Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/44F388569DA411EBA820C56AC4F9AE02.roa
File:                     44F388569DA411EBA820C56AC4F9AE02.roa (raw, json)
Hash identifier:          71xWzWQEtjmsg9iGQHPh0f8acNegF6g7VmKGwD79bmc=
Subject key identifier:   7C:72:EE:BD:99:25:55:76:FD:13:9E:C8:56:81:A1:42:7D:92:8C:FB
Certificate issuer:       /CN=A9151631/serialNumber=7D2C462756D4930E60329BA2B6A7066F3B089AED
Certificate serial:       057E
Authority key identifier: 7D:2C:46:27:56:D4:93:0E:60:32:9B:A2:B6:A7:06:6F:3B:08:9A:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/44F388569DA411EBA820C56AC4F9AE02.roa
Signing time:             Tue 09 Jul 2024 00:22:36 +0000
ROA not before:           Tue 09 Jul 2024 00:22:36 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     139464
IP address blocks:        103.141.202.0/23 maxlen: 24
                          2001:df1:d80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.crl
                          rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1406 (0x57e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151631/serialNumber=7D2C462756D4930E60329BA2B6A7066F3B089AED
        Validity
            Not Before: Jul  9 00:22:36 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=668c82cb-5274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0a:de:7d:57:a1:11:b2:32:25:c8:9f:2b:21:
                    b7:16:18:8b:d2:e4:d7:06:a7:18:f9:70:24:e3:47:
                    02:62:d2:92:04:ce:60:09:34:b5:3c:7e:33:5f:8c:
                    2e:9a:a9:0c:dd:32:2c:70:5d:9c:f1:28:c0:c0:21:
                    a8:0c:f1:15:5b:3b:71:d5:5b:86:40:11:31:5f:2a:
                    54:ff:2c:bc:3f:a8:fd:3c:2f:d9:f8:8a:f4:10:f6:
                    c3:22:42:79:48:5b:16:8a:28:f8:e3:bf:43:ae:c4:
                    eb:2c:ec:97:44:cc:9f:5d:7a:39:ab:bc:ed:a3:7b:
                    bb:0c:fd:4b:c8:66:4f:43:06:9f:2b:3f:e2:4b:ba:
                    7e:1b:cc:ed:9d:66:0e:45:9e:bc:67:c5:5b:a4:96:
                    54:9a:ea:1b:f4:fa:9c:08:f8:db:63:6f:e4:e9:39:
                    67:cc:42:17:45:69:05:ee:e1:af:d8:87:d6:65:88:
                    51:76:dc:80:f6:2d:90:0f:ff:c0:fa:10:47:91:e9:
                    aa:8c:31:a7:7a:4a:54:3c:45:54:74:94:fa:33:d1:
                    e7:04:14:f3:70:0f:0a:24:a2:f2:61:6b:69:95:5c:
                    87:34:5e:83:97:3f:e3:e6:18:a0:e3:d9:1d:30:f2:
                    60:48:7c:56:7d:e0:ec:14:00:bd:56:10:c8:28:f0:
                    26:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:72:EE:BD:99:25:55:76:FD:13:9E:C8:56:81:A1:42:7D:92:8C:FB
            X509v3 Authority Key Identifier:
                keyid:7D:2C:46:27:56:D4:93:0E:60:32:9B:A2:B6:A7:06:6F:3B:08:9A:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/44F388569DA411EBA820C56AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.202.0/23
                IPv6:
                  2001:df1:d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:52:d5:69:fa:b5:ad:cd:c4:ec:1b:f3:0d:b7:30:12:7f:6f:
         91:c5:e4:ea:3f:7b:43:ea:26:cb:eb:d6:9d:56:a9:a4:37:9f:
         9e:1b:5f:41:3c:6e:33:2a:15:56:01:2f:b7:e7:cb:e9:0f:be:
         64:d2:ac:b4:a2:1d:8d:4a:2c:c3:80:7c:6b:91:07:b7:4c:ed:
         09:78:29:e1:03:38:70:13:14:41:d4:51:ee:e2:71:70:a7:dc:
         15:30:c8:da:37:9e:3d:7a:ef:f4:e4:a0:3f:6c:89:0f:6f:cf:
         69:76:bb:2c:8d:5f:95:30:12:b7:0c:f1:c0:cb:a6:60:58:bb:
         63:d7:72:f1:ed:a6:56:30:43:9e:c5:28:6c:f4:ee:6d:ac:ec:
         d5:0b:2a:e0:bc:e3:57:9b:a3:e4:9d:44:5e:cd:29:8e:b8:b7:
         2f:6b:53:a8:58:45:70:ed:d8:b7:15:2c:e4:6d:13:a6:19:f7:
         bb:9e:03:81:21:c8:ad:1d:6a:81:57:7c:9a:d4:31:ad:17:6f:
         fd:b6:48:24:37:a5:77:90:f3:fd:92:c7:4e:5a:b7:52:ee:8e:
         d8:e8:19:bf:a8:9e:bd:d2:1f:86:a0:62:4f:e3:ad:9b:93:17:
         71:ae:00:1c:78:3d:f1:75:93:c2:6a:55:bd:be:7b:33:e7:cd:
         f6:8c:bd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:25 2024 by rpki-client on console-fra.rpki-client.org