Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/D34372461C8D11E9B21BD858C4F9AE02.roa
File:                     D34372461C8D11E9B21BD858C4F9AE02.roa (raw, json)
Hash identifier:          Rh7aJ4hIvXLuEuUFgVNnC6P+3//xGQ+N4X6CdgBcs2w=
Subject key identifier:   B1:FA:3A:55:E0:2B:01:36:6E:A5:16:6F:75:C7:B7:40:1B:A1:CB:17
Certificate issuer:       /CN=A9133953/serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
Certificate serial:       1780
Authority key identifier: 1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/D34372461C8D11E9B21BD858C4F9AE02.roa
Signing time:             Mon 12 Feb 2024 17:04:40 +0000
ROA not before:           Mon 12 Feb 2024 17:04:40 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     136184
IP address blocks:        103.83.89.0/24 maxlen: 24
                          103.83.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl
                          rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6016 (0x1780)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133953/serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
        Validity
            Not Before: Feb 12 17:04:40 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65ca4fa7-9181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:12:07:d3:f6:be:a1:4d:20:0f:39:e6:61:0f:
                    b0:ad:01:c5:84:f9:7e:e5:57:76:32:73:6a:89:f9:
                    9d:0e:1d:7f:d5:a2:06:da:93:85:6b:d8:a0:f2:a7:
                    2b:a5:06:87:93:47:3a:f8:7a:d6:0e:a7:ef:f8:6b:
                    43:c3:31:38:af:56:4b:eb:2d:3f:30:e3:04:5f:e2:
                    41:15:97:df:10:94:5d:74:eb:a4:fd:d6:70:86:95:
                    57:72:ae:a4:d7:f7:6b:65:25:f4:3e:14:64:81:ca:
                    96:de:ea:65:24:24:82:56:57:ac:01:52:c4:1b:90:
                    4b:b1:07:7c:e3:63:11:71:46:15:12:3b:2f:42:57:
                    a0:6c:f2:65:c6:5a:1b:22:d9:95:b0:74:e3:03:a0:
                    6a:47:c9:b2:8a:1f:41:70:fe:51:4d:0d:68:8e:c7:
                    32:d6:f0:f1:28:22:86:ff:2f:64:a9:ed:0f:15:aa:
                    74:b8:37:a4:5e:30:6b:c0:73:ce:bf:b1:13:aa:5f:
                    79:f1:44:25:0a:b6:0d:73:47:1b:6e:22:d7:49:af:
                    fd:2d:7a:cc:fc:19:78:72:f6:be:a2:f4:98:d8:f9:
                    09:43:e8:ce:cb:43:65:42:c4:d9:ab:fe:ca:72:bb:
                    70:7c:79:98:1d:c7:9a:c2:7e:11:b5:83:f9:8d:6e:
                    ae:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FA:3A:55:E0:2B:01:36:6E:A5:16:6F:75:C7:B7:40:1B:A1:CB:17
            X509v3 Authority Key Identifier:
                keyid:1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/D34372461C8D11E9B21BD858C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.89.0/24
                  103.83.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:e1:84:3f:21:07:5e:6d:03:62:c0:00:ec:df:6f:58:31:ea:
         de:3d:a7:d3:c8:17:4d:df:9c:5b:78:06:d4:d9:22:d6:bd:6e:
         66:69:a0:45:02:0b:76:38:d7:50:31:a5:80:b1:81:b4:f1:6c:
         24:ae:fb:21:5c:4f:31:bd:bd:0f:c6:71:a1:e0:1c:d8:a8:99:
         95:a2:f7:f9:a5:92:c4:65:6e:9f:1c:71:52:61:c7:b9:f9:ee:
         48:9a:6d:0e:f9:b0:31:50:1e:ee:3b:27:98:eb:50:8b:ee:a8:
         75:12:2d:37:b6:70:6f:46:21:a2:90:3e:3d:4a:06:ca:9e:b5:
         81:25:ee:f9:65:cf:62:a5:d3:94:9e:42:81:5c:51:e6:d2:1e:
         d5:55:f2:40:09:85:a2:fa:d1:4e:33:63:7e:56:91:7c:ca:14:
         e3:10:84:56:1b:87:9e:ec:01:b5:e3:6b:9b:71:59:7c:73:36:
         a9:68:d7:1b:56:fd:aa:a0:63:7f:a1:b3:42:db:d4:23:c8:c8:
         64:93:49:eb:d1:40:0e:e3:c4:11:1c:d6:f7:da:62:11:72:49:
         a8:a1:3c:a2:37:9e:ff:c1:30:ed:c5:94:13:c9:7b:30:a8:93:
         6f:0c:97:9b:dd:58:22:55:72:6d:0d:35:09:5d:bc:75:30:84:
         3f:36:94:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 19:18:31 2024 by rpki-client on console-ams.rpki-client.org