Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/3F1B0EF2045F11EA87A3BD3BC4F9AE02.roa
File:                     3F1B0EF2045F11EA87A3BD3BC4F9AE02.roa (raw, json)
Hash identifier:          VYEc6WkGWCnaHCD7rPOCi+MycvwwSAp/cnDEsK4EErk=
Subject key identifier:   A8:AF:58:07:35:30:AD:4C:3B:1E:E2:CD:C1:80:05:A2:17:C4:02:14
Certificate issuer:       /CN=A9146A02/serialNumber=F0728EED2D4F8FFD8CFE5F87F61BEC0434514129
Certificate serial:       0AF4
Authority key identifier: F0:72:8E:ED:2D:4F:8F:FD:8C:FE:5F:87:F6:1B:EC:04:34:51:41:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/3F1B0EF2045F11EA87A3BD3BC4F9AE02.roa
Signing time:             Tue 08 Aug 2023 19:16:48 +0000
ROA not before:           Tue 08 Aug 2023 19:16:48 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     139467
IP address blocks:        103.141.204.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl
                          rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2804 (0xaf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146A02/serialNumber=F0728EED2D4F8FFD8CFE5F87F61BEC0434514129
        Validity
            Not Before: Aug  8 19:16:48 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64d2949f-28ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bb:0a:5e:e7:e7:78:f6:2f:ca:0f:36:f7:b5:
                    03:8b:cd:19:10:22:c2:7c:58:3b:4a:1d:9b:cb:8d:
                    57:c6:bb:81:72:8d:ad:3e:7e:0c:c2:3b:34:9d:36:
                    0d:fd:b3:56:ea:33:18:63:89:a0:60:a6:91:bf:7b:
                    5d:a7:73:c9:d5:3b:3e:db:9d:2c:69:ca:a7:13:82:
                    09:3f:db:cf:12:72:20:ab:51:76:e0:37:cc:57:93:
                    da:91:fd:4c:2c:ac:0e:0b:56:68:e1:ee:07:09:55:
                    69:4c:0b:7c:b3:d3:f6:7b:1c:50:09:a8:8f:78:17:
                    f7:1f:01:a3:3a:36:13:d7:86:d5:65:b1:8a:58:8c:
                    3d:d0:29:b8:4c:aa:14:38:0a:6d:ef:61:16:1b:11:
                    5a:48:42:b0:25:59:e4:02:26:26:49:5e:e3:63:db:
                    f2:dc:5c:0b:23:92:52:3b:b7:37:f4:f4:b2:b6:e6:
                    1d:0e:53:a2:05:09:36:08:87:8c:b6:34:7c:77:72:
                    13:f1:f8:f2:4c:6d:a9:ad:37:7e:c6:df:05:03:15:
                    a9:c6:28:1f:bb:cd:70:84:4b:57:2d:20:65:8c:c8:
                    eb:f6:e0:b1:fa:ce:67:3d:b8:18:e5:ff:7b:a0:5a:
                    dd:4b:fa:82:01:e7:d5:a0:1b:f3:76:f3:54:b3:69:
                    91:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:AF:58:07:35:30:AD:4C:3B:1E:E2:CD:C1:80:05:A2:17:C4:02:14
            X509v3 Authority Key Identifier:
                keyid:F0:72:8E:ED:2D:4F:8F:FD:8C:FE:5F:87:F6:1B:EC:04:34:51:41:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/3F1B0EF2045F11EA87A3BD3BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:9e:92:16:9b:a6:3e:b4:c2:62:5d:be:4c:a6:76:23:35:f8:
         8b:71:ca:0f:e8:bf:01:d2:02:a5:bb:65:ed:20:e2:38:07:dc:
         6a:10:e7:d9:c1:0a:66:2e:70:3d:98:f9:4e:18:32:c2:4f:12:
         26:f9:99:ec:7a:ca:a8:55:80:74:ec:ae:0b:e6:06:98:51:5d:
         f4:a0:2a:3f:68:b7:94:bb:dc:ba:d6:11:58:79:63:1d:e5:72:
         96:bc:00:30:3e:80:95:62:22:de:0b:05:44:ac:26:f7:32:e4:
         28:5b:1f:e8:c6:69:3b:51:9f:82:5e:60:b6:ac:e0:cc:85:c6:
         30:10:2b:84:6e:e7:2a:d1:55:c3:98:04:33:ef:55:b5:f4:56:
         01:72:6d:ce:55:7e:df:5a:2f:07:e2:ed:82:ab:1a:ca:99:99:
         c0:f0:e0:37:d9:3c:48:62:d9:5b:70:7b:7c:6e:ac:1c:36:98:
         12:1c:c4:4d:d4:5a:46:64:68:6f:e3:5e:00:02:5e:2a:66:83:
         6d:38:fa:37:4c:6f:15:6d:b3:34:ed:26:11:c5:a5:6d:11:15:
         48:f4:f5:de:44:4c:88:74:cb:5e:a0:09:bd:c8:cb:04:53:5f:
         69:83:58:6e:94:a0:fe:e9:6e:45:dc:ba:a1:c0:ad:40:bf:b5:
         c9:e1:a1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 20:05:24 2024 by rpki-client on console-fra.rpki-client.org