Route Origin Authorization

$ cd rpki.apnic.net/member_repository/A913A0DD/21433CD2683311EAA8A73278C4F9AE02/

$ rpki-client -vvf 3A96E4AA981011EB9466711FC4F9AE02.roa
File:                     3A96E4AA981011EB9466711FC4F9AE02.roa (download)
Hash identifier:          KlKA6Op+nzBkA9ij3QMcUkofpHfcTcCLoERibjlcbn8=
Subject key identifier:   5A:99:21:23:6F:6C:8A:8C:38:D3:88:44:D6:21:97:BE:4B:6C:0A:5A
Certificate issuer:       /CN=A913A0DD/serialNumber=71D332604CD538EA726987AF7E6FE8B870F42FE4
Certificate serial:       0863
Authority key identifier: 71:D3:32:60:4C:D5:38:EA:72:69:87:AF:7E:6F:E8:B8:70:F4:2F:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cdMyYEzVOOpyaYevfm_ouHD0L-Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A0DD/21433CD2683311EAA8A73278C4F9AE02/3A96E4AA981011EB9466711FC4F9AE02.roa
ROA valid until:          Jan 31 00:00:00 2024 GMT
asID:                     135386
IP address blocks:
    1: 103.79.240.0/22 maxlen: 24
    2: 2400:4740::/32 maxlen: 32

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2147 (0x863)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A0DD/serialNumber=71D332604CD538EA726987AF7E6FE8B870F42FE4
        Validity
            Not Before: Oct 28 21:47:50 2022 GMT
            Not After : Jan 31 00:00:00 2024 GMT
        Subject: CN=635c4e05-aa4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e7:dc:d3:e9:ec:27:15:76:13:92:ee:22:6d:
                    5c:44:64:16:48:fe:bd:e9:aa:f6:f7:d1:ff:0b:e4:
                    6a:c0:24:43:03:87:e8:b9:a9:6b:81:3e:06:ff:d8:
                    43:2e:b4:a5:88:52:6b:06:53:99:d9:25:60:a7:7e:
                    b1:3b:2a:04:41:59:f6:d0:7f:24:7e:ba:2b:a0:74:
                    4c:4e:9b:b0:bb:fb:52:0c:be:6d:98:12:21:65:dc:
                    6d:61:f5:60:a4:1f:cf:b0:51:a6:6c:e3:69:03:77:
                    b5:83:55:4e:f1:aa:2e:38:7f:69:94:8b:b7:c9:39:
                    56:06:91:de:b4:4f:53:a8:8a:59:ae:4e:d5:3e:70:
                    1c:65:f8:b3:f8:aa:53:ce:a4:9f:b6:3d:6c:72:ba:
                    e0:0e:a5:9b:46:39:87:af:47:93:b7:c1:ea:5b:81:
                    e4:10:04:88:fb:44:aa:74:f0:e5:89:fc:ac:be:b8:
                    96:ca:55:b5:9c:0c:01:12:6a:c3:b7:fc:61:77:33:
                    ef:eb:1d:37:9f:5d:f3:86:1f:8a:ac:1e:c3:d0:73:
                    d5:d3:ee:f1:64:d1:51:1d:e4:09:16:10:99:82:d6:
                    79:12:b6:37:5a:49:f1:9a:03:c1:d9:1b:ed:78:06:
                    48:c8:39:5f:94:8d:2e:34:1c:75:78:19:66:97:58:
                    c2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5A:99:21:23:6F:6C:8A:8C:38:D3:88:44:D6:21:97:BE:4B:6C:0A:5A
            X509v3 Authority Key Identifier: 
                keyid:71:D3:32:60:4C:D5:38:EA:72:69:87:AF:7E:6F:E8:B8:70:F4:2F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A0DD/21433CD2683311EAA8A73278C4F9AE02/cdMyYEzVOOpyaYevfm_ouHD0L-Q.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cdMyYEzVOOpyaYevfm_ouHD0L-Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A0DD/21433CD2683311EAA8A73278C4F9AE02/3A96E4AA981011EB9466711FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.240.0/22
                IPv6:
                  2400:4740::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:07:f7:29:75:f8:dd:9a:54:3a:8f:a0:c7:f0:e1:45:91:fe:
         79:9d:72:5d:6e:9c:66:a6:a3:a0:d8:b5:4d:a0:16:8b:a5:8b:
         30:ab:96:94:68:d2:a2:f2:ef:60:e9:27:a6:c6:10:97:10:a1:
         11:18:a3:fe:c5:b7:07:09:67:35:c5:6b:79:fa:7e:2d:2d:6f:
         ed:01:60:2a:60:6a:24:45:37:e4:1b:e6:ff:58:ed:b7:39:e7:
         ba:60:8a:c8:a4:44:e4:a8:8c:b6:dd:9d:57:3b:76:6c:79:96:
         5c:18:16:81:b3:ae:ba:dc:43:6a:28:f3:3a:a4:5b:24:02:e5:
         10:0c:97:27:20:aa:54:0b:cd:e4:86:6c:4b:ed:0f:df:ed:e2:
         d7:48:4d:e5:6d:51:6f:05:ce:42:af:0f:8c:0e:af:b9:ff:6b:
         87:b4:45:02:17:aa:41:f1:0a:a8:14:fe:31:b9:9a:02:21:52:
         f5:29:62:2b:d0:30:da:f6:89:b2:52:42:43:7b:2b:26:a9:08:
         86:51:de:65:db:e9:db:98:b4:06:2b:43:4e:f3:34:23:80:ff:
         28:0b:37:fe:6e:87:44:df:29:38:13:23:07:ab:3c:5d:ba:3e:
         db:dd:d6:a7:36:04:9c:4d:7b:91:e2:79:ca:72:93:b8:9a:68:
         4d:e1:00:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 3 19:12:01 2022 by rpki-client.