Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/B9BE8D0659BE11EE8F460C79C4F9AE02.roa
File:                     B9BE8D0659BE11EE8F460C79C4F9AE02.roa (raw, json)
Hash identifier:          jPyurVfkc85baAwHPvIc7125qWCdlwHoxkJxd7xe8Gw=
Subject key identifier:   2C:BD:1D:3B:53:ED:B5:D0:3B:62:03:64:2C:E4:3C:CE:5F:B6:1A:CC
Certificate issuer:       /CN=A9131B40/serialNumber=99587BA9C7FFF6B6C599E94E0DCE47EB56BE6AED
Certificate serial:       04E5
Authority key identifier: 99:58:7B:A9:C7:FF:F6:B6:C5:99:E9:4E:0D:CE:47:EB:56:BE:6A:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mVh7qcf_9rbFmelODc5H61a-au0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/B9BE8D0659BE11EE8F460C79C4F9AE02.roa
Signing time:             Sat 23 Sep 2023 03:10:19 +0000
ROA not before:           Sat 23 Sep 2023 03:10:19 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     38136
IP address blocks:        103.142.130.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.crl
                          rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mVh7qcf_9rbFmelODc5H61a-au0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 May 2024 00:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1253 (0x4e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131B40/serialNumber=99587BA9C7FFF6B6C599E94E0DCE47EB56BE6AED
        Validity
            Not Before: Sep 23 03:10:19 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=650e571b-7675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8b:2e:6d:07:e2:25:ef:26:64:46:a3:8d:71:
                    e1:f8:90:71:3a:c4:0a:6d:fc:b8:44:59:c9:3a:87:
                    c2:73:e9:86:3a:04:26:8b:dd:d6:4e:c0:aa:32:58:
                    b1:4d:28:06:fb:e8:95:95:ea:2b:be:b2:bd:51:04:
                    1a:18:58:36:d4:db:d6:da:92:1b:bd:54:c3:e4:3d:
                    10:bc:3e:41:15:6d:16:64:3b:00:c6:04:bd:ad:23:
                    3e:c9:43:13:be:a4:fa:66:f9:bc:cb:ac:60:a4:f3:
                    8b:8c:91:b6:3d:1f:15:3e:00:0a:59:36:28:50:46:
                    d8:bd:59:5f:e4:0c:21:31:eb:ab:e2:f7:f0:62:e4:
                    0f:f3:ce:8c:f5:e7:20:93:80:d7:6a:ad:24:ae:31:
                    43:1c:2c:53:21:5a:f6:b6:f1:15:d0:ed:2c:8b:28:
                    4f:42:7b:dc:6a:1e:28:6c:e0:cf:37:68:ce:a1:42:
                    26:f0:36:c1:97:31:e1:42:3e:0f:59:b2:16:87:bf:
                    b7:ca:6b:26:46:c5:23:a7:9b:cf:c9:65:58:67:55:
                    ab:53:ec:fb:d7:d2:f4:6d:8b:a4:8c:db:a2:29:a9:
                    7a:57:2d:8b:13:91:7a:02:a1:c0:cf:8d:5f:75:e1:
                    95:d7:cc:28:2a:7b:a7:c4:0e:12:f1:6a:87:a5:07:
                    73:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BD:1D:3B:53:ED:B5:D0:3B:62:03:64:2C:E4:3C:CE:5F:B6:1A:CC
            X509v3 Authority Key Identifier:
                keyid:99:58:7B:A9:C7:FF:F6:B6:C5:99:E9:4E:0D:CE:47:EB:56:BE:6A:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mVh7qcf_9rbFmelODc5H61a-au0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/B9BE8D0659BE11EE8F460C79C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:6a:bc:91:1a:72:ce:4a:ba:62:07:45:82:03:7b:04:89:cc:
         24:40:ae:ca:0e:16:de:55:76:45:74:7e:6f:d9:21:16:0b:c5:
         7d:82:fb:b9:2d:6f:1f:78:36:e9:2e:52:d1:6c:44:a4:fe:59:
         c5:d1:95:e9:d4:71:7c:d9:67:a1:d2:9b:06:c7:10:8e:9c:1f:
         99:48:01:1c:5a:78:8f:c8:0c:7c:ab:d6:8b:43:50:26:14:e4:
         25:ac:ad:5e:fc:e5:f0:11:70:b4:cb:1a:74:23:f5:ef:54:bc:
         36:1d:c2:1b:cc:ed:85:15:e4:ab:87:bd:a5:bc:ca:44:99:fb:
         e8:80:5c:8d:ed:a4:c2:61:c7:d1:59:a9:04:4f:56:a2:0f:5b:
         b7:2d:e7:01:0a:b5:39:ef:38:13:5a:d0:21:7d:43:9b:3f:0c:
         c4:98:fe:27:41:cc:6c:13:9d:50:a4:7d:20:ad:7f:15:2b:ea:
         31:89:9e:55:0a:26:43:c7:07:95:39:40:4b:6e:cf:e2:4b:30:
         6a:db:30:7f:1b:e5:fa:de:2c:32:1e:3d:80:9c:35:d8:53:5a:
         4d:bb:36:f7:e2:ab:bb:20:48:b0:0a:55:c0:74:c6:70:72:a5:
         2c:25:ba:e6:4d:59:29:e9:43:25:ef:78:f1:4b:bc:c4:66:3d:
         59:bb:bf:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 01:46:58 2024 by rpki-client on console-fra.rpki-client.org