Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/9761AC56CC8511EC8D238672C4F9AE02.roa
File:                     9761AC56CC8511EC8D238672C4F9AE02.roa (raw, json)
Hash identifier:          oewkt6aLjhHxapj0b8XJleJNLdCwa4+7IsqfRrKerws=
Subject key identifier:   44:1B:B8:AA:CC:5F:BA:71:92:87:61:51:11:65:E6:F7:54:CF:7B:FB
Certificate issuer:       /CN=A914740F/serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403
Certificate serial:       075D
Authority key identifier: 41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/9761AC56CC8511EC8D238672C4F9AE02.roa
Signing time:             Fri 02 Feb 2024 22:20:11 +0000
ROA not before:           Fri 02 Feb 2024 22:20:11 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     136950
IP address blocks:        103.127.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl
                          rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 21:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1885 (0x75d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914740F/serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403
        Validity
            Not Before: Feb  2 22:20:11 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65bd6a9a-705a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cc:a4:b6:47:c2:ed:63:45:9a:48:40:59:2b:
                    df:4f:c1:cc:39:9b:8f:fb:3c:fd:1f:c2:d7:d6:1d:
                    da:be:0f:35:d7:82:91:88:26:b7:1d:65:66:9f:fd:
                    a2:59:b7:41:f8:57:48:fc:79:71:1e:d6:7c:3f:b8:
                    82:47:f9:f8:e7:d0:95:23:70:4f:b7:ea:8e:6e:5c:
                    dd:a5:2a:ec:81:2e:56:3e:51:90:d1:32:65:86:9b:
                    3c:69:f6:0b:84:f1:d9:6d:f3:03:15:b6:36:31:b3:
                    a2:d6:f8:20:93:b4:3a:4a:a3:ac:e3:65:cb:32:f2:
                    c4:5c:4c:e1:f9:2e:97:04:48:64:1b:6f:cf:09:a7:
                    7a:bf:fe:39:35:bd:32:10:1d:13:b5:4e:c2:b4:5b:
                    0e:58:87:65:3a:c3:2e:39:91:01:45:41:4d:c9:0f:
                    fa:c8:b9:13:89:f5:e7:c4:79:1f:61:b8:1c:5a:8c:
                    76:42:ae:bf:98:41:16:04:6f:26:33:1f:8a:d2:2f:
                    6c:e0:d4:ca:b0:17:91:51:d1:e8:27:32:bf:8f:31:
                    ac:2e:5d:49:2e:ba:49:ac:e5:0c:77:3c:ae:12:3e:
                    9c:97:f7:25:ba:6e:7d:dc:48:83:de:a6:fe:d1:5d:
                    9d:82:b7:ff:3a:19:bb:2d:35:67:ef:84:bb:36:74:
                    ca:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1B:B8:AA:CC:5F:BA:71:92:87:61:51:11:65:E6:F7:54:CF:7B:FB
            X509v3 Authority Key Identifier:
                keyid:41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/9761AC56CC8511EC8D238672C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:48:2a:b2:2b:37:9d:f7:65:e2:8a:63:a7:e6:de:20:5f:57:
         7c:a9:98:15:ce:48:3c:89:d7:f1:d4:b2:22:85:80:e6:26:e1:
         08:7c:02:44:0e:19:95:12:fe:0e:d4:60:13:74:6c:ee:65:34:
         60:d7:8e:6a:82:5e:b9:65:fb:c3:bc:a5:14:ad:c6:63:dd:a5:
         de:21:86:4b:f5:1a:77:50:32:2b:21:bf:83:44:e0:ad:4c:dc:
         8e:9a:7b:c7:c7:55:1e:0c:76:9d:dd:64:6a:39:47:bb:15:64:
         16:7d:f0:70:31:bb:8a:20:4d:45:04:92:92:62:42:ae:0a:0c:
         49:2f:d2:cb:eb:63:62:26:41:e7:aa:bf:84:9e:cb:69:39:f2:
         60:80:40:fa:0e:9e:1b:ff:0d:93:3b:58:9a:95:30:fd:6c:5e:
         5a:a4:11:85:0e:26:10:6d:d5:ad:89:ce:9c:f6:f1:61:5f:76:
         78:d8:ab:ea:8b:13:22:d4:46:52:98:98:68:98:a4:a0:fc:78:
         ee:08:c3:82:60:87:a7:22:12:ef:8d:5e:0d:97:cd:a6:95:61:
         1d:1f:de:78:df:d7:c4:21:11:61:00:b9:65:4b:aa:83:fc:08:
         2d:bf:89:ea:7a:ee:bb:eb:3c:42:d9:e8:50:28:c2:16:da:10:
         c5:6b:83:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:14:41 2024 by rpki-client on console-ams.rpki-client.org