Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A6BA/169687969BC311EDA6542324C4F9AE02/A2326CD09BC711EDB1BAE42AC4F9AE02.roa
File:                     A2326CD09BC711EDB1BAE42AC4F9AE02.roa (raw, json)
Hash identifier:          f0OThesUGfvttTcDodxsID0jyEWcTJ7RmlTU9M1bL0E=
Subject key identifier:   30:37:99:DE:05:C9:52:3D:26:65:8D:4A:D7:46:78:D4:EE:1A:04:AB
Certificate issuer:       /CN=A916A6BA/serialNumber=3ED80FEB3B021A05241ABE70D1A510A867AD71FD
Certificate serial:       CF
Authority key identifier: 3E:D8:0F:EB:3B:02:1A:05:24:1A:BE:70:D1:A5:10:A8:67:AD:71:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtgP6zsCGgUkGr5w0aUQqGetcf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A6BA/169687969BC311EDA6542324C4F9AE02/A2326CD09BC711EDB1BAE42AC4F9AE02.roa
Signing time:             Mon 29 Jan 2024 05:17:36 +0000
ROA not before:           Mon 29 Jan 2024 05:17:36 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     6939
IP address blocks:        103.73.218.0/24 maxlen: 24
                          103.73.219.0/24 maxlen: 24
                          2400:d8e0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A6BA/169687969BC311EDA6542324C4F9AE02/PtgP6zsCGgUkGr5w0aUQqGetcf0.crl
                          rsync://rpki.apnic.net/member_repository/A916A6BA/169687969BC311EDA6542324C4F9AE02/PtgP6zsCGgUkGr5w0aUQqGetcf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtgP6zsCGgUkGr5w0aUQqGetcf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 05:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A6BA/serialNumber=3ED80FEB3B021A05241ABE70D1A510A867AD71FD
        Validity
            Not Before: Jan 29 05:17:36 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65b734f0-dd8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1b:e6:2d:a9:48:7a:c4:4f:bd:5d:68:aa:2e:
                    23:57:67:b3:6f:22:32:0e:26:70:ab:e5:ee:44:d6:
                    f3:76:03:c4:17:05:b7:71:f3:92:b5:5b:d5:a8:ee:
                    b0:dc:8a:54:df:2e:73:b9:7e:e3:d6:d9:87:a3:b6:
                    f2:f0:f9:20:16:de:9b:70:3a:bd:e1:8b:ee:0f:89:
                    6e:8f:2e:1e:c2:c3:2b:58:c4:26:3d:96:0b:55:23:
                    56:f3:7b:47:1a:fb:f6:2c:17:12:98:24:94:61:e1:
                    72:17:fc:82:02:72:7d:f4:3a:8d:4d:24:a5:ea:88:
                    6b:78:2f:ea:69:f8:e5:90:13:04:0d:9e:83:ec:7e:
                    03:99:22:81:76:0f:06:05:cd:e8:6d:72:a7:b7:fb:
                    20:14:11:01:fe:f7:08:46:79:34:03:cb:9a:31:bf:
                    92:38:43:38:51:a0:64:84:96:93:47:3f:bc:56:c5:
                    ef:a3:de:49:35:d7:4b:7a:bd:19:07:cc:ab:18:36:
                    b5:2a:9a:d1:8c:53:49:71:47:28:32:73:8f:67:7b:
                    13:52:8c:56:fd:e8:ce:31:6e:cb:c4:95:98:87:ab:
                    4b:73:2a:c4:99:7e:8a:fb:7a:60:8b:03:cf:84:34:
                    af:c8:08:08:3a:9e:bd:17:84:2f:09:a2:a0:68:23:
                    ff:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:37:99:DE:05:C9:52:3D:26:65:8D:4A:D7:46:78:D4:EE:1A:04:AB
            X509v3 Authority Key Identifier:
                keyid:3E:D8:0F:EB:3B:02:1A:05:24:1A:BE:70:D1:A5:10:A8:67:AD:71:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A6BA/169687969BC311EDA6542324C4F9AE02/PtgP6zsCGgUkGr5w0aUQqGetcf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtgP6zsCGgUkGr5w0aUQqGetcf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A6BA/169687969BC311EDA6542324C4F9AE02/A2326CD09BC711EDB1BAE42AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.218.0/23
                IPv6:
                  2400:d8e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:82:af:a8:1c:80:47:fb:6b:b7:39:46:03:d0:6e:dc:ab:60:
         99:6f:36:25:78:f1:52:b2:fa:47:36:23:7d:aa:e8:e4:46:2e:
         a3:9b:71:31:00:f0:fa:ab:7f:f0:1d:06:04:60:11:cd:46:e8:
         78:0c:2b:70:04:78:64:a7:5e:ca:59:94:66:6a:db:e0:40:1a:
         45:72:a2:74:8f:a3:75:c2:1d:d6:a2:8d:a9:84:17:40:59:5d:
         45:96:61:d0:ea:83:4e:20:9d:86:d5:1b:e4:3a:1e:a9:1b:f9:
         98:b6:55:7f:f2:0c:6e:17:e8:b4:95:ce:ea:7d:79:1f:3a:7b:
         0b:ae:d9:af:25:6b:28:70:22:17:9d:91:79:d5:10:6d:83:6a:
         e9:e1:3f:8b:91:56:ef:88:98:10:6e:a0:d4:0e:ee:ed:9d:5a:
         d6:f8:e9:24:59:fc:bf:f8:b9:33:23:a5:ef:30:30:13:d9:99:
         2f:5f:e6:45:3c:3b:3b:dd:fa:9b:07:90:29:d0:b9:b4:b2:b7:
         dd:06:8a:b5:ad:34:54:cb:18:39:65:82:a0:23:0c:97:a8:3c:
         d3:e1:d8:bc:c7:04:b9:20:38:23:09:b3:b1:61:ed:18:06:48:
         d2:2f:24:e5:40:9f:e0:6b:64:49:fd:90:68:5e:90:a6:56:77:
         7e:02:1a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 06:38:25 2024 by rpki-client on console-fra.rpki-client.org