Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/3EF4711CC1A311EC8986B978C4F9AE02.roa
File:                     3EF4711CC1A311EC8986B978C4F9AE02.roa (raw, json)
Hash identifier:          JZVV2i4d2g3bcsUx5Xgjo1ZV5pQ+/nzEQpAU1f+dqG0=
Subject key identifier:   AF:8F:96:C3:58:A0:B1:0E:96:0B:E6:A5:A3:C2:79:04:50:96:B9:59
Certificate issuer:       /CN=A9137242/serialNumber=EAB24A90C6D046CD83FB5EF4A3C598E4EA9A168C
Certificate serial:       0630
Authority key identifier: EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/3EF4711CC1A311EC8986B978C4F9AE02.roa
Signing time:             Mon 24 Jul 2023 18:35:55 +0000
ROA not before:           Mon 24 Jul 2023 18:35:55 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     139683
IP address blocks:        103.139.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.crl
                          rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 18:55:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1584 (0x630)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137242/serialNumber=EAB24A90C6D046CD83FB5EF4A3C598E4EA9A168C
        Validity
            Not Before: Jul 24 18:35:55 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64bec48a-9d11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:17:a4:48:54:af:98:c6:0c:40:f5:65:4b:1b:
                    6f:a3:67:ce:67:62:59:1e:29:d9:02:55:d3:01:98:
                    da:1b:00:f6:4a:c8:4b:ce:bc:4f:fa:2d:1f:ea:1f:
                    51:3e:e1:29:ac:92:17:75:84:50:9f:18:a9:ef:b7:
                    2e:7d:d7:f8:11:d9:e6:90:91:3c:2b:7f:4d:f2:df:
                    e0:dc:d2:f2:dd:17:a2:2e:44:5c:55:98:72:59:51:
                    8f:45:de:ff:41:91:34:1f:ae:6c:32:99:07:cc:0f:
                    e1:4d:b5:8b:a4:3e:63:dc:4d:82:88:40:63:ed:73:
                    8d:4c:d4:5a:88:f7:38:fa:8a:33:56:39:88:be:e6:
                    b0:b3:2f:1c:d5:95:fc:71:9b:f7:a7:83:76:04:da:
                    2a:28:92:35:25:59:c1:0e:08:f7:ea:6d:b9:5e:78:
                    cb:19:8d:d1:c1:96:3e:f9:81:82:34:3e:01:20:85:
                    9d:d2:e6:31:d2:e5:9a:99:29:8f:9b:ca:06:14:4c:
                    5d:2e:5f:61:52:6a:dc:85:50:32:b2:74:f0:0d:f2:
                    56:ec:63:ff:a1:e2:11:4b:c9:11:79:aa:f6:5f:89:
                    cb:ca:96:cf:23:ac:f9:f2:ee:b4:5e:27:af:68:29:
                    07:09:b9:0a:a1:8b:b6:d6:59:76:7a:84:ff:44:0f:
                    f5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8F:96:C3:58:A0:B1:0E:96:0B:E6:A5:A3:C2:79:04:50:96:B9:59
            X509v3 Authority Key Identifier:
                keyid:EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/3EF4711CC1A311EC8986B978C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:1e:a1:9a:dc:97:44:ce:76:c1:ae:e2:c1:60:99:0b:97:36:
         86:ef:24:7e:91:a6:fe:f3:47:ad:a0:82:0e:33:c5:81:0f:9b:
         90:ea:28:e2:b7:3b:56:c7:bc:1b:17:34:90:0e:86:16:49:c1:
         25:95:c1:87:05:7b:36:52:21:24:b3:0e:2c:0b:b1:56:33:ce:
         18:4e:5d:4c:a9:62:63:04:0d:75:d1:be:17:97:6a:a0:06:c6:
         95:f6:67:75:92:66:ac:66:d6:10:78:32:a6:bb:eb:cc:23:43:
         9c:c6:3c:f0:2d:d9:b7:f2:77:cb:73:7c:fb:48:b7:5f:02:9e:
         1e:01:23:c3:8c:bc:be:10:6a:1f:23:d5:0e:bd:65:40:13:87:
         65:eb:1c:1f:b4:b1:dd:d9:d2:42:0b:1c:df:8c:99:f8:72:bc:
         ea:ba:13:1a:6f:d2:af:52:ae:d1:ca:45:f0:e2:f8:5a:29:61:
         9c:ac:2b:54:8a:eb:0b:02:a8:45:34:22:48:8c:b9:98:3b:00:
         58:87:be:0d:a3:f1:8e:e0:24:b9:a6:9e:70:30:23:43:a9:a4:
         e3:33:c2:bb:13:c0:4d:e2:03:33:d5:aa:4f:6f:02:6a:c1:4e:
         d4:ed:ba:a9:51:fb:8e:af:ba:62:05:4d:13:a3:a6:92:9d:2b:
         53:40:f6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 19:55:10 2024 by rpki-client on console-fra.rpki-client.org