Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/A3C52B6AC8B111EE84B08767C4F9AE02.roa
File:                     A3C52B6AC8B111EE84B08767C4F9AE02.roa (raw, json)
Hash identifier:          Zwu0lSJjD8+bcl44v9PBW4AOPEOrZqkqJIZkWhBN/ag=
Subject key identifier:   8A:13:E9:DE:61:A3:76:36:D1:70:F1:AC:96:4A:24:BA:BD:43:86:DA
Certificate issuer:       /CN=A9147609/serialNumber=4509689966D37927569CF2CBB44FFE93ACA8E681
Certificate serial:       06EA
Authority key identifier: 45:09:68:99:66:D3:79:27:56:9C:F2:CB:B4:4F:FE:93:AC:A8:E6:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RQlomWbTeSdWnPLLtE_-k6yo5oE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/A3C52B6AC8B111EE84B08767C4F9AE02.roa
Signing time:             Sun 11 Feb 2024 07:46:18 +0000
ROA not before:           Sun 11 Feb 2024 07:46:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     137578
IP address blocks:        103.114.10.0/23 maxlen: 23
                          103.114.10.0/24 maxlen: 24
                          2405:4440::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.crl
                          rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RQlomWbTeSdWnPLLtE_-k6yo5oE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 17:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1770 (0x6ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147609/serialNumber=4509689966D37927569CF2CBB44FFE93ACA8E681
        Validity
            Not Before: Feb 11 07:46:18 2024 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=65c87b4a-f8c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0e:77:cd:4a:7d:68:42:29:df:d5:7f:a1:fc:
                    8c:61:1c:d6:50:b9:47:20:9e:bb:f9:2e:28:5b:94:
                    df:81:bb:3c:a5:b4:4d:94:1d:4b:41:4d:12:f6:db:
                    39:1b:18:9c:46:cb:3d:50:80:ce:9f:69:b7:58:b0:
                    41:d9:96:9b:7b:c3:43:06:18:1e:7a:43:39:6b:ff:
                    92:45:c2:ac:93:98:a0:d1:18:93:31:ef:16:63:59:
                    28:5f:97:fc:fc:dd:db:17:ea:ad:ad:41:bb:37:c8:
                    13:1e:1b:fd:f2:1f:03:7d:de:60:d1:c0:e1:90:41:
                    27:15:60:22:ae:70:50:0b:7a:e5:c5:b1:e2:5c:f8:
                    fb:9b:3d:25:84:c8:63:c7:e0:d3:48:a1:62:62:81:
                    1a:96:a6:05:55:f8:9f:5a:c6:e5:82:6e:9f:1f:aa:
                    43:ef:b6:90:22:4e:f5:f5:d9:46:2b:e8:5a:0f:bc:
                    36:93:e0:67:dc:a5:63:bd:7c:76:c8:75:4e:95:41:
                    18:15:80:86:cb:72:a6:60:c6:6e:72:d2:5c:f3:72:
                    ff:20:f4:c6:55:80:b5:ef:7f:a9:d0:92:34:46:96:
                    9e:e1:3d:5b:6f:52:b6:ac:60:d1:b1:c7:65:2f:05:
                    d2:5c:9f:a6:62:fe:8b:af:f6:09:68:74:c3:ea:3b:
                    c1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:13:E9:DE:61:A3:76:36:D1:70:F1:AC:96:4A:24:BA:BD:43:86:DA
            X509v3 Authority Key Identifier:
                keyid:45:09:68:99:66:D3:79:27:56:9C:F2:CB:B4:4F:FE:93:AC:A8:E6:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RQlomWbTeSdWnPLLtE_-k6yo5oE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/A3C52B6AC8B111EE84B08767C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.10.0/23
                IPv6:
                  2405:4440::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:f6:87:1c:e5:d4:c2:93:19:f1:41:36:19:d6:b9:af:ce:1b:
         c6:5d:28:0a:04:21:bb:e5:38:f0:86:e2:bc:f8:0c:d1:3d:ed:
         31:bd:f0:2d:18:f5:c8:9a:81:3c:49:78:41:57:30:d8:5e:c5:
         80:e0:6e:ab:22:82:f4:3f:53:78:06:fb:92:7c:6d:8b:af:ef:
         36:e7:4c:5c:41:41:6d:b0:b8:02:2a:0c:7e:3e:60:99:86:9a:
         95:c3:61:3a:cd:b8:b2:a0:20:9b:18:5f:62:8d:01:f5:bd:30:
         1b:f7:4e:90:d3:4b:5f:49:64:ee:fe:43:97:7e:0c:4f:39:ec:
         bc:19:59:27:2e:1f:f9:f7:8b:98:a7:1d:35:ef:4d:c5:2d:66:
         0e:84:34:57:f6:3c:e2:fe:5a:d7:5e:2b:bf:3e:bc:62:f2:30:
         2d:a5:3f:04:4b:6f:2e:fb:be:10:bf:07:a4:f3:38:19:7c:f7:
         82:e0:8a:82:98:6a:72:ec:25:29:24:91:03:36:9a:f3:cd:52:
         de:a0:a3:7c:2b:ee:fb:a7:fb:98:9e:57:c2:a2:21:2a:02:a8:
         18:86:4d:51:79:29:ba:c9:9b:50:9c:68:23:e2:3f:b1:7c:51:
         4b:80:80:8d:da:4d:e1:af:ca:51:72:ac:6b:45:ce:3f:58:dd:
         09:8d:ce:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 20:25:41 2024 by rpki-client on console-ams.rpki-client.org