Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/009E969E885C11EB88A7723DC4F9AE02.roa
File:                     009E969E885C11EB88A7723DC4F9AE02.roa (raw, json)
Hash identifier:          BJnNWnj5bAaWTSHL28K9ADigo6P+b0SvAF+XSGEZo6I=
Subject key identifier:   6E:3C:B4:0E:75:F1:E2:B7:09:3D:E3:43:AC:3D:8A:41:9A:81:67:03
Certificate issuer:       /CN=A9148B83/serialNumber=C46D5913F6C250C6AEE2F3274535CE866295B9FA
Certificate serial:       053D
Authority key identifier: C4:6D:59:13:F6:C2:50:C6:AE:E2:F3:27:45:35:CE:86:62:95:B9:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/009E969E885C11EB88A7723DC4F9AE02.roa
Signing time:             Sun 19 Nov 2023 00:02:15 +0000
ROA not before:           Sun 19 Nov 2023 00:02:15 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     45654
IP address blocks:        103.103.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.crl
                          rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 00:32:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1341 (0x53d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148B83/serialNumber=C46D5913F6C250C6AEE2F3274535CE866295B9FA
        Validity
            Not Before: Nov 19 00:02:15 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=65595087-7c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:02:77:55:8c:8d:e4:48:29:af:32:7b:57:97:
                    89:4b:16:6a:44:3f:f7:72:f0:14:17:0d:aa:e7:50:
                    a1:57:e1:fb:0b:77:bf:b3:b5:49:a7:4c:c8:59:98:
                    dc:0f:f5:82:3a:34:ce:13:57:ef:a6:bd:86:5c:5c:
                    3d:72:13:ae:e9:ff:7d:3e:4c:25:33:3a:67:93:b2:
                    68:b4:27:56:f4:c7:c5:36:68:0d:ee:98:1a:db:08:
                    41:ad:2c:0a:b4:33:99:7d:48:73:71:18:66:2f:21:
                    65:a1:d7:fb:34:09:49:8b:f0:c8:70:20:f8:7c:46:
                    9d:d2:44:7b:cc:aa:0c:be:42:07:ac:32:c5:ce:40:
                    49:96:bf:df:cf:ab:32:e8:72:d2:f4:05:b6:a8:07:
                    77:aa:04:5a:62:fc:7b:46:ad:cf:7c:49:f8:ce:0f:
                    c4:16:91:eb:09:a6:74:01:fe:30:37:7a:2a:c8:ec:
                    d4:0a:7b:8b:60:61:d1:40:3a:24:94:d1:fa:f0:29:
                    5f:2c:d0:84:d3:94:d2:85:d3:bf:74:0c:3e:e3:34:
                    2a:6d:34:28:ed:0d:aa:7b:38:f1:39:61:b6:fe:10:
                    3e:0e:35:30:6b:d5:c0:17:d2:85:a0:62:de:3a:df:
                    8a:39:6d:dc:dc:f6:73:69:c5:22:28:dd:0c:20:fa:
                    89:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3C:B4:0E:75:F1:E2:B7:09:3D:E3:43:AC:3D:8A:41:9A:81:67:03
            X509v3 Authority Key Identifier:
                keyid:C4:6D:59:13:F6:C2:50:C6:AE:E2:F3:27:45:35:CE:86:62:95:B9:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/009E969E885C11EB88A7723DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:d7:89:6a:d6:a9:eb:b3:76:f5:af:e9:08:8c:a4:20:e8:b4:
         32:43:c2:32:d9:fb:53:f5:bb:0d:01:c6:6c:96:63:23:b2:db:
         c6:63:07:ad:ce:b7:1b:80:57:ce:85:dd:db:bf:13:17:4a:df:
         d4:6b:d9:00:7a:b4:20:82:9e:aa:cc:4e:63:1c:21:1f:d5:76:
         18:06:d2:f0:1e:88:30:3b:4f:bc:dc:eb:71:d6:e2:e9:0b:b7:
         98:8f:23:63:58:67:af:35:4b:6c:d6:08:fd:f3:8e:f1:52:d7:
         9d:bf:ff:da:32:fe:ef:e1:85:ad:81:84:83:42:65:54:bb:bf:
         ad:33:bd:6f:c5:25:1d:ff:aa:0d:08:ff:de:3d:5a:ad:45:54:
         c3:2b:4a:fb:74:68:22:af:1a:f7:ba:07:66:a6:8e:6a:92:a5:
         46:da:c4:88:ec:0d:64:a2:6c:6c:a9:ea:87:5f:0d:9b:c8:67:
         cd:1f:21:bd:45:79:61:2b:a6:9b:d9:63:41:b7:70:c0:53:ad:
         6a:af:22:66:05:44:11:b3:1a:2a:53:1e:87:c4:13:35:1e:7b:
         5c:a4:41:1d:b1:4f:80:34:ba:fb:16:59:a2:29:91:f3:21:77:
         15:6d:4b:f9:a4:b0:64:10:db:0a:04:78:c7:09:a5:90:56:51:
         c8:ee:7d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:58:16 2024 by rpki-client on console-fra.rpki-client.org