Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/E4AAD78CEFFE11E991390613C4F9AE02.roa
File:                     E4AAD78CEFFE11E991390613C4F9AE02.roa (raw, json)
Hash identifier:          xnN0CT8s/dW/Qwxi/mFt4AV3bS33AK/f1C8b6IGc9s0=
Subject key identifier:   A7:EC:00:28:05:DF:5C:58:B4:88:6D:68:78:12:85:E7:91:1A:CE:46
Certificate issuer:       /CN=A9152EF3/serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02
Certificate serial:       0C7D
Authority key identifier: 67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/E4AAD78CEFFE11E991390613C4F9AE02.roa
Signing time:             Mon 31 Jul 2023 18:56:03 +0000
ROA not before:           Mon 31 Jul 2023 18:56:03 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     137974
IP address blocks:        103.119.68.0/22 maxlen: 24
                          2403:3fc0::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl
                          rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3197 (0xc7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152EF3/serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02
        Validity
            Not Before: Jul 31 18:56:03 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c803c3-76b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b2:5e:43:9e:93:37:3b:d8:e9:7f:ed:69:93:
                    31:4e:07:dc:d6:6d:2e:44:56:23:10:ac:9a:59:17:
                    2a:99:97:10:31:2a:23:03:91:54:99:63:41:00:21:
                    e9:95:49:47:c4:d4:c9:72:db:36:41:a1:b9:05:3d:
                    59:8d:a7:e9:89:53:02:a6:ca:f3:00:b5:15:03:41:
                    47:33:d7:e9:37:da:b7:da:4c:f0:51:cd:6d:9e:0f:
                    c5:dd:80:ab:d7:7d:f7:3d:81:7a:a1:ae:7b:03:a1:
                    5b:fe:70:b2:ec:6b:79:44:13:ee:7c:05:49:3a:0a:
                    7a:ed:a9:4b:79:a2:39:09:53:1e:db:08:55:29:7e:
                    77:de:0e:2c:fe:7d:72:66:7f:bc:83:9f:79:a3:24:
                    b5:12:5e:5e:0e:0a:ad:9c:43:2d:7b:48:4d:dc:ca:
                    78:4a:e3:84:db:75:58:5f:d1:64:4e:0b:37:37:20:
                    b1:73:28:82:e4:e9:1a:15:74:a0:00:30:73:53:d7:
                    04:ce:35:85:d2:a3:7a:36:ff:4e:a8:c5:69:24:b8:
                    45:42:04:94:04:31:58:54:83:11:79:72:5e:79:e4:
                    fd:f5:da:a6:c2:d6:7e:27:29:76:6c:30:f5:f9:87:
                    45:12:cc:f8:2a:3b:31:6f:e2:75:23:5c:39:52:45:
                    3f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:EC:00:28:05:DF:5C:58:B4:88:6D:68:78:12:85:E7:91:1A:CE:46
            X509v3 Authority Key Identifier:
                keyid:67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/E4AAD78CEFFE11E991390613C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.68.0/22
                IPv6:
                  2403:3fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:0e:81:b7:0d:0a:42:21:ea:e7:34:b7:c5:95:45:a8:78:a8:
         04:97:e2:c2:c9:0e:3d:75:fc:eb:9a:2a:5e:47:75:eb:63:e0:
         ae:17:04:04:2c:e9:cf:f4:6a:b9:d3:6f:23:5b:b2:02:fc:38:
         27:0a:77:31:4e:1c:60:41:12:39:de:c2:d8:ed:ce:a0:f7:48:
         1a:14:9d:63:1b:68:3b:19:a4:7e:b4:aa:f2:61:9a:f0:75:98:
         0e:78:26:92:0c:49:55:df:7c:4f:d6:23:e5:5f:ca:56:a7:fc:
         32:53:41:dc:63:e3:8a:93:fc:22:2c:89:27:a6:64:8e:ea:e4:
         0d:68:8a:4f:bc:9d:14:b3:23:fa:7b:ad:2e:79:84:96:83:c6:
         ff:1a:81:8a:af:22:2d:f7:a2:76:34:92:e8:68:66:f4:06:6a:
         55:ac:c0:63:58:17:2e:a9:17:80:5a:bf:1e:d3:b3:e8:bd:99:
         94:c0:ee:7b:94:36:10:ff:86:52:e0:10:a7:ea:80:36:f4:21:
         0b:1e:98:77:a2:71:b0:bf:58:95:5e:ae:59:5b:6a:1e:bf:bd:
         3e:0e:95:f3:fb:0c:1b:ee:d4:f9:8b:38:ae:05:fd:f8:7b:b0:
         41:45:1b:1b:c6:db:98:96:1a:60:3e:de:6e:6c:b6:f6:93:e3:
         15:cf:e6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 19:21:03 2024 by rpki-client on console-fra.rpki-client.org