Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/8719518C26AD11EDA881874BC4F9AE02.roa
File:                     8719518C26AD11EDA881874BC4F9AE02.roa (raw, json)
Hash identifier:          SLqS7NJXbWiwGAP0jdIIiTALETHoykNIuAQN8LdlYGg=
Subject key identifier:   61:D7:FB:EF:CC:B2:59:AD:E8:15:37:CF:31:7B:34:B6:02:C0:6F:B8
Certificate issuer:       /CN=A9146B71/serialNumber=4639D290986F4F0054FDC059014441621D3ABBFF
Certificate serial:       01AD
Authority key identifier: 46:39:D2:90:98:6F:4F:00:54:FD:C0:59:01:44:41:62:1D:3A:BB:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/8719518C26AD11EDA881874BC4F9AE02.roa
Signing time:             Tue 09 May 2023 03:25:13 +0000
ROA not before:           Tue 09 May 2023 03:25:13 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     149810
IP address blocks:        103.186.240.0/23 maxlen: 23
                          103.186.240.0/24 maxlen: 24
                          103.186.241.0/24 maxlen: 24
                          2400:7620::/32 maxlen: 32
                          2400:7620::/35 maxlen: 35
                          2400:7620:2000::/35 maxlen: 35
                          2400:7620:4000::/35 maxlen: 35
                          2400:7620:6000::/35 maxlen: 35
                          2400:7620:8000::/35 maxlen: 35
                          2400:7620:a000::/35 maxlen: 35
                          2400:7620:c000::/35 maxlen: 35
                          2400:7620:e000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.crl
                          rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429 (0x1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146B71/serialNumber=4639D290986F4F0054FDC059014441621D3ABBFF
        Validity
            Not Before: May  9 03:25:13 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6459bd19-4876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3a:59:6d:1e:c8:53:a8:71:37:a6:95:34:00:
                    6b:1d:93:2c:38:32:31:d6:06:c8:1a:03:dd:8f:5f:
                    b1:26:76:d8:3b:d1:ea:91:35:57:74:b3:1e:e9:4c:
                    ac:47:c1:e3:73:dd:bd:74:ae:a4:07:c6:9d:70:8d:
                    ac:5f:82:69:aa:40:6f:a9:5b:a5:32:30:9c:07:eb:
                    94:7a:99:b5:3a:94:6b:10:0f:47:06:eb:bf:bc:8e:
                    a7:48:05:04:c2:4f:f4:ee:77:b5:a8:e3:d4:bc:c0:
                    4c:ba:9a:91:f0:81:fe:e0:50:5b:cd:d4:4a:b0:8c:
                    c6:02:28:02:14:cf:6c:30:d7:72:7c:7b:73:25:81:
                    78:dd:52:82:27:9e:57:06:c3:ad:f1:c7:82:6e:a1:
                    c5:8d:2a:40:45:97:29:b2:2a:e5:33:23:e5:8b:18:
                    05:8d:06:c6:e3:79:f1:12:8a:c3:85:0b:3d:c8:33:
                    1e:d1:7e:7e:12:8b:e6:40:55:ee:b6:7f:42:de:5f:
                    f9:71:03:5c:d5:b4:ef:e7:ca:1d:54:67:9c:27:37:
                    2d:02:ad:c8:55:3d:2c:40:b9:5f:db:3f:2c:0b:43:
                    3f:82:1c:57:b0:dc:6d:25:53:21:73:08:76:03:55:
                    00:26:db:72:63:64:8e:97:88:e9:0e:3d:23:8d:29:
                    7d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D7:FB:EF:CC:B2:59:AD:E8:15:37:CF:31:7B:34:B6:02:C0:6F:B8
            X509v3 Authority Key Identifier:
                keyid:46:39:D2:90:98:6F:4F:00:54:FD:C0:59:01:44:41:62:1D:3A:BB:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/8719518C26AD11EDA881874BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.240.0/23
                IPv6:
                  2400:7620::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:66:b2:bd:5c:d7:77:d2:22:d8:31:bf:1c:e2:c2:52:88:34:
         17:1c:e0:ff:e7:de:6a:b5:e5:9d:6e:a7:80:60:4a:f5:e2:92:
         49:45:99:34:82:0a:a9:dd:f9:b2:54:d9:4e:cc:fa:2c:39:3a:
         e1:b2:bc:ef:09:a9:1f:cd:e8:31:02:65:43:a1:3a:46:20:03:
         fb:91:14:39:62:94:6a:f8:f6:f6:06:b9:02:54:e3:20:aa:0d:
         4f:07:be:e7:11:c7:1a:52:1f:d2:eb:c5:ab:be:68:c7:16:f6:
         f7:09:e9:6c:73:11:a6:d5:27:59:ac:07:c2:70:2f:19:b1:74:
         1b:7b:41:d3:65:5c:5d:92:4b:18:b7:a5:b5:a3:72:3a:38:3a:
         58:be:a3:d4:ce:13:1c:4e:36:36:0c:55:28:e3:31:3f:d8:4c:
         2e:97:14:2e:64:f6:18:b8:7f:64:a5:50:9b:f2:3f:e3:68:c4:
         d2:28:9c:9e:c9:5c:8e:e3:cd:f6:ec:b0:1f:96:b2:85:16:6f:
         74:e3:5f:4c:6f:0b:1a:16:80:3d:d3:e0:8d:15:d3:64:2d:8e:
         1e:97:78:3a:7d:62:6f:7b:8c:65:0a:1d:f7:40:50:ee:e7:0f:
         f7:cd:86:c6:b1:83:70:81:66:58:be:b3:6a:ec:7a:5f:d1:78:
         60:d6:83:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 04:20:42 2024 by rpki-client on console-ams.rpki-client.org