Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/740BB01A90D511EE816E5C34C4F9AE02.roa
File:                     740BB01A90D511EE816E5C34C4F9AE02.roa (raw, json)
Hash identifier:          oaPUJLl38wyG8MEGNVcqoUf2268dEP2uKVRKL6P0l+4=
Subject key identifier:   A1:D6:31:D7:72:5A:EF:6B:EA:0F:76:8E:71:2F:84:32:D6:34:99:EF
Certificate issuer:       /CN=A9144913/serialNumber=FF5C100975E3686245CADE579C57433BBFDF6819
Certificate serial:       02
Authority key identifier: FF:5C:10:09:75:E3:68:62:45:CA:DE:57:9C:57:43:3B:BF:DF:68:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_1wQCXXjaGJFyt5XnFdDO7_faBk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/740BB01A90D511EE816E5C34C4F9AE02.roa
Signing time:             Sat 02 Dec 2023 05:41:34 +0000
ROA not before:           Sat 02 Dec 2023 05:41:34 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     138625
IP address blocks:        103.173.216.0/24 maxlen: 24
                          103.173.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.crl
                          rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_1wQCXXjaGJFyt5XnFdDO7_faBk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 06:54:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144913/serialNumber=FF5C100975E3686245CADE579C57433BBFDF6819
        Validity
            Not Before: Dec  2 05:41:34 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=656ac38e-4592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0e:43:06:73:45:2e:8f:cf:84:cd:24:7d:2d:
                    ee:e3:ef:4f:d0:c6:35:79:3f:5d:e1:42:2d:19:59:
                    cb:de:0a:62:89:f2:9f:f6:7c:bf:34:1f:44:d6:56:
                    5a:65:92:28:7c:75:1d:dc:73:70:41:15:db:e2:2a:
                    e9:8e:f6:2d:84:f1:de:a0:7e:ca:3d:77:60:19:05:
                    28:64:9e:71:52:c8:57:a8:87:06:99:1e:8f:41:18:
                    40:4d:bf:85:d6:94:b7:65:58:f8:4d:6d:c8:2a:bd:
                    8e:90:1b:37:bf:fe:b3:60:3c:dc:97:0d:7d:a6:74:
                    2f:e2:74:0e:6b:e4:b8:a1:2c:81:fa:e3:7a:1a:31:
                    31:73:83:27:c2:59:83:e7:c5:dc:05:de:03:7a:63:
                    cd:aa:42:e5:2c:c7:e1:cf:32:17:b0:a8:e8:73:eb:
                    c7:6f:45:be:9b:28:05:96:f2:90:dc:4b:f3:1c:47:
                    41:bd:66:06:44:b6:b2:26:7d:47:aa:89:22:e2:e1:
                    56:be:a1:63:87:44:1f:76:a2:6d:f3:8d:a1:22:9a:
                    08:18:25:cc:53:ef:86:d1:74:66:60:43:4d:a2:06:
                    09:2f:69:d3:68:32:67:b0:9f:4a:a8:96:5b:eb:27:
                    c4:d2:65:55:cf:9d:78:66:74:9b:a6:92:f1:ac:6b:
                    6b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D6:31:D7:72:5A:EF:6B:EA:0F:76:8E:71:2F:84:32:D6:34:99:EF
            X509v3 Authority Key Identifier:
                keyid:FF:5C:10:09:75:E3:68:62:45:CA:DE:57:9C:57:43:3B:BF:DF:68:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_1wQCXXjaGJFyt5XnFdDO7_faBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/740BB01A90D511EE816E5C34C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:31:68:b9:d2:da:4d:ae:f6:6b:e1:77:7d:bb:45:5d:0d:57:
         6c:5d:c2:8c:25:bd:16:14:04:a4:12:a0:8a:37:25:fd:0b:21:
         b7:4e:fc:18:84:79:5f:38:08:49:ca:76:cb:1f:4e:c3:ff:74:
         9e:e1:25:9d:a9:d4:e5:5e:66:b9:1d:9c:74:e8:7f:34:c0:84:
         28:82:21:3c:a4:f4:69:69:d3:97:bc:71:07:4c:ce:e1:4d:df:
         df:23:a0:26:20:61:32:aa:35:4a:a5:a2:8b:40:53:15:b9:8f:
         d8:b9:98:d3:ba:38:8d:78:9c:d5:d0:ce:b3:a7:a1:6c:69:92:
         01:16:77:f1:38:a5:19:2e:14:7d:39:e9:c1:d4:52:43:c2:f1:
         d5:dc:e5:2d:d6:97:c2:73:c2:7a:ba:26:28:98:c4:8c:b8:0f:
         c6:58:6d:8e:85:65:0a:54:9e:70:9b:88:5f:12:45:f1:8f:81:
         19:de:33:1d:58:70:84:04:fd:ab:e8:04:6e:96:e6:c7:84:f3:
         b7:0f:73:42:77:d4:dc:c4:10:19:6e:79:be:06:8c:5e:3f:4d:
         65:16:f0:74:68:e0:80:91:bc:d7:3d:0b:36:a3:2c:66:a2:88:
         67:e5:98:b2:ff:81:d6:31:37:cc:2b:0b:74:d4:6a:85:77:c9:
         97:41:3a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 09:16:18 2024 by rpki-client on console-fra.rpki-client.org