Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/69683D8CC64D11EABD8FD32DC4F9AE02.roa
File:                     69683D8CC64D11EABD8FD32DC4F9AE02.roa (raw, json)
Hash identifier:          kzzvDt9d/HhjlFNs6PyqeT0i8/ElA6E/6XKvOGNdQJ8=
Subject key identifier:   C8:8B:18:EB:CB:F2:E1:60:D6:EC:BF:51:C7:DB:86:78:3C:06:17:7D
Certificate issuer:       /CN=A915C6B7/serialNumber=113EA0FFCD6CBB7B3CF545ABCD2C962D86E1ECB0
Certificate serial:       0A8F
Authority key identifier: 11:3E:A0:FF:CD:6C:BB:7B:3C:F5:45:AB:CD:2C:96:2D:86:E1:EC:B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/69683D8CC64D11EABD8FD32DC4F9AE02.roa
Signing time:             Wed 04 Oct 2023 19:37:07 +0000
ROA not before:           Wed 04 Oct 2023 19:37:07 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     139741
IP address blocks:        103.144.106.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.crl
                          rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 20:05:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2703 (0xa8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C6B7/serialNumber=113EA0FFCD6CBB7B3CF545ABCD2C962D86E1ECB0
        Validity
            Not Before: Oct  4 19:37:07 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=651dbee2-dd86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e3:69:17:6f:f5:f1:c1:52:5e:33:44:58:54:
                    96:8f:ef:73:6c:f0:eb:62:52:cb:c3:f1:89:80:b0:
                    63:78:d2:92:f0:69:ce:72:56:27:db:da:5f:f9:f7:
                    1d:bf:9b:81:d1:d4:e1:95:a5:90:94:30:4e:78:fb:
                    cc:4b:75:a8:3c:d2:21:90:d4:28:bc:e0:e5:dd:76:
                    d6:ae:31:e6:22:5d:5b:b2:52:ba:6e:8c:75:90:2c:
                    0d:10:50:1e:f8:1a:93:b8:9b:1b:76:0d:ce:a8:59:
                    7d:98:2b:68:93:15:c2:6a:1b:de:0b:5a:c3:bd:2e:
                    4f:b0:a3:25:a7:83:20:52:03:9b:70:8d:78:e7:58:
                    61:47:e9:4f:3f:7b:64:fd:01:c8:1e:e3:8a:aa:d9:
                    b7:39:05:48:21:ac:74:4d:07:80:c8:58:7e:5c:b2:
                    57:e7:83:d7:a8:06:e9:d4:01:48:fa:5f:7d:b9:3e:
                    80:39:a4:a1:8e:6c:a8:da:ac:b5:36:0c:c8:47:f9:
                    76:34:93:8b:54:06:8c:32:05:bd:df:55:d5:5f:a5:
                    c6:f4:44:79:69:92:8d:2f:b3:d1:a1:04:d1:72:ef:
                    af:9c:da:d8:3a:69:ed:2c:c5:8a:cc:ad:12:5c:35:
                    e4:00:9f:0c:f5:33:17:c2:cd:c0:8e:84:00:a6:02:
                    9f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:8B:18:EB:CB:F2:E1:60:D6:EC:BF:51:C7:DB:86:78:3C:06:17:7D
            X509v3 Authority Key Identifier:
                keyid:11:3E:A0:FF:CD:6C:BB:7B:3C:F5:45:AB:CD:2C:96:2D:86:E1:EC:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/69683D8CC64D11EABD8FD32DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:a9:91:2d:2c:c7:04:c7:01:bf:f6:c6:bf:06:53:ba:35:48:
         93:be:b6:68:6d:35:48:65:bf:9f:b6:e6:fd:57:75:16:a2:c0:
         5f:e9:66:1c:f4:40:64:45:58:05:10:03:2d:c6:c9:95:4f:12:
         80:c0:e7:4a:3b:a5:30:dd:df:28:ad:5b:49:e6:36:cc:65:ee:
         61:65:d5:da:4a:c2:fc:25:0d:f2:42:a3:23:e9:07:21:32:2a:
         80:c5:a6:08:90:f3:b3:35:e8:5a:c8:0b:dd:e6:78:23:65:62:
         48:97:6b:4d:07:9d:0b:91:2c:ae:4b:cf:ea:36:a9:f0:36:d3:
         a2:c3:db:80:8f:0e:dd:c1:f6:53:eb:29:e7:60:dc:b8:bd:b7:
         3d:d2:fd:ac:e8:ba:7a:ac:53:fe:57:7b:9b:53:f6:6a:b9:13:
         84:6e:c8:5d:a2:0f:7d:f3:03:4e:ce:e5:f8:c5:fb:d1:cd:2e:
         1f:9c:03:62:e4:71:e9:5a:81:f9:ae:21:f4:2f:50:fa:8e:db:
         10:f0:27:e2:b6:79:7b:01:63:55:e2:bb:01:76:3d:cb:84:3b:
         76:db:77:a4:a4:3a:0c:24:45:ea:fb:da:a4:18:69:25:7e:8f:
         c2:1f:cd:a4:54:43:8d:0c:31:67:c1:e8:4b:2d:b2:4b:e9:9f:
         1e:16:0f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:05:40 2024 by rpki-client on console-fra.rpki-client.org