Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/0CDA881EAF0311EB96FC344BC4F9AE02.roa
File:                     0CDA881EAF0311EB96FC344BC4F9AE02.roa (raw, json)
Hash identifier:          0kX7U249SIUh/HJN7c/AiJHZs64Z43yJ5lc7dVnigu4=
Subject key identifier:   04:69:F4:0B:12:78:F9:BD:4A:98:95:D8:55:79:CF:4F:27:13:3B:ED
Certificate issuer:       /CN=A9179B50/serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22
Certificate serial:       04B2
Authority key identifier: 3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/0CDA881EAF0311EB96FC344BC4F9AE02.roa
Signing time:             Thu 03 Aug 2023 00:21:14 +0000
ROA not before:           Thu 03 Aug 2023 00:21:14 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     137969
IP address blocks:        103.119.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl
                          rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 00:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1202 (0x4b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179B50/serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22
        Validity
            Not Before: Aug  3 00:21:14 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64caf2fa-a67e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0a:a8:3d:96:9c:7b:7d:72:56:39:12:0c:93:
                    a0:59:7f:28:84:0e:99:68:e9:79:f0:65:8c:3c:f9:
                    f8:d6:1d:ee:aa:86:f3:a0:d2:ef:97:a4:fa:82:22:
                    2a:52:be:66:c2:98:2a:d9:12:53:0d:ea:e1:0d:5b:
                    3d:d4:16:5c:58:77:53:ab:bc:e5:3b:d7:a3:90:dd:
                    e7:17:fb:0a:f5:4c:1f:41:5d:77:9e:fb:cf:1d:99:
                    e6:e8:b5:85:72:3c:5e:e5:ea:75:78:9d:f9:b3:61:
                    04:a5:d6:dd:83:e9:a2:87:85:37:13:34:0d:dd:3f:
                    fe:ab:80:a8:cb:d3:43:ec:36:03:90:37:c0:f4:8b:
                    05:9c:15:23:d1:2b:6a:fe:36:2d:bb:b7:70:e4:57:
                    b4:35:05:86:0e:19:0b:3d:a5:c7:b7:ab:95:1d:17:
                    1a:3e:8e:e3:9e:19:fb:41:17:55:72:37:bd:ff:16:
                    04:5c:9d:99:5d:d5:6a:94:d5:5a:50:c6:0d:51:50:
                    e3:04:af:dc:43:ef:04:9a:37:7a:5e:4c:0f:a8:a3:
                    7e:db:89:a6:03:d4:18:4d:3d:e4:98:9d:a0:89:70:
                    f8:38:53:ee:1b:76:40:26:70:7c:21:b6:71:31:67:
                    86:8e:ed:0f:df:3e:63:79:dd:88:b4:df:a9:cd:f6:
                    6a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:69:F4:0B:12:78:F9:BD:4A:98:95:D8:55:79:CF:4F:27:13:3B:ED
            X509v3 Authority Key Identifier:
                keyid:3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/0CDA881EAF0311EB96FC344BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:a8:f6:b1:29:47:8c:6a:2a:11:81:2f:44:dd:25:15:2c:bf:
         5f:c0:5a:60:80:ac:bd:4e:5c:f8:3f:fd:1b:19:64:67:07:f6:
         d8:91:1f:60:8c:bb:3a:b1:4c:2e:7d:0b:02:ae:b4:8b:41:e6:
         a7:7a:69:e2:21:33:58:8c:f9:de:63:bc:da:ad:52:18:a6:b5:
         cf:5a:7a:27:14:a1:1c:4c:12:c1:42:12:e6:81:83:5c:c8:4b:
         af:b4:5d:6e:73:67:e9:80:29:18:9f:f5:76:2a:e3:5f:3d:37:
         ae:57:be:f7:48:4f:0f:ab:fb:c8:f4:e0:62:09:32:71:35:c8:
         96:5c:62:bc:ec:e4:7c:b7:8f:77:31:88:06:5a:9d:44:81:59:
         67:48:b2:98:9a:93:b5:b0:44:82:19:6c:b1:68:97:46:d4:bd:
         2e:9f:b5:fb:c2:6f:3a:60:44:b9:e1:24:79:8f:af:1f:ea:14:
         46:ef:92:41:0d:2a:67:ca:dd:fc:a3:9a:47:8e:00:41:51:d5:
         ba:8c:af:e1:ae:b8:d8:a2:24:01:8a:24:d7:c6:a6:11:29:4e:
         33:a3:77:6c:6d:b2:5a:c2:43:50:bc:2c:80:be:cd:6c:02:ba:
         f3:c3:02:58:e9:b0:44:ba:50:6d:cd:a1:50:55:3c:87:85:4c:
         d0:a4:20:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:05:26 2024 by rpki-client on console-fra.rpki-client.org