Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/3E6BCA6A912511EBB0270738C4F9AE02.roa
File:                     3E6BCA6A912511EBB0270738C4F9AE02.roa (raw, json)
Hash identifier:          A9rThl3FoOc3UI4pEM8sFZ4EouFKASPqDt9/k6x5psA=
Subject key identifier:   42:6D:54:37:73:F7:07:D9:12:9F:38:28:F1:73:40:90:62:76:86:40
Certificate issuer:       /CN=A915CF83/serialNumber=F55AAC468AF164A5939D72EAFDD3A4733A799609
Certificate serial:       02
Authority key identifier: F5:5A:AC:46:8A:F1:64:A5:93:9D:72:EA:FD:D3:A4:73:3A:79:96:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/3E6BCA6A912511EBB0270738C4F9AE02.roa
Signing time:             Tue 30 Mar 2021 06:57:52 +0000
ROA not before:           Tue 30 Mar 2021 06:57:52 +0000
ROA not after:            Wed 01 Mar 2028 00:00:00 +0000
asID:                     134819
IP address blocks:        103.230.164.0/24 maxlen: 24
                          2001:df7:8400::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.crl
                          rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CF83/serialNumber=F55AAC468AF164A5939D72EAFDD3A4733A799609
        Validity
            Not Before: Mar 30 06:57:52 2021 GMT
            Not After : Mar  1 00:00:00 2028 GMT
        Subject: CN=6062cbef-1801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:90:86:ce:f3:05:f8:b3:4e:94:60:bd:43:92:
                    eb:43:d5:69:25:97:4c:c4:6e:8c:4c:ce:fd:63:89:
                    f9:09:90:6f:62:a3:e2:14:a3:5f:46:93:28:75:77:
                    98:1a:ad:6b:da:b3:19:c7:4d:7c:12:53:2e:87:50:
                    35:df:88:0e:9e:02:01:51:ed:4d:c2:d3:49:89:68:
                    43:c0:b8:14:f5:ab:3e:e5:f5:e6:2c:07:d4:d4:76:
                    d2:f6:14:e5:61:9e:be:81:5c:81:76:77:d0:8b:86:
                    ae:f4:00:ab:b6:83:cc:62:52:f3:be:41:b7:f8:50:
                    fd:bf:75:ee:2f:d7:15:36:95:69:e0:f1:c6:b0:9f:
                    d8:40:a2:31:08:d4:5c:60:89:6c:e6:dc:e1:a2:a2:
                    a3:63:0e:b2:5c:b9:41:42:5a:1b:98:52:c5:56:ad:
                    a6:85:29:8c:cf:4a:c7:38:4c:7a:df:3d:1b:2d:3b:
                    e9:1d:25:bf:79:c5:ba:aa:33:83:ab:9b:55:c0:a9:
                    70:2e:a1:95:52:03:fe:cf:9a:7b:19:3d:5f:cb:98:
                    36:78:96:15:86:d7:c0:91:cc:7d:07:d2:5e:4f:29:
                    85:ef:ef:8f:b7:26:36:58:90:ad:05:ca:0a:59:a1:
                    54:35:c8:5a:5b:a9:76:f5:0b:63:56:46:d4:db:07:
                    ea:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6D:54:37:73:F7:07:D9:12:9F:38:28:F1:73:40:90:62:76:86:40
            X509v3 Authority Key Identifier:
                keyid:F5:5A:AC:46:8A:F1:64:A5:93:9D:72:EA:FD:D3:A4:73:3A:79:96:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/3E6BCA6A912511EBB0270738C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.164.0/24
                IPv6:
                  2001:df7:8400::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:b3:e0:db:71:78:5c:d0:43:2b:fd:aa:39:8c:0c:72:3f:89:
         c6:ae:06:20:04:36:56:3e:88:be:0f:2b:b0:d1:6d:22:99:b3:
         a8:bb:28:e7:95:bf:66:02:49:d0:d1:40:48:12:2a:6a:72:ca:
         be:7c:e4:00:ba:76:b4:88:0e:82:65:d5:99:de:e2:32:13:b8:
         43:89:4e:a7:d0:93:23:e8:55:ab:82:ec:62:3b:12:5d:36:4c:
         b4:73:34:99:32:85:aa:80:be:cb:c7:2b:b1:93:64:e0:f8:17:
         04:f6:02:f8:82:d1:a9:10:ab:7b:4d:df:16:d5:2b:08:6e:c8:
         b5:64:6e:6b:5a:cd:59:73:95:11:e1:a5:83:97:12:37:e2:88:
         30:7d:d2:53:87:d0:6e:d6:c0:e4:aa:9d:39:59:94:5f:ba:b8:
         f4:c9:5d:1b:ba:d0:13:10:b2:ff:0c:1e:de:4c:ce:c8:98:6d:
         48:79:aa:72:94:09:df:31:8d:00:d8:78:ec:49:33:94:fc:0e:
         f0:78:ae:78:1e:06:d8:4d:2c:9d:af:e0:8d:ea:80:0d:40:73:
         ad:73:c2:2b:94:83:06:70:af:b2:d6:a3:fc:3e:a4:72:ce:f0:
         a0:74:c6:ff:fd:31:23:1f:bf:d0:bc:59:b1:8e:ad:64:cd:ab:
         b2:35:64:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:26 2024 by rpki-client on console-fra.rpki-client.org