Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/0B02EE20023C11EF9AF7B734C4F9AE02.roa
File:                     0B02EE20023C11EF9AF7B734C4F9AE02.roa (raw, json)
Hash identifier:          +elcXQmxTadEU9tfhJKzB5izp5O8kCGyd+XSp6Kl3yI=
Subject key identifier:   12:30:E7:74:08:B2:6C:33:B4:14:F1:72:17:73:F8:4A:99:1A:80:23
Certificate issuer:       /CN=A9179BF7/serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159
Certificate serial:       0206
Authority key identifier: 7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/0B02EE20023C11EF9AF7B734C4F9AE02.roa
Signing time:             Wed 24 Apr 2024 13:10:38 +0000
ROA not before:           Wed 24 Apr 2024 13:10:38 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     140934
IP address blocks:        103.190.16.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl
                          rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 04:19:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 518 (0x206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179BF7/serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159
        Validity
            Not Before: Apr 24 13:10:38 2024 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=662904ce-8bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c2:3a:b8:cb:53:4a:5e:82:b3:cb:43:0a:72:
                    4c:8e:fd:4b:a3:30:c4:45:ed:34:e8:08:cf:dc:f9:
                    ab:21:a6:84:75:03:41:97:0e:74:ee:29:80:84:43:
                    71:8b:e3:14:91:00:7c:c8:20:52:58:9a:52:8c:ba:
                    dd:2c:28:93:0e:97:8b:d6:7e:a7:c5:6a:e0:f8:76:
                    df:37:10:02:2f:c0:2e:d5:11:6b:d6:c2:dd:76:b2:
                    b8:18:31:3e:37:98:d7:0d:88:a8:e4:bb:7f:64:24:
                    e4:1a:71:09:cf:ad:1a:40:53:00:1e:d0:3d:94:71:
                    0d:7d:9b:b0:12:5c:e3:53:91:61:f0:68:60:2a:1e:
                    59:d4:46:58:1f:1e:28:50:d7:f7:65:81:9c:96:3d:
                    89:ab:26:00:58:82:59:f6:9b:07:84:9a:56:59:6b:
                    ef:e8:2e:a3:ef:9a:5b:a2:ab:70:b5:6d:ed:cd:24:
                    ff:3e:5b:76:bd:3a:24:1b:e7:05:f0:7c:a2:ae:10:
                    af:c3:89:da:9f:3b:4c:cf:bf:a1:82:f4:79:16:89:
                    c7:02:af:93:4c:2c:08:f1:66:cd:be:5c:04:06:c4:
                    68:8a:35:c4:b5:35:b6:11:08:f6:fb:50:aa:c4:f1:
                    e9:37:2c:e0:1e:65:d2:ce:52:43:c4:d1:35:b1:87:
                    6c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:30:E7:74:08:B2:6C:33:B4:14:F1:72:17:73:F8:4A:99:1A:80:23
            X509v3 Authority Key Identifier:
                keyid:7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/0B02EE20023C11EF9AF7B734C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:a5:47:a4:0c:e4:6f:c5:62:03:d9:ed:62:e5:05:5d:db:a8:
         cd:2f:b7:8e:39:39:50:0c:0c:b9:18:db:57:e2:a2:76:fa:bf:
         34:32:6d:df:57:20:ff:dd:8e:94:e9:ae:ba:06:d9:18:bc:00:
         05:56:f3:97:1f:8c:df:4c:cb:63:b7:62:73:13:22:92:b5:49:
         85:62:fb:42:91:0f:e6:3c:2e:ba:2f:3e:33:e6:45:ce:fa:c5:
         48:6d:75:8f:0e:26:cf:88:bb:93:e5:02:ca:ef:6d:e6:70:7a:
         b5:f1:37:5a:87:ba:28:35:5a:04:6e:76:97:a4:17:62:0a:54:
         59:08:39:80:6e:1f:0f:96:c6:df:8f:33:b9:cc:98:af:22:b8:
         e7:77:eb:96:46:7b:62:a0:8f:7e:be:c7:87:c6:f4:56:65:28:
         74:d9:81:4f:a2:51:91:91:18:3c:c1:3f:6a:60:2b:1a:a2:52:
         38:41:71:54:e2:fc:59:b3:f7:05:43:7d:82:02:9b:4f:72:59:
         80:8e:7e:ae:d1:38:8f:cc:65:25:d8:ca:a0:11:2f:da:fa:48:
         6d:04:47:f7:57:41:db:16:5e:d9:b4:43:3e:3e:af:37:5a:37:
         05:02:4c:ea:c8:62:24:37:0e:95:ea:71:71:b3:55:04:29:df:
         e6:48:7e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:18:07 2024 by rpki-client on console-fra.rpki-client.org