Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/76601C1C23E611EF92A9097CC4F9AE02.roa
File:                     76601C1C23E611EF92A9097CC4F9AE02.roa (raw, json)
Hash identifier:          4EHRpeMi8/g5A65WYX96AeSBYgGFYLJaPZfMVf/nA+U=
Subject key identifier:   66:55:67:C4:BE:EC:C9:4B:43:3E:E5:9F:B2:F2:21:D4:45:6A:7C:1A
Certificate issuer:       /CN=A9156F14/serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773
Certificate serial:       0C
Authority key identifier: CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/76601C1C23E611EF92A9097CC4F9AE02.roa
Signing time:             Thu 06 Jun 2024 09:25:52 +0000
ROA not before:           Thu 06 Jun 2024 09:25:52 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     152705
IP address blocks:        103.23.148.0/23 maxlen: 23
                          103.23.148.0/24 maxlen: 24
                          103.23.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl
                          rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156F14/serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773
        Validity
            Not Before: Jun  6 09:25:52 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=666180a0-4649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5a:9f:a6:70:c3:e2:03:07:2a:02:e6:f8:55:
                    3a:dc:d5:f5:45:dc:48:80:c4:7e:09:82:78:4e:0b:
                    2e:81:71:d3:76:c1:ea:67:21:a6:4e:30:68:a8:b3:
                    94:76:db:a6:2a:af:81:d3:98:d6:f3:42:dd:98:90:
                    bf:ae:e2:79:9d:78:db:00:b2:ad:b0:df:63:08:23:
                    b7:4c:8f:d4:35:3e:32:e4:af:bc:46:f2:42:04:da:
                    4f:f1:5b:a9:7a:69:c2:75:97:88:a9:97:0b:8b:b6:
                    72:45:b5:4f:65:04:4e:8e:07:12:2f:9b:a8:6d:88:
                    06:1f:a1:8e:91:2e:e0:ad:fa:d9:3d:82:03:6c:c6:
                    e8:ea:6a:47:6b:fc:29:08:ee:f1:c0:04:c8:af:b0:
                    5e:f0:8a:69:99:34:31:6f:97:0a:e1:42:82:64:38:
                    98:d1:c2:c2:48:e4:ad:de:20:6b:f1:77:74:8e:df:
                    24:9e:02:3e:f3:45:33:6a:ef:02:35:15:f5:79:a6:
                    e6:46:04:a7:75:88:de:ca:94:14:2a:3e:2c:f1:db:
                    d9:34:e9:e3:a2:b3:bd:ef:f5:38:e6:41:9a:ce:17:
                    c7:0f:2c:64:05:14:d3:72:9c:98:9d:fd:50:b3:c9:
                    23:ae:e6:91:5a:21:28:d8:fe:97:0f:c6:ed:3f:54:
                    63:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:55:67:C4:BE:EC:C9:4B:43:3E:E5:9F:B2:F2:21:D4:45:6A:7C:1A
            X509v3 Authority Key Identifier:
                keyid:CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/76601C1C23E611EF92A9097CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:a7:2d:53:9f:60:fe:cd:bd:55:6a:c0:6e:06:01:26:3c:d7:
         e3:33:33:3a:ce:52:e5:52:a4:f8:77:0d:be:1a:77:d3:25:6c:
         1c:06:b7:41:02:4d:39:ba:90:dd:f5:bb:2e:05:20:e7:a7:14:
         3f:b6:33:ec:4a:28:8e:c4:e9:30:24:f6:5c:f0:2c:2c:f8:79:
         d0:1e:e7:76:42:4a:e4:8b:c7:84:82:84:a2:b8:8d:33:eb:55:
         a4:17:e9:c7:53:88:6b:db:f1:5f:6b:d3:48:05:5d:59:83:58:
         09:e6:d9:2b:28:e2:56:8d:82:53:8d:24:76:44:51:e3:c1:d0:
         0f:f8:45:14:93:60:59:c6:f2:5a:e7:b0:04:8c:56:86:df:52:
         28:35:69:80:2c:d7:07:7f:4a:e2:5b:ee:37:ac:28:82:57:e1:
         38:e6:35:ba:41:11:35:24:5c:84:2b:34:6f:79:c9:7e:ef:09:
         b9:ed:5e:fe:f5:0e:02:86:55:e3:16:ba:0c:05:9a:f3:a1:c0:
         dc:9e:83:c8:a8:8b:53:69:90:47:2c:11:fc:f1:8d:91:8a:58:
         f7:a6:cf:c2:ab:5a:d5:b6:14:53:70:42:7f:3c:3f:e6:79:a9:
         ee:23:c5:8f:62:0e:00:60:57:a3:b9:16:b7:03:a8:70:71:e1:
         2a:c8:65:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:16 2024 by rpki-client on console-fra.rpki-client.org