Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/0E7858548CBB11ECB0842F23C4F9AE02.roa
File:                     0E7858548CBB11ECB0842F23C4F9AE02.roa (raw, json)
Hash identifier:          jH8psL2SmOH/Zt6q1SyS6fHiP/kk+iM9+sC0uv7rAGw=
Subject key identifier:   86:7E:6C:9F:F4:9D:29:20:B4:E2:F7:30:30:A0:DC:9F:EF:27:EE:C3
Certificate issuer:       /CN=A9167BCA/serialNumber=F4CC4304E1790E08F5EC929A87372269D08FB681
Certificate serial:       02FF
Authority key identifier: F4:CC:43:04:E1:79:0E:08:F5:EC:92:9A:87:37:22:69:D0:8F:B6:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/0E7858548CBB11ECB0842F23C4F9AE02.roa
Signing time:             Sat 03 Feb 2024 02:35:22 +0000
ROA not before:           Sat 03 Feb 2024 02:35:22 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     138997
IP address blocks:        103.180.28.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.crl
                          rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 May 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 767 (0x2ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167BCA/serialNumber=F4CC4304E1790E08F5EC929A87372269D08FB681
        Validity
            Not Before: Feb  3 02:35:22 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65bda66a-6fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0c:7e:54:12:8d:bf:f6:22:18:6e:13:b4:94:
                    91:ae:3b:ab:b9:7f:79:6c:f5:39:36:53:07:52:19:
                    74:3f:a9:93:34:36:28:de:68:e2:e3:e7:8b:50:f1:
                    2c:c8:8d:e8:d2:fd:8f:25:a4:17:f8:62:fb:e0:16:
                    fa:f2:0b:72:ce:a7:55:14:72:0d:58:34:c1:e6:9f:
                    5f:30:11:50:f0:1c:30:15:3f:24:13:96:ca:b4:a0:
                    9b:f0:4c:5a:8d:a5:5f:d1:08:85:88:f5:20:d0:af:
                    29:07:81:42:42:ea:e1:03:30:46:6c:dd:51:99:51:
                    a2:42:ea:13:aa:e3:57:bd:2c:a8:bc:d9:2b:a9:b6:
                    50:61:17:5e:57:b6:d5:e4:67:8d:94:43:96:31:ba:
                    b0:1e:9b:8f:bf:cb:f2:19:b3:91:14:6b:65:af:9f:
                    36:36:54:2d:d9:d7:af:fe:ff:2f:27:44:62:e6:b6:
                    db:b6:aa:fc:63:e8:97:59:ae:20:a3:ab:ed:49:4c:
                    26:ad:cf:59:8f:72:d5:07:5c:03:89:70:6d:d4:08:
                    88:fb:8e:ef:d9:23:ef:11:f8:3b:31:b1:b3:9f:61:
                    a7:b1:fb:2b:da:eb:fe:77:87:fe:4a:47:c5:83:97:
                    69:fe:5a:5a:1d:5d:1c:62:d2:a3:90:de:43:f8:5c:
                    89:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7E:6C:9F:F4:9D:29:20:B4:E2:F7:30:30:A0:DC:9F:EF:27:EE:C3
            X509v3 Authority Key Identifier:
                keyid:F4:CC:43:04:E1:79:0E:08:F5:EC:92:9A:87:37:22:69:D0:8F:B6:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/0E7858548CBB11ECB0842F23C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:68:30:a2:c2:fa:ac:4e:4a:8b:fa:1a:4b:d5:c0:d9:c7:c5:
         06:ea:01:41:9f:03:11:ef:b6:02:66:92:10:aa:57:99:b8:9f:
         6b:ea:25:bd:c7:86:97:61:10:87:96:ed:e8:b9:c8:39:ef:42:
         c7:8c:30:a1:bf:d1:91:de:ca:be:69:fe:d7:65:4e:60:3a:b0:
         c5:bd:f2:e5:13:bf:94:14:ca:f4:dd:ce:80:d6:8a:cc:03:92:
         e4:b6:f2:15:df:fe:a3:b9:61:18:42:e2:66:8a:f0:c4:db:aa:
         57:b1:e2:cc:4d:ad:3a:55:b4:d1:1f:c7:86:ff:7d:8c:be:7f:
         be:8d:c0:3c:51:f0:e5:72:f8:81:af:af:f7:1e:52:8a:fa:b7:
         4c:18:22:19:ab:05:79:3c:a5:5b:2e:36:7c:7e:d8:62:7c:f4:
         af:e7:c9:8f:8e:83:82:60:8d:b4:21:4f:56:7f:ff:40:8b:36:
         e4:f7:7d:d1:46:13:2d:94:81:93:04:35:0e:e4:9b:ca:34:32:
         29:b5:ea:3d:0e:7e:cf:3d:e9:d3:3f:3c:d8:81:68:c3:c3:eb:
         2a:98:80:ba:42:57:b3:c9:be:47:25:18:92:55:cc:67:ec:0d:
         2a:11:8f:db:a1:cb:32:a3:33:63:d7:d1:31:f3:87:f6:b0:c5:
         fa:07:a0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 03:48:41 2024 by rpki-client on console-fra.rpki-client.org