Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/DC0002F687B511EB91F5691BC4F9AE02.roa
File:                     DC0002F687B511EB91F5691BC4F9AE02.roa (raw, json)
Hash identifier:          X1i23Z6zIN1QjKHMpkGVIlFh6TDoQy5GQPkT3+kLZYs=
Subject key identifier:   20:E0:1D:63:8D:CD:D3:F3:D4:B8:25:BB:53:D3:C0:2D:09:73:7E:2A
Certificate issuer:       /CN=A9178297/serialNumber=9E1BA232737A3D00D7FAA0B4DC3834D9AAF06DF8
Certificate serial:       04DD
Authority key identifier: 9E:1B:A2:32:73:7A:3D:00:D7:FA:A0:B4:DC:38:34:D9:AA:F0:6D:F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhuiMnN6PQDX-qC03Dg02arwbfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/DC0002F687B511EB91F5691BC4F9AE02.roa
Signing time:             Wed 17 May 2023 02:09:01 +0000
ROA not before:           Wed 17 May 2023 02:09:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     139904
IP address blocks:        103.164.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.crl
                          rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhuiMnN6PQDX-qC03Dg02arwbfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 May 2024 00:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1245 (0x4dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178297/serialNumber=9E1BA232737A3D00D7FAA0B4DC3834D9AAF06DF8
        Validity
            Not Before: May 17 02:09:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6464373d-3547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d4:a5:cf:92:55:4b:b1:93:f6:55:39:84:77:
                    f2:37:2d:63:9d:d3:8e:e1:e9:70:45:3c:94:c8:a6:
                    9d:0a:ab:31:7f:9b:af:f0:54:dd:fa:66:94:b2:e5:
                    3b:7b:05:78:da:29:cb:9b:0e:62:35:24:20:2d:02:
                    77:8f:8e:07:21:d8:13:4f:2c:90:65:43:f0:ee:75:
                    26:d7:eb:f3:83:17:10:3d:e9:55:ce:ac:8f:04:88:
                    75:05:65:18:af:67:db:bd:99:d9:45:a4:f4:20:7f:
                    07:e3:93:c6:24:da:28:9c:07:dd:d8:38:4d:a3:64:
                    7f:c7:0a:b5:9b:bb:67:7a:76:2d:bb:68:8c:24:ad:
                    b1:ae:02:b3:20:70:3e:c4:e0:f9:de:4f:88:34:f6:
                    98:d1:8f:75:af:ab:be:58:23:2e:a5:72:9e:79:c9:
                    2e:b1:63:86:ee:76:f1:c6:68:00:84:9d:f1:92:ee:
                    2c:79:6d:d4:1c:64:4e:5e:21:84:92:e4:09:9b:bf:
                    82:42:d6:15:95:19:0f:c2:85:44:c0:4e:3e:70:b7:
                    f2:0e:c8:5b:0c:94:0e:3c:ac:1b:fd:b2:3e:ca:29:
                    83:b9:f4:a8:8d:a6:00:2f:17:21:0e:0c:bd:d9:93:
                    5e:f3:9a:03:1a:48:0b:a6:7d:c1:22:79:08:f0:1e:
                    4c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E0:1D:63:8D:CD:D3:F3:D4:B8:25:BB:53:D3:C0:2D:09:73:7E:2A
            X509v3 Authority Key Identifier:
                keyid:9E:1B:A2:32:73:7A:3D:00:D7:FA:A0:B4:DC:38:34:D9:AA:F0:6D:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhuiMnN6PQDX-qC03Dg02arwbfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/DC0002F687B511EB91F5691BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:dd:7f:b8:76:19:9e:62:66:b0:b4:73:ad:81:ea:07:28:8c:
         e0:71:9d:25:e3:28:8f:09:ff:e5:06:b7:5d:1a:89:6b:bf:31:
         e5:e1:84:9f:9a:ed:8b:aa:43:e2:80:36:f3:8a:0f:65:39:aa:
         27:52:6b:eb:d1:19:d6:e1:67:ca:f5:9b:ba:42:13:15:ae:68:
         e1:37:3e:cb:db:57:dc:5b:0f:f2:85:fc:d2:31:c3:9b:f5:dd:
         a5:58:99:6e:b4:90:f5:f6:ae:0c:29:49:55:1a:c9:97:5b:39:
         9d:a6:1b:2d:92:53:f5:ba:cf:d5:b7:f0:77:2a:f3:54:ca:59:
         4c:16:a2:67:63:ac:a2:1c:5b:a6:8c:4d:42:b0:bb:8b:4b:54:
         9c:79:38:f9:7d:54:fe:bc:d0:ce:46:5a:df:64:7a:2c:3c:3b:
         91:82:ad:0f:6f:bf:25:9f:22:bb:93:64:bb:05:1e:0b:b5:9a:
         9a:60:f6:34:ec:e2:e6:e3:e8:34:10:1e:31:0e:d4:82:99:dd:
         e9:e5:f5:a4:75:f2:21:a2:7d:27:8a:e6:9e:c8:8b:52:ed:88:
         94:41:3b:33:e1:89:1c:bf:76:92:fa:fb:49:69:ac:e1:39:c2:
         33:c7:31:d6:49:16:aa:85:17:f5:7e:54:ad:16:fd:b8:ad:27:
         57:de:ee:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 01:47:01 2024 by rpki-client on console-fra.rpki-client.org