Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/3576AA9EFC2311EE8CA4916BC4F9AE02.roa
File:                     3576AA9EFC2311EE8CA4916BC4F9AE02.roa (raw, json)
Hash identifier:          BGOd98PUeVhCajtNKxl03gfnN9UakYRrbRlF2SGG5p4=
Subject key identifier:   94:F1:D4:EE:92:D8:44:01:4C:B4:7D:18:E2:42:A4:C4:1C:82:81:3C
Certificate issuer:       /CN=A9149987/serialNumber=B061BC48A1441000ABEB8C448A09F195F9139E1A
Certificate serial:       04
Authority key identifier: B0:61:BC:48:A1:44:10:00:AB:EB:8C:44:8A:09:F1:95:F9:13:9E:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/3576AA9EFC2311EE8CA4916BC4F9AE02.roa
Signing time:             Tue 16 Apr 2024 18:58:48 +0000
ROA not before:           Tue 16 Apr 2024 18:58:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     132528
IP address blocks:        103.73.108.0/22 maxlen: 22
                          2406:f780::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.crl
                          rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 08:56:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149987/serialNumber=B061BC48A1441000ABEB8C448A09F195F9139E1A
        Validity
            Not Before: Apr 16 18:58:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=661eca67-b00c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:08:87:e1:a9:8b:1f:b2:e0:e4:a1:29:c7:3f:
                    17:3d:ad:03:95:46:6a:83:6d:dc:b9:97:ab:c2:ee:
                    bc:80:90:f8:c9:0d:92:de:50:45:31:0e:7f:5c:cf:
                    a3:b6:ae:3f:a1:25:54:51:65:5a:56:ee:c8:84:1c:
                    0d:ad:36:4d:cb:bd:9f:85:be:d2:ce:21:d3:e8:cd:
                    cc:dd:df:46:b4:9e:47:e6:8c:52:8e:b3:6c:1b:04:
                    dd:23:c3:1f:f0:02:f1:61:09:dd:df:61:d3:7d:a8:
                    56:4f:b3:07:21:ad:3b:cd:53:86:8c:7e:ec:ad:75:
                    3b:86:4d:b6:6f:24:f8:52:c4:8b:41:46:9b:93:f7:
                    74:c5:b0:52:6c:05:56:44:ad:bc:b1:da:74:6e:74:
                    74:b3:e1:b6:ed:d2:ef:7a:cc:43:45:ed:8c:5b:68:
                    ec:8c:57:9c:52:a5:08:4b:1a:36:3e:ae:e6:d7:54:
                    32:69:7f:23:94:62:02:e2:2a:be:88:52:d2:84:bd:
                    60:a8:03:e0:a3:10:3a:00:38:7c:39:e6:af:19:f5:
                    33:0c:50:91:66:b2:44:99:c6:45:27:8f:e7:31:e5:
                    8f:2b:29:08:c3:40:8a:78:c5:12:2c:46:e7:92:02:
                    f5:d6:2b:e7:74:bc:1b:25:87:bb:39:64:88:4c:3b:
                    a4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F1:D4:EE:92:D8:44:01:4C:B4:7D:18:E2:42:A4:C4:1C:82:81:3C
            X509v3 Authority Key Identifier:
                keyid:B0:61:BC:48:A1:44:10:00:AB:EB:8C:44:8A:09:F1:95:F9:13:9E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/3576AA9EFC2311EE8CA4916BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.108.0/22
                IPv6:
                  2406:f780::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:f1:0d:6f:41:e7:91:9a:a2:50:c9:cc:34:70:7d:a4:34:57:
         37:30:9e:4e:43:a0:72:a4:69:2c:52:37:0b:2c:fd:28:81:6b:
         2c:5e:37:bf:f1:17:b0:62:0f:76:34:1a:30:ba:46:09:2d:52:
         55:45:5b:e5:fe:ba:75:ea:e6:25:6a:af:07:cc:84:dc:79:c3:
         bb:4e:c9:57:a9:68:fe:75:66:4d:e1:3a:8b:b9:5d:d5:11:20:
         08:64:f8:de:ca:77:ea:eb:7a:8e:bf:6e:98:86:83:96:78:e6:
         73:0c:7c:84:82:db:c7:d6:0e:01:e7:51:29:99:fb:33:d9:da:
         dc:f0:f7:16:98:ac:5a:ca:ce:a1:77:49:a6:d8:73:cb:b8:eb:
         c0:63:e4:ef:7a:7b:a7:49:62:31:b8:55:74:5b:9b:05:77:69:
         f3:3e:30:13:5a:eb:55:60:22:09:ae:e5:b6:7e:9a:0c:af:29:
         2b:79:5b:b5:fc:ce:68:ac:0f:60:c2:64:b0:7c:c1:21:65:d1:
         ed:fa:5f:32:ed:69:2e:78:79:56:ff:49:4b:39:4d:de:f3:1e:
         d1:ad:8e:d5:9a:2a:23:78:00:25:f1:f2:51:61:2e:6a:58:e8:
         5b:4d:8e:ca:a6:ae:0a:2a:71:e4:74:d6:fc:ae:62:8b:d1:71:
         b8:95:b6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:56:46 2024 by rpki-client on console-fra.rpki-client.org