Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/C9FDEC12E82411EE81065223C4F9AE02.roa
File:                     C9FDEC12E82411EE81065223C4F9AE02.roa (raw, json)
Hash identifier:          8qauXtkhLG8Vo6J3MvRu1qHOjW+uzy6oC9945yTOEbw=
Subject key identifier:   EF:FC:C5:7D:06:D3:CA:71:15:C5:87:42:45:D0:AC:43:8F:A6:33:3B
Certificate issuer:       /CN=A9173B29/serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF
Certificate serial:       06
Authority key identifier: C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/C9FDEC12E82411EE81065223C4F9AE02.roa
Signing time:             Fri 22 Mar 2024 08:20:51 +0000
ROA not before:           Fri 22 Mar 2024 08:20:51 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     18013
IP address blocks:        103.142.246.0/24 maxlen: 24
                          103.142.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl
                          rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 07:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173B29/serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF
        Validity
            Not Before: Mar 22 08:20:51 2024 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=65fd3f63-c44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ef:ae:d2:19:9d:53:1d:38:0a:66:3f:df:6a:
                    04:0a:87:7c:1f:0c:a6:99:04:22:da:48:5a:8a:c1:
                    36:b3:7a:08:58:ee:ee:d5:3f:12:29:3a:e6:7a:4f:
                    c9:e8:4d:c4:93:e8:b0:8d:94:99:86:1b:68:fa:f0:
                    94:14:e8:90:0a:95:29:8c:37:47:6b:cd:d4:53:eb:
                    e7:eb:a1:e4:5e:9f:5e:d6:18:53:83:e6:33:69:6a:
                    5b:7e:35:9d:6b:6a:c3:27:9a:01:99:85:e6:7e:79:
                    84:d8:0c:5b:f6:20:ca:2c:ae:d2:5c:0c:05:28:7f:
                    79:bf:ce:ef:d0:db:f8:ba:66:03:f2:45:3c:88:01:
                    48:b6:d0:6a:8f:13:c4:c5:58:2b:a2:34:ff:83:d5:
                    00:24:41:48:65:07:41:1d:50:7f:1f:bf:97:15:d1:
                    20:bb:40:4d:dc:7a:3a:37:1b:7d:81:9e:e5:8a:0e:
                    30:94:43:80:fd:42:89:b1:3b:fe:4f:94:40:09:11:
                    49:df:d9:ef:43:5c:9d:47:a0:17:22:ba:ea:25:70:
                    be:f8:d7:dd:5c:7e:24:46:b4:7e:ed:2b:07:66:25:
                    03:bd:f0:24:56:42:ba:07:cf:ca:25:60:14:60:bb:
                    35:19:19:96:ec:c2:67:a0:06:fc:38:54:aa:cd:3b:
                    8a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FC:C5:7D:06:D3:CA:71:15:C5:87:42:45:D0:AC:43:8F:A6:33:3B
            X509v3 Authority Key Identifier:
                keyid:C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/C9FDEC12E82411EE81065223C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:0c:f8:ca:7f:30:d5:2b:36:6b:9f:4c:62:cb:08:24:68:49:
         ea:d6:b5:49:02:bc:6f:59:5a:6d:4e:52:a2:87:3e:9e:ce:aa:
         f3:08:05:2b:7a:8e:47:ab:6d:ae:bf:67:9f:cf:fa:5a:41:6c:
         fe:90:52:5e:b3:5a:41:8b:41:e4:8e:68:fd:e4:97:7d:ba:cc:
         7a:78:25:65:c7:4d:d4:88:b8:5d:bc:c1:42:5b:71:c1:b6:2f:
         aa:d7:5a:da:6d:4f:e9:57:74:d4:9f:c7:43:01:40:68:ab:bf:
         d3:e1:d4:63:cc:ed:89:d1:9f:39:17:91:e4:7c:9b:c5:54:5a:
         70:40:01:86:e9:59:df:7d:80:4e:fc:e5:0d:87:7b:11:f0:11:
         14:db:c2:c0:88:f5:17:61:03:94:ad:44:e5:72:80:10:e2:af:
         0f:6c:8c:42:7d:9e:71:0a:d3:35:b0:58:ac:2c:03:a5:67:df:
         af:f6:50:93:2f:4a:2b:25:6a:69:92:13:c2:c7:9a:c7:97:f5:
         df:fa:b0:8d:41:ef:94:7a:39:d9:ab:01:89:4a:68:71:2d:f2:
         3f:42:cc:02:19:c5:85:84:68:ce:33:12:04:67:61:ec:ab:0e:
         45:c3:b8:61:0e:d8:30:34:5d:17:73:c8:54:6d:93:39:ae:d3:
         23:25:a6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:45:08 2024 by rpki-client on console-fra.rpki-client.org