Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/694F9F9CBE2811EBBB48FF52C4F9AE02.roa
File:                     694F9F9CBE2811EBBB48FF52C4F9AE02.roa (raw, json)
Hash identifier:          M52mz8SDn6JR4VuIz4A6wf15Sn7FolBmMSkdynloi9g=
Subject key identifier:   DE:74:59:5D:B5:AA:C7:38:60:0E:D5:DF:04:A5:F3:05:A9:0F:45:3B
Certificate issuer:       /CN=A914C0F5/serialNumber=1ED7B87CF56B8B00EE143E469678503814E5FA53
Certificate serial:       04B6
Authority key identifier: 1E:D7:B8:7C:F5:6B:8B:00:EE:14:3E:46:96:78:50:38:14:E5:FA:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/694F9F9CBE2811EBBB48FF52C4F9AE02.roa
Signing time:             Mon 13 Nov 2023 00:32:14 +0000
ROA not before:           Mon 13 Nov 2023 00:32:14 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     138178
IP address blocks:        103.129.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.crl
                          rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 May 2024 00:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1206 (0x4b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C0F5/serialNumber=1ED7B87CF56B8B00EE143E469678503814E5FA53
        Validity
            Not Before: Nov 13 00:32:14 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=65516e8e-0c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e1:e3:88:2c:16:cd:b1:9c:3d:f8:bb:e2:77:
                    d9:a1:97:b1:eb:31:21:00:6a:16:82:ef:85:ea:85:
                    a5:17:9f:cd:66:06:b1:45:96:6c:23:52:19:53:a8:
                    05:6f:34:42:e1:57:71:d8:db:76:6e:a9:f6:eb:33:
                    87:db:32:59:a9:13:2c:6e:19:2c:d0:3f:39:81:53:
                    f9:93:9b:80:3a:42:50:84:4d:fb:77:60:af:2e:65:
                    83:61:ca:bf:cb:57:65:59:32:e4:3b:de:93:9d:fa:
                    c5:ae:a1:7d:45:b6:25:b6:ee:58:76:25:65:63:1c:
                    c7:b2:c3:23:dc:01:04:40:8d:c3:df:35:b6:ae:7d:
                    9f:07:fc:4c:75:d7:c3:c2:4c:49:f9:53:4c:ff:ef:
                    7d:23:e2:15:a5:56:b4:4b:7f:d8:bb:d7:09:5e:3c:
                    84:c8:cb:9d:b6:d3:59:0f:0c:7a:ae:11:14:c2:85:
                    ec:7e:2e:bf:55:bd:46:1a:30:df:de:49:d1:5d:c9:
                    b0:f8:82:ee:2d:b6:f2:6e:a1:df:e2:aa:d5:bd:b7:
                    fe:ad:ff:30:bb:9f:44:e1:ed:d5:6a:0b:e0:94:81:
                    fa:3e:fc:77:21:42:b0:67:70:24:20:32:28:23:9a:
                    81:72:2b:4b:4c:62:2c:e8:fe:29:24:63:b0:98:06:
                    1a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:74:59:5D:B5:AA:C7:38:60:0E:D5:DF:04:A5:F3:05:A9:0F:45:3B
            X509v3 Authority Key Identifier:
                keyid:1E:D7:B8:7C:F5:6B:8B:00:EE:14:3E:46:96:78:50:38:14:E5:FA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/694F9F9CBE2811EBBB48FF52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:a6:b7:99:ca:dc:07:f7:a0:a3:da:e6:96:b9:ba:31:6f:3e:
         ab:1f:68:04:57:b3:38:c4:cd:df:db:88:c8:96:1d:f9:ed:d6:
         30:1a:bd:61:3b:ce:be:66:42:ab:bb:d7:0a:cb:62:65:3c:49:
         b0:d5:d4:89:c3:d5:72:ff:a3:4c:d9:6b:63:ad:c2:6e:41:1c:
         dd:b7:06:cb:fc:f9:47:ac:c0:eb:76:d5:11:af:37:fa:15:50:
         d2:91:b7:49:7c:be:14:c9:7a:bd:e8:d5:d2:b6:47:0f:eb:be:
         7b:fd:07:f5:77:c0:df:86:d7:63:5c:4e:d4:77:71:31:97:67:
         d0:ae:3d:90:f5:4f:07:d9:43:49:15:91:83:a3:47:de:73:e6:
         3a:fa:80:0f:04:15:42:2e:b0:a5:c8:01:34:01:c1:d3:e0:bd:
         6d:6d:a1:43:5e:0c:87:27:5f:15:91:f1:23:83:27:c8:e9:d0:
         cc:73:86:f2:92:bf:bf:e4:40:4a:5f:e5:21:2d:ed:09:2a:30:
         56:83:d1:32:47:95:c7:3a:3a:4c:0e:aa:81:a5:0b:d3:0d:4f:
         b6:68:c1:4e:1d:5d:07:54:72:01:80:b9:15:3f:75:8b:95:37:
         6f:5c:cf:28:c9:b4:4e:d3:60:cc:0a:cc:1d:49:3a:e6:ff:e6:
         9e:9b:9b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:36:29 2024 by rpki-client on console-fra.rpki-client.org