c:f3:13:54:d3:c8:30:fe:af:
                    7c:a0:01:05:39:38:5e:10:b8:ff:3c:18:8a:15:23:
                    45:fe:bf:52:67:8f:49:02:39:8b:4f:54:28:1d:67:
                    d0:0a:90:c7:97:0a:4c:5c:95:15:ea:8e:4b:ea:d0:
                    79:bb:44:a8:e3:16:bb:f0:ec:b8:ed:b1:2d:11:a3:
                    60:76:e9:4b:fc:11:0d:47:3b:17:17:66:f4:d8:a5:
                    50:6b:73:db:94:1b:9d:71:5e:ac:cd:29:20:57:a1:
                    70:3b:43:83:cc:40:ce:fe:7f:c2:f5:06:22:05:c1:
                    7d:f3:01:b3:c3:46:b5:c9:ba:b2:08:fe:f0:f8:bc:
                    9c:04:61:50:9f:9b:21:e3:3a:26:46:c9:3b:e1:7b:
                    ab:69:08:5b:89:dc:33:65:ed:07:9a:8c:3b:fa:f5:
                    5b:7d:27:e3:03:0c:8e:78:4b:37:27:9f:d6:8d:43:
                    b3:64:42:10:01:98:08:fa:d5:ed:b8:24:d4:d0:5c:
                    35:01:40:96:ce:7d:6e:ec:91:0e:2e:55:7e:da:82:
                    e6:1c:a6:5f:f8:1d:d4:1f:ff:a4:83:14:33:4b:1e:
                    9a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:61:3D:CB:BA:15:A8:37:0A:FD:A5:1D:8A:ED:A8:BF:41:57:81:D3
            X509v3 Authority Key Identifier:
                keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B3682FEC21D711EB9CFAC46EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:f9:bc:e5:c2:4b:85:ab:1b:76:57:8a:f4:99:27:1e:4b:a1:
         f2:61:e5:f1:89:5d:f4:d8:65:4c:bd:7f:00:15:6c:cd:e4:e8:
         06:b7:a5:20:e4:2e:4c:fd:d6:ca:c4:cd:a7:14:b8:de:c5:4b:
         61:81:e8:f5:c9:83:3b:b7:b4:27:a7:19:48:ee:8f:e4:ad:a7:
         b8:5a:cd:8c:77:6b:fd:d6:0b:c6:bd:b5:38:c2:98:ca:1e:c9:
         e6:3a:46:19:c3:e3:28:c0:30:10:af:9f:38:c1:8a:fd:69:7f:
         bb:1e:78:97:11:cf:63:b8:40:10:d7:cd:55:77:9b:45:ea:25:
         3e:50:35:25:4d:2e:5f:2a:ec:28:86:9a:c6:ea:a1:0b:25:6b:
         04:74:98:67:05:5f:0a:b6:29:7a:ff:ac:b9:ae:2a:fa:ec:28:
         91:64:67:00:c6:b2:a6:e6:68:07:40:06:1e:18:0f:c9:25:69:
         7b:7a:44:59:f6:1e:20:05:8f:68:f5:1a:cf:7e:19:10:9b:23:
         f4:2b:26:69:5e:2b:c5:a7:11:65:85:5a:8e:2b:58:1a:bc:a3:
         f0:b2:00:c9:8c:6a:bb:44:f4:cf:09:c9:7b:e6:79:82:52:c9:
         0f:93:dd:64:c9:56:5b:49:28:d2:75:61:b2:2b:26:43:69:32:
         b9:67:cc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 18:46:45 2024 by rpki-client on console-fra.rpki-client.org