Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/83EB3618E98C11EDAE292D56C4F9AE02.roa
File:                     83EB3618E98C11EDAE292D56C4F9AE02.roa (raw, json)
Hash identifier:          MVaQUhneNZ1PZ257HA9kFSZNDSi2GRzywb/MEmXLJwk=
Subject key identifier:   B6:35:76:CE:A6:19:32:59:C1:AB:BA:88:6A:79:00:8B:1F:A5:5B:F2
Certificate issuer:       /CN=A9134858/serialNumber=7841A0786A7D7846459FB5978BFBBB2D90A1EEE7
Certificate serial:       DE
Authority key identifier: 78:41:A0:78:6A:7D:78:46:45:9F:B5:97:8B:FB:BB:2D:90:A1:EE:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/83EB3618E98C11EDAE292D56C4F9AE02.roa
Signing time:             Mon 03 Jun 2024 06:56:03 +0000
ROA not before:           Mon 03 Jun 2024 06:56:03 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     140036
IP address blocks:        103.132.42.0/23 maxlen: 23
                          103.132.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl
                          rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 06:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134858/serialNumber=7841A0786A7D7846459FB5978BFBBB2D90A1EEE7
        Validity
            Not Before: Jun  3 06:56:03 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=665d6902-76c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6e:ba:26:a3:3e:4c:08:58:ca:ca:a6:a2:2e:
                    9b:12:d4:ce:2a:e0:31:11:a1:4d:86:9a:8e:c9:5b:
                    a8:47:52:4b:6b:8e:fc:83:f4:ed:2b:b0:61:8b:b1:
                    c9:c4:8a:63:78:cb:bd:bf:94:c5:7b:ba:17:46:fe:
                    29:8f:2b:83:cc:ad:19:88:f5:46:e0:39:d3:73:eb:
                    74:1c:96:e3:ac:8b:3b:1c:04:a4:e9:05:44:62:9f:
                    0d:2b:b3:fa:80:bb:58:0a:a8:ff:e8:2f:3b:f2:b6:
                    ac:ec:da:49:47:39:fc:a1:56:2d:50:a2:e9:e8:3f:
                    09:36:22:09:68:05:49:db:c1:03:e5:f5:5f:18:39:
                    94:9c:25:f0:32:8c:5f:ce:4a:13:d1:1d:4d:de:bc:
                    69:7c:eb:3f:d1:e0:7e:3a:e1:0e:68:f0:ff:77:5a:
                    d2:f4:c6:92:1a:45:d3:51:ac:e3:62:f5:7c:c4:43:
                    88:65:db:54:e0:f0:5e:1f:a2:06:10:1f:6d:38:37:
                    76:dc:e0:aa:52:23:17:80:b1:7d:67:16:3e:b8:8a:
                    2a:b0:cd:73:9b:c0:b2:09:c8:54:cd:8a:0d:42:93:
                    7d:71:ed:a5:ca:a1:6e:32:13:da:28:f4:7a:03:84:
                    ba:a9:27:cb:b7:1f:ea:52:08:09:8c:67:52:18:ab:
                    cd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:35:76:CE:A6:19:32:59:C1:AB:BA:88:6A:79:00:8B:1F:A5:5B:F2
            X509v3 Authority Key Identifier:
                keyid:78:41:A0:78:6A:7D:78:46:45:9F:B5:97:8B:FB:BB:2D:90:A1:EE:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/83EB3618E98C11EDAE292D56C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:c2:fd:4f:9f:bf:66:d5:88:4f:ea:9a:8f:52:40:c1:9d:14:
         f3:42:cf:95:8f:a2:37:59:f5:47:22:a9:56:14:a8:38:ac:e8:
         cf:a5:07:be:10:57:11:71:eb:f7:a2:f3:65:15:e0:00:f5:c7:
         de:0d:25:c7:49:c3:d8:65:b2:d0:fe:d0:eb:d6:c7:c2:65:9f:
         47:b7:63:f7:75:59:60:66:26:65:af:f9:1c:1a:12:76:e9:5b:
         2e:a7:0d:a8:f0:56:3a:76:dd:48:fa:c7:a2:24:ac:53:70:dd:
         3e:a5:c4:ca:82:51:45:9f:2c:c1:a0:2e:b3:a2:92:b1:9b:9b:
         a4:44:2c:37:43:59:4d:16:a9:66:d8:6b:24:b4:46:77:ba:00:
         e2:92:94:3f:39:33:0d:64:21:8a:55:19:db:fc:1a:80:16:92:
         82:62:2e:13:c8:db:ed:ee:f3:8e:b0:26:b4:58:81:f4:b2:99:
         7b:4e:a3:cd:1f:e9:bd:75:a2:14:09:ac:98:48:90:1e:ae:0e:
         ef:94:83:85:d8:5f:fb:22:8c:61:d7:19:3a:2e:c5:f9:02:f0:
         74:43:dc:8e:7c:47:6f:c2:3a:f1:af:59:67:21:ee:4b:01:0a:
         08:9e:af:84:77:f4:62:7b:da:de:b0:a6:e7:b7:cd:da:68:77:
         98:bb:19:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 08:43:13 2024 by rpki-client on console-ams.rpki-client.org