Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/BF811486DC1E11EBB2C72F52C4F9AE02.roa
File:                     BF811486DC1E11EBB2C72F52C4F9AE02.roa (raw, json)
Hash identifier:          OACI79rBVssRCBpX1bDdgZPrArU/T53pKaQFasxd1KU=
Subject key identifier:   D0:63:57:5A:54:DF:E2:B3:39:EE:9F:2F:CA:35:8F:01:45:C5:14:BC
Certificate issuer:       /CN=A9167C9C/serialNumber=6DDEC6A17129230EEEFE508AF11962FB4C0F6FC2
Certificate serial:       0409
Authority key identifier: 6D:DE:C6:A1:71:29:23:0E:EE:FE:50:8A:F1:19:62:FB:4C:0F:6F:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bd7GoXEpIw7u_lCK8Rli-0wPb8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/BF811486DC1E11EBB2C72F52C4F9AE02.roa
Signing time:             Thu 01 Jun 2023 03:50:34 +0000
ROA not before:           Thu 01 Jun 2023 03:50:34 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     142136
IP address blocks:        103.166.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.crl
                          rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bd7GoXEpIw7u_lCK8Rli-0wPb8I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 May 2024 01:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1033 (0x409)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167C9C/serialNumber=6DDEC6A17129230EEEFE508AF11962FB4C0F6FC2
        Validity
            Not Before: Jun  1 03:50:34 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6478158a-7811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f2:06:6c:32:ac:9a:b7:44:f1:33:0a:3d:44:
                    c9:9c:4f:82:ab:9b:9a:13:aa:34:c5:54:be:b7:82:
                    df:4e:d7:67:b2:75:5a:4b:2c:ad:6d:f4:23:21:da:
                    46:da:f5:91:58:f6:09:35:f5:4e:e4:33:6a:df:6d:
                    77:cc:06:55:2c:32:54:24:ba:01:24:fd:1e:a0:a7:
                    86:76:71:bf:6f:92:b8:3d:0e:10:b5:55:3b:7c:87:
                    cf:fd:0c:f8:46:dd:e3:5e:4e:3d:63:0e:f3:c2:5a:
                    39:b8:30:9e:76:77:18:86:19:5c:33:cd:b0:6c:5c:
                    7f:07:d0:07:df:b8:c3:e0:cd:14:78:44:ce:98:2a:
                    df:6a:13:07:2f:14:a3:12:fd:08:e8:3d:f5:24:f3:
                    78:36:57:a0:a5:df:51:6d:bc:36:aa:23:f9:07:f8:
                    0f:9d:93:85:de:b1:c1:ce:39:d5:8a:eb:f6:6d:37:
                    f3:19:97:fd:24:66:c1:94:c0:19:ac:4b:ad:56:f6:
                    f7:f9:32:bd:b0:ad:fd:6d:a7:40:9e:ec:c8:a3:68:
                    dd:3d:eb:71:cf:bf:b4:d1:17:27:da:86:ab:ad:6d:
                    3b:b0:1b:ff:e6:8a:5d:fe:d3:99:46:2c:6e:49:38:
                    d1:ce:ed:f1:52:3d:dc:e0:28:3b:4b:50:2a:0b:43:
                    29:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:63:57:5A:54:DF:E2:B3:39:EE:9F:2F:CA:35:8F:01:45:C5:14:BC
            X509v3 Authority Key Identifier:
                keyid:6D:DE:C6:A1:71:29:23:0E:EE:FE:50:8A:F1:19:62:FB:4C:0F:6F:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bd7GoXEpIw7u_lCK8Rli-0wPb8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/BF811486DC1E11EBB2C72F52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:fc:a0:53:1f:65:8b:99:56:46:47:a5:59:8e:bf:d2:cf:31:
         c0:09:5c:25:8d:ff:97:3c:12:02:6d:df:27:db:4c:4d:99:fd:
         a8:d0:c5:5c:9d:ad:c9:b0:8b:bc:5f:0d:9d:b7:f0:54:ee:5e:
         d4:c3:39:8c:4c:a4:2d:b2:a5:57:fc:d4:6b:41:e8:ef:8e:b0:
         3d:94:d4:2c:53:12:87:93:7c:49:55:f7:7f:df:37:37:fe:7d:
         4a:e4:a3:ea:85:58:10:01:d5:aa:fd:5b:1b:d5:e0:b8:60:66:
         9e:74:80:f5:f7:62:ed:1e:e5:fe:66:18:94:57:65:cb:72:d6:
         c3:6c:88:25:4b:66:85:55:03:50:74:82:8d:a8:0a:03:84:0b:
         73:05:77:03:7b:0c:cf:07:36:4f:7e:1a:76:41:5a:83:06:45:
         41:9b:2f:24:1e:ad:fe:94:ee:4c:77:7f:34:b3:50:18:b6:7b:
         1a:82:2f:26:96:7e:2e:0e:89:be:46:86:5b:b2:84:1a:18:60:
         42:83:f1:1d:f1:72:cc:50:3a:3e:c8:58:e9:de:81:ab:64:57:
         a5:bb:88:e0:30:57:52:fb:a9:cf:a0:39:ea:f1:85:c4:cc:a4:
         0f:36:1d:c2:bd:15:4b:fe:76:ac:ec:5a:73:21:fb:92:59:b5:
         7e:e6:b6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 02:52:05 2024 by rpki-client on console-fra.rpki-client.org