Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/3A173FE4DE1C11ED8935D41DC4F9AE02.roa
File:                     3A173FE4DE1C11ED8935D41DC4F9AE02.roa (raw, json)
Hash identifier:          vGAHbStg98aNrkuw3FLsHml06NGIvNvVCjnTmejYYG4=
Subject key identifier:   49:16:3D:73:30:9A:EB:F2:C8:42:2D:B8:CB:90:2E:DE:16:5A:95:B2
Certificate issuer:       /CN=A915BC2A/serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B
Certificate serial:       67
Authority key identifier: 9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/3A173FE4DE1C11ED8935D41DC4F9AE02.roa
Signing time:             Tue 31 Oct 2023 05:35:34 +0000
ROA not before:           Tue 31 Oct 2023 05:35:34 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     7029
IP address blocks:        103.12.180.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl
                          rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 06:20:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BC2A/serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B
        Validity
            Not Before: Oct 31 05:35:34 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65409225-f013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bf:d2:33:8d:7a:3a:c3:70:75:e4:eb:0c:5f:
                    29:72:aa:3b:43:e9:10:6e:d9:90:8b:b8:2d:67:a4:
                    a3:eb:78:7c:a7:68:18:83:87:8d:e4:e3:b0:4b:ab:
                    53:ba:5a:c6:77:c4:90:9b:15:db:88:7d:9f:d6:e8:
                    75:7d:10:a9:a7:9f:8f:b8:5b:d7:f2:b4:f7:70:ed:
                    0b:d0:32:f6:df:85:ec:a1:b5:dc:20:39:74:2c:22:
                    44:3f:56:f2:a8:3b:81:70:0c:94:4e:cf:11:1c:4a:
                    4c:79:f2:30:30:33:d4:4b:ce:d4:fb:83:8a:c2:9d:
                    b6:69:b2:0d:82:26:0b:5d:0e:92:04:61:66:77:df:
                    4c:b4:d7:a5:11:42:70:87:1d:e7:9f:66:26:68:20:
                    71:ac:54:74:5b:25:19:b3:f8:dd:0d:b5:9f:12:30:
                    49:5e:e5:6e:9a:f0:5c:64:fe:cf:26:1a:d0:be:2a:
                    2d:ef:9a:e0:f2:7a:55:bc:50:12:e0:27:36:d4:9c:
                    17:1f:8c:bb:5e:ef:55:98:ad:e3:28:3e:d9:4e:e1:
                    8b:93:da:32:36:a7:10:95:71:3f:02:34:91:12:ea:
                    f2:ab:a2:cd:db:43:9d:a0:66:cb:7e:b6:a0:b8:0b:
                    93:21:00:aa:df:89:ea:19:08:3f:0c:ae:78:a7:c1:
                    47:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:16:3D:73:30:9A:EB:F2:C8:42:2D:B8:CB:90:2E:DE:16:5A:95:B2
            X509v3 Authority Key Identifier:
                keyid:9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/3A173FE4DE1C11ED8935D41DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:31:04:6e:2d:aa:49:47:ed:f9:97:5a:87:56:f2:50:db:2d:
         38:86:0b:6e:48:d2:f1:91:66:ad:68:e1:7d:5c:11:2b:a7:26:
         49:80:84:39:32:3c:7f:5d:65:cc:a2:f1:8a:89:9d:00:84:67:
         e3:f9:47:d6:4d:93:2c:4a:14:68:2e:4d:c8:7a:4b:bb:83:77:
         ad:02:e6:d4:59:11:48:fe:71:58:d2:6c:cb:55:26:6e:18:71:
         2a:28:5f:34:87:1e:c7:45:a0:16:0c:48:40:11:50:b0:82:c4:
         c8:ab:bf:12:b2:81:9f:8f:30:5a:9f:3c:5b:a4:d6:0f:1a:af:
         84:4d:7c:67:3d:b3:2f:77:fa:26:3f:c3:9a:68:a0:5a:74:60:
         08:f3:9b:bb:45:6f:2a:28:e3:e2:c9:5d:bc:e5:60:6b:32:78:
         5c:69:ae:d2:ef:7f:51:88:8f:b1:e2:b9:65:99:a7:45:fa:fc:
         cc:81:a9:34:8b:15:c7:be:80:8a:d4:c7:33:2f:5e:1a:11:10:
         e2:33:97:7f:21:bd:40:5d:e0:9b:7c:8a:84:e8:46:1c:3a:8f:
         e2:fa:7e:3f:fb:32:77:b9:6b:9b:d0:e2:60:d2:c8:1e:69:8e:
         f6:c0:7b:99:d4:5b:c5:3a:9a:56:42:48:d8:8c:fb:5c:88:b5:
         39:ac:fb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:13:50 2024 by rpki-client on console-fra.rpki-client.org