Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/6B4DE806568411EF8FE2C24EC4F9AE02.roa
File:                     6B4DE806568411EF8FE2C24EC4F9AE02.roa (raw, json)
Hash identifier:          zDC4POi/dThAbHtgsplFEXgo+0R27HuDtCIu846C5u4=
Subject key identifier:   09:2F:47:B4:81:DC:29:5A:91:E9:2D:80:35:28:32:D9:DE:CB:5C:2A
Certificate issuer:       /CN=A913BA97/serialNumber=AFD943E4B142763659E08F8DBF6CE7E6D80CC517
Certificate serial:       0136
Authority key identifier: AF:D9:43:E4:B1:42:76:36:59:E0:8F:8D:BF:6C:E7:E6:D8:0C:C5:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/6B4DE806568411EF8FE2C24EC4F9AE02.roa
Signing time:             Fri 09 Aug 2024 19:20:57 +0000
ROA not before:           Fri 09 Aug 2024 19:20:57 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     134952
IP address blocks:        103.85.182.0/24 maxlen: 24
                          103.85.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl
                          rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:30:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913BA97/serialNumber=AFD943E4B142763659E08F8DBF6CE7E6D80CC517
        Validity
            Not Before: Aug  9 19:20:57 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=66b66c18-52b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d0:72:39:91:d4:cd:42:12:03:cd:68:0f:59:
                    30:da:d3:84:00:7d:00:c1:44:bf:8f:fa:4d:d5:c2:
                    64:07:3e:26:07:08:b1:f9:86:24:1f:6b:9f:05:a7:
                    b2:3e:7d:0a:9e:a0:23:1f:0c:74:20:d0:99:a3:f9:
                    3b:70:9a:6e:97:9e:13:d2:27:13:ec:9e:d4:3c:03:
                    66:b4:63:47:92:26:b0:75:ec:08:07:04:7c:76:aa:
                    bf:64:5f:69:35:e1:07:a0:b8:25:4a:cd:65:2d:a0:
                    e0:f4:69:9e:94:01:ac:ae:dd:e7:45:65:25:1a:d9:
                    ac:ce:13:5f:cd:a9:10:e1:9f:4e:8f:64:bb:dd:db:
                    ba:62:8a:7e:10:eb:0f:f9:6e:46:98:45:b5:e0:63:
                    8e:4d:6c:fe:dc:74:48:5d:8c:27:d1:49:ba:b4:15:
                    14:7d:5a:df:4a:48:28:0e:a0:32:ea:fc:4d:54:8e:
                    4f:e6:57:a8:5c:cd:2f:66:ee:cd:9a:ee:b8:47:9a:
                    54:85:6f:18:c4:b8:10:f8:24:66:0a:20:17:30:89:
                    17:d3:8b:74:e4:52:66:b2:0a:02:12:8a:8d:5b:69:
                    dc:76:7b:2f:aa:f8:9e:ca:3f:30:00:22:74:6a:f5:
                    b3:cf:1d:98:fd:b1:94:0c:e3:1e:a5:27:b3:93:4c:
                    53:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2F:47:B4:81:DC:29:5A:91:E9:2D:80:35:28:32:D9:DE:CB:5C:2A
            X509v3 Authority Key Identifier:
                keyid:AF:D9:43:E4:B1:42:76:36:59:E0:8F:8D:BF:6C:E7:E6:D8:0C:C5:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/6B4DE806568411EF8FE2C24EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:2e:30:f7:1b:d1:a4:bc:db:ea:05:fc:fb:87:f1:24:5a:77:
         e0:29:6b:7b:4c:64:f2:7a:7a:51:51:ea:72:a5:e9:3f:91:e0:
         62:03:3c:a8:51:82:a6:16:8d:e6:7a:d1:43:8a:0d:5a:15:f0:
         0f:1e:16:f2:9e:01:db:68:28:29:3a:f3:86:14:aa:1e:f8:0d:
         8c:8e:e4:84:fb:0c:47:3c:f9:d5:7a:c9:0d:f0:f5:28:81:12:
         bc:9f:b1:c9:54:4d:59:42:9f:57:01:60:5c:54:08:4a:54:72:
         95:53:e2:2d:17:0f:f1:3e:f2:0d:99:ee:7a:e7:1f:50:d7:4d:
         28:1a:47:44:5c:0f:66:8b:2b:85:5a:b1:d7:c9:50:01:fe:fb:
         0e:e4:38:9f:41:38:0d:77:aa:c7:12:ea:6a:34:9d:3f:4c:28:
         1c:84:62:ce:2e:70:b8:05:8a:27:ee:de:c6:c0:2e:d9:39:3e:
         e4:9c:12:de:79:fb:fa:50:30:0e:fc:42:44:47:b3:3c:a9:3f:
         33:00:21:af:70:e0:7b:96:db:14:1c:9b:74:cb:00:72:0e:2d:
         7a:3d:31:19:23:50:08:1d:1a:43:ed:50:6b:d9:82:54:13:d6:
         bf:d2:6c:bf:a4:f6:d0:cf:d4:f2:35:3c:1d:02:2e:08:43:f5:
         86:c2:82:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:46 2024 by rpki-client on console-fra.rpki-client.org