Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/0EF0E842839E11EEA1892A12C4F9AE02.roa
File:                     0EF0E842839E11EEA1892A12C4F9AE02.roa (raw, json)
Hash identifier:          qjRK1UsduZje7NigLFGo9IfaYJBsXsGYrorJ0nbh7Fg=
Subject key identifier:   2D:A2:3D:05:88:02:A4:0D:35:B6:E1:84:47:3B:87:08:42:0A:A2:02
Certificate issuer:       /CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088
Certificate serial:       0BE1
Authority key identifier: 02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/0EF0E842839E11EEA1892A12C4F9AE02.roa
Signing time:             Mon 04 Mar 2024 19:27:11 +0000
ROA not before:           Mon 04 Mar 2024 19:27:11 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     135341
IP address blocks:        103.134.126.0/24 maxlen: 24
                          103.134.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl
                          rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3041 (0xbe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088
        Validity
            Not Before: Mar  4 19:27:11 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65e6208f-96ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9a:f0:ae:65:65:81:50:91:c3:f2:82:7a:7b:
                    1f:f8:92:ff:f0:8d:d0:ce:e2:3a:54:d6:40:92:d4:
                    c1:00:c2:15:7b:84:72:02:ae:d3:c2:97:f4:a1:19:
                    56:27:11:41:cc:c0:01:84:05:55:03:50:d5:93:51:
                    de:1f:f1:22:6a:41:97:1b:56:fc:19:3c:dc:cf:9c:
                    59:1b:ea:c8:61:f4:54:0f:e1:a0:a0:e8:23:b4:e9:
                    10:64:04:53:04:e4:8a:ae:2f:42:ee:82:07:c7:21:
                    e5:3b:c4:2a:fd:76:77:83:13:3d:c3:27:4d:44:1e:
                    01:67:f4:3a:5a:96:ac:84:7b:f6:62:8f:7a:e1:bf:
                    75:fd:e7:2a:d5:31:67:c4:ea:ae:92:2a:c3:e2:d9:
                    88:57:53:2b:f8:3f:fc:bf:c2:11:29:71:1a:32:5f:
                    55:2e:c0:fb:cd:81:53:cc:35:e3:13:0c:e0:c6:33:
                    01:fc:c2:8e:e5:8f:01:40:a1:ea:a8:d5:29:65:d5:
                    60:84:83:27:8f:95:b7:62:31:fd:ec:36:f1:f6:fe:
                    2c:3b:ab:ff:c3:95:8f:c2:df:a7:73:85:11:be:44:
                    d9:4b:39:55:96:18:eb:ab:e6:dc:54:39:e2:f7:e2:
                    fc:5e:43:83:b6:09:8f:c1:1f:7f:60:b2:de:db:7f:
                    8a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A2:3D:05:88:02:A4:0D:35:B6:E1:84:47:3B:87:08:42:0A:A2:02
            X509v3 Authority Key Identifier:
                keyid:02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/0EF0E842839E11EEA1892A12C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:7e:b0:2d:ba:f3:21:ee:80:16:27:2d:56:7f:ba:6d:ff:24:
         ac:5c:bb:54:63:d2:4e:5d:c7:7f:20:68:f0:6b:9a:c7:66:67:
         5d:a1:9a:43:84:7c:c7:67:65:8f:ed:48:36:a3:77:fd:24:d4:
         a6:7c:60:41:b3:a4:3c:52:1d:1a:32:56:af:1d:e8:2d:b0:43:
         48:e4:16:07:7e:a5:1f:0d:b5:ad:96:46:fc:b6:22:ce:a4:9c:
         d5:49:7a:b1:57:42:6a:95:fa:e6:d1:7d:7c:c3:c8:5a:46:36:
         99:e9:a4:f1:4d:3d:4f:a2:9c:16:f6:ab:86:b3:76:8e:6b:da:
         30:69:c3:2e:0f:e2:e5:82:72:76:de:68:e0:16:6c:19:d7:00:
         d8:5a:2f:b4:77:cc:8d:51:87:5a:2c:29:a5:6a:f7:12:0e:69:
         72:32:92:c5:63:2b:da:d0:4a:8c:1b:be:be:d6:3c:18:f6:86:
         60:c1:5f:f6:7d:fc:c1:0f:75:9c:ee:ce:ea:f8:01:a9:74:bb:
         34:7f:41:c2:61:dc:f3:6d:aa:3f:17:cc:ad:64:3c:4e:57:03:
         2e:1d:96:8f:a3:98:f2:07:50:5d:62:e5:4a:58:f8:8a:58:35:
         cf:f4:0f:67:b8:65:1d:76:86:0d:94:7c:86:3f:db:b9:ba:49:
         fb:ef:6e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 20:35:52 2024 by rpki-client on console-ams.rpki-client.org