Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/1B3EC39C525311EA939E4652C4F9AE02.roa
File:                     1B3EC39C525311EA939E4652C4F9AE02.roa (raw, json)
Hash identifier:          2wDsPac/QgNEgT7mfACzwrYSVpD8iNA9hIlx1b4Cgmw=
Subject key identifier:   23:B3:97:0C:D0:D3:8D:D0:D1:A4:08:55:6E:E8:AA:AA:5A:07:0D:F0
Certificate issuer:       /CN=A9144354/serialNumber=47D06BD7EA8DF2197F71270B75C964C79AB9F0CC
Certificate serial:       106D
Authority key identifier: 47:D0:6B:D7:EA:8D:F2:19:7F:71:27:0B:75:C9:64:C7:9A:B9:F0:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/1B3EC39C525311EA939E4652C4F9AE02.roa
Signing time:             Sun 28 Jan 2024 17:55:36 +0000
ROA not before:           Sun 28 Jan 2024 17:55:36 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     35916
IP address blocks:        103.127.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.crl
                          rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 17:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4205 (0x106d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144354/serialNumber=47D06BD7EA8DF2197F71270B75C964C79AB9F0CC
        Validity
            Not Before: Jan 28 17:55:36 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65b69518-2081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8b:61:ae:dd:57:65:b1:15:16:f9:37:cd:d3:
                    5c:e6:f8:7b:d9:33:aa:b0:d0:a6:a7:20:35:12:87:
                    b5:7d:2c:f9:08:ff:71:8c:73:a9:96:65:d0:4c:9c:
                    0f:0d:31:3f:2d:5f:af:06:b6:82:af:8d:23:e6:bc:
                    70:f8:fa:ce:73:0e:50:7d:b8:4f:d6:e8:f2:4c:7c:
                    f8:12:b5:d3:c1:fd:d7:1a:a0:44:c8:25:87:99:83:
                    a7:a6:4a:c4:31:02:df:7c:90:52:96:8c:db:60:73:
                    c2:f1:d5:67:0a:66:8c:22:c0:22:a2:86:cd:f6:b1:
                    89:f1:58:ba:58:60:c7:15:9f:4c:3c:1a:35:fc:f7:
                    f1:6b:4a:bf:21:1d:1c:a0:d3:46:51:8c:74:d6:3e:
                    aa:86:15:f1:f2:c7:0a:7b:24:fb:b4:80:68:ef:9a:
                    03:20:87:2d:3c:0d:82:5e:ef:7b:74:33:6d:30:52:
                    d6:07:63:bf:a5:4b:78:2c:be:7f:b0:55:90:c8:2b:
                    2c:be:66:a3:ae:52:9a:ef:16:fb:96:4c:86:bd:d0:
                    16:94:a6:25:d4:4a:d8:78:3e:2d:3c:0b:34:82:9c:
                    2f:06:f0:23:50:18:f9:13:ad:6b:6f:37:61:1b:6a:
                    26:4f:ed:ed:ce:01:8a:b4:9a:25:f2:42:b1:86:50:
                    31:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B3:97:0C:D0:D3:8D:D0:D1:A4:08:55:6E:E8:AA:AA:5A:07:0D:F0
            X509v3 Authority Key Identifier:
                keyid:47:D0:6B:D7:EA:8D:F2:19:7F:71:27:0B:75:C9:64:C7:9A:B9:F0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/1B3EC39C525311EA939E4652C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:aa:70:37:bc:99:c9:75:cf:d7:b1:9a:3c:c1:e7:4d:5d:20:
         3d:e9:ad:c8:9a:bd:4e:e8:19:dd:87:18:e1:0e:30:db:32:e7:
         1d:57:71:96:ce:81:b5:9f:a4:8c:92:a9:2a:7d:88:0f:9a:1f:
         be:e1:cb:52:f1:25:80:84:0f:8f:59:54:e8:d4:ab:8a:04:ba:
         cc:7b:d1:18:ac:37:29:46:71:29:7c:ee:49:aa:f3:5d:e0:74:
         20:e3:42:1b:cf:64:bd:00:a7:d8:d9:06:7c:2c:5f:1f:7e:f2:
         6d:ec:c0:f3:77:96:ef:3d:17:42:0b:f6:5d:5f:fe:47:f3:86:
         e9:66:89:fb:2d:2c:af:21:58:69:95:ec:20:d2:2b:08:9e:7a:
         e8:29:21:2c:6c:cf:3f:41:3b:d1:5f:de:5e:9f:fc:ca:17:c8:
         e3:d4:91:be:93:15:22:b7:93:d4:a2:55:8c:d8:d3:80:ec:a4:
         97:a3:1d:1b:e1:a3:ae:9c:c4:3e:ef:80:df:93:82:c2:94:26:
         5d:02:a3:f8:fd:3e:af:ab:42:81:48:4d:64:0f:37:22:3b:52:
         c1:db:09:ae:4a:10:d1:48:c7:1e:29:7f:c8:88:98:b0:61:f4:
         2e:c2:eb:6d:83:75:69:c9:08:9c:50:6b:d0:4d:6c:e2:c4:5b:
         c8:b9:b2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:44:52 2024 by rpki-client on console-fra.rpki-client.org