Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/E41BF8841CDC11ECBA794120C4F9AE02.roa
File:                     E41BF8841CDC11ECBA794120C4F9AE02.roa (raw, json)
Hash identifier:          OIj0dgrPd8UzAJPwVHslafedCBw/kqimM+g2XTGacbs=
Subject key identifier:   F4:F4:15:22:C5:BD:85:22:89:2D:06:89:82:16:A5:69:D6:5E:FD:C3
Certificate issuer:       /CN=A9169382/serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91
Certificate serial:       03AC
Authority key identifier: 21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/E41BF8841CDC11ECBA794120C4F9AE02.roa
Signing time:             Sat 07 Oct 2023 01:22:35 +0000
ROA not before:           Sat 07 Oct 2023 01:22:35 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     147019
IP address blocks:        103.173.12.0/23 maxlen: 23
                          103.173.12.0/24 maxlen: 24
                          103.173.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl
                          rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 01:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 940 (0x3ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169382/serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91
        Validity
            Not Before: Oct  7 01:22:35 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6520b2db-21f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:12:dc:34:80:66:1d:12:de:62:c6:97:66:02:
                    5e:09:6d:fb:61:60:06:d2:d6:fd:b3:53:ec:a0:06:
                    d6:42:6f:85:79:97:ce:56:9f:d9:6b:97:d0:7e:2b:
                    f6:53:70:54:d6:8a:ad:dc:2b:52:db:4f:c0:f6:49:
                    d4:4c:73:bc:e1:7c:41:a5:ed:34:be:90:87:a4:2e:
                    99:15:2f:8f:a8:fd:4e:f7:52:42:12:7e:67:f3:c1:
                    a6:31:15:14:f9:1d:f5:7a:9e:ff:78:eb:a1:f3:fd:
                    83:7f:db:42:67:6e:4d:91:09:02:de:5e:c1:43:09:
                    7d:99:7b:13:37:29:c8:2f:89:55:b0:ec:7b:87:4e:
                    7b:e3:35:26:de:41:38:9d:9c:63:8b:cb:39:26:0f:
                    78:cd:0e:4e:59:e5:ab:7b:7a:ae:24:e8:00:29:b9:
                    a0:5f:6b:0e:41:dd:45:9d:95:94:48:92:91:f1:fe:
                    11:d5:5b:2a:b0:85:6e:55:36:04:da:3f:6f:f2:7c:
                    36:cd:d6:d0:80:db:b3:c4:cb:a3:a4:ab:85:07:94:
                    5f:85:04:37:55:65:82:f9:77:d9:48:e7:b7:bb:66:
                    de:92:eb:94:f7:5d:fd:67:e6:ba:14:bb:38:d8:d1:
                    0f:fb:67:d4:27:0f:d7:e0:9e:5b:1b:84:09:b8:78:
                    72:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F4:15:22:C5:BD:85:22:89:2D:06:89:82:16:A5:69:D6:5E:FD:C3
            X509v3 Authority Key Identifier:
                keyid:21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/E41BF8841CDC11ECBA794120C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:46:47:62:cc:89:5d:21:e8:ca:70:83:ec:98:d7:17:af:85:
         bc:72:65:1b:f3:ce:7d:1e:a3:c9:09:82:42:bf:4e:9d:b9:98:
         7e:19:10:12:e5:98:42:64:6f:70:62:d8:ae:dc:41:ac:0d:4a:
         45:b3:d0:85:19:8e:81:26:9b:2a:4b:3c:61:d9:87:49:70:81:
         5f:aa:f2:31:53:bf:75:4a:a2:a5:d7:50:48:26:de:62:f7:a7:
         73:8e:13:06:36:75:c5:c6:ed:66:21:26:ae:f3:43:af:c5:1e:
         12:bc:b4:66:7f:0b:ed:a9:7b:0b:c6:8a:2a:45:d7:a4:c5:b1:
         22:95:7e:db:75:af:f4:e6:da:93:7a:7b:28:9c:28:91:c0:39:
         0a:44:77:4c:8d:8e:f3:7e:8d:e7:85:87:58:03:b0:ad:b2:a2:
         4e:8a:b9:41:82:88:41:5c:9e:18:e4:13:4c:24:be:ca:3b:29:
         f9:32:fa:50:c2:da:25:0a:1f:37:cc:5a:f6:dc:d4:97:24:6c:
         cb:02:25:ee:29:bf:9d:51:9d:e4:90:8f:0c:0a:1e:53:e6:c5:
         74:4c:92:6c:dd:a3:fe:b6:ca:06:f6:7e:71:5f:b5:8b:b3:4e:
         ff:87:45:c6:94:68:87:09:6c:4c:61:41:c4:68:de:b6:a8:be:
         49:0e:51:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:59:08 2024 by rpki-client on console-ams.rpki-client.org