Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/612568D2A6D011ED8FBD0A82C4F9AE02.roa
File:                     612568D2A6D011ED8FBD0A82C4F9AE02.roa (raw, json)
Hash identifier:          Wf8nYA+t9HD4VHUkOzVWpMXetJg2S16feJ3kI9eoFho=
Subject key identifier:   94:3C:DE:83:9E:EB:2A:01:03:DA:D8:AD:D2:76:81:98:8B:AB:60:A0
Certificate issuer:       /CN=A914DA3F/serialNumber=118E6FB2CF156B9D5A26AEC051FB1C5F7EFE01E3
Certificate serial:       E3
Authority key identifier: 11:8E:6F:B2:CF:15:6B:9D:5A:26:AE:C0:51:FB:1C:5F:7E:FE:01:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/612568D2A6D011ED8FBD0A82C4F9AE02.roa
Signing time:             Thu 11 Apr 2024 05:38:54 +0000
ROA not before:           Thu 11 Apr 2024 05:38:54 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     150748
IP address blocks:        103.83.134.0/23 maxlen: 23
                          103.83.134.0/24 maxlen: 24
                          103.83.135.0/24 maxlen: 24
                          2400:dc20::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.crl
                          rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 05:54:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DA3F/serialNumber=118E6FB2CF156B9D5A26AEC051FB1C5F7EFE01E3
        Validity
            Not Before: Apr 11 05:38:54 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=6617776e-137d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:23:27:ff:6c:ec:98:ae:bd:c8:3c:a6:c1:4a:
                    83:ad:8e:0b:32:f6:0b:54:06:e8:23:e4:f4:6c:ef:
                    92:bc:af:25:61:c7:26:85:94:44:c0:ae:59:14:97:
                    a8:3e:41:ac:fc:af:3d:c8:c8:53:32:1c:f7:4f:48:
                    42:02:f8:76:07:88:c2:7e:3c:b8:a4:36:79:50:02:
                    c3:e4:ed:6e:e8:65:b3:a0:d8:99:c1:1e:25:2e:21:
                    20:5f:d8:64:23:90:e4:c1:10:cf:9e:c9:96:a6:18:
                    71:0f:48:0c:68:d8:0f:7a:39:01:02:64:c5:b6:37:
                    5f:6a:99:1e:74:5f:85:68:d9:62:1c:d0:84:e4:e1:
                    24:86:5a:95:32:45:e2:62:47:b7:ed:e5:ee:0a:18:
                    9f:08:8e:06:c0:70:07:4e:9a:5e:5a:a8:9a:fa:67:
                    ed:17:73:52:4e:e8:4d:e5:2b:a4:02:50:5b:81:42:
                    f8:b2:d3:f6:8b:82:c7:98:f7:c1:06:55:89:98:04:
                    c1:f8:5a:40:89:6d:96:35:0d:d7:48:12:ab:80:2d:
                    5a:2a:eb:f3:e6:b9:e3:6f:9f:73:be:d2:03:53:0b:
                    be:f7:f5:4a:43:82:b5:e9:38:be:8d:b4:d8:0c:b7:
                    5c:a9:b6:75:fd:a5:94:4b:5f:0f:78:7a:fc:35:0d:
                    73:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:3C:DE:83:9E:EB:2A:01:03:DA:D8:AD:D2:76:81:98:8B:AB:60:A0
            X509v3 Authority Key Identifier:
                keyid:11:8E:6F:B2:CF:15:6B:9D:5A:26:AE:C0:51:FB:1C:5F:7E:FE:01:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/612568D2A6D011ED8FBD0A82C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.134.0/23
                IPv6:
                  2400:dc20::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:3d:a6:a8:4a:31:4e:8a:1d:22:68:20:91:03:4d:69:a0:26:
         e0:a5:f0:a9:40:c8:24:ee:e8:3b:a1:69:6b:03:e0:e9:12:0f:
         d1:5a:9b:11:b2:21:6b:15:20:41:55:1f:7d:66:45:01:19:1d:
         3c:d0:ef:68:5d:8b:c2:07:d1:a0:a8:91:1b:c7:7d:3f:0a:58:
         ac:29:8f:26:4a:a8:11:3c:07:5e:5c:ec:c6:aa:3c:2d:e0:f4:
         9c:28:36:b9:7a:78:49:a8:b0:82:bf:4a:d2:e2:39:fa:df:64:
         26:6f:27:5e:60:a5:03:b4:fe:4c:f2:ca:09:e9:8a:35:07:68:
         85:94:04:47:07:b4:de:47:03:e0:c1:90:d9:7f:a4:27:77:1b:
         26:db:c4:6b:c6:69:20:4f:8b:92:6e:12:81:a8:a7:cf:8e:2c:
         55:91:95:ed:d4:a0:2a:0e:45:eb:7d:74:27:be:82:ca:ee:9a:
         01:e2:1b:8a:d0:75:ec:1d:2f:23:17:b2:b7:3b:6e:b8:0a:c1:
         77:13:59:79:d6:5a:1d:a7:34:72:81:09:3a:df:ea:d5:13:6e:
         e4:2c:cd:d5:0e:42:15:65:d4:cb:96:a3:c9:24:48:66:9c:66:
         1c:c1:d3:5c:13:75:67:99:c0:ec:63:b7:63:0a:03:e1:eb:ae:
         b0:a6:5f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 08:07:59 2024 by rpki-client on console-ams.rpki-client.org