Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/9BE3C7087E8311EEBC7E6681C4F9AE02.roa
File:                     9BE3C7087E8311EEBC7E6681C4F9AE02.roa (raw, json)
Hash identifier:          e+PPjlFLXc6MN2cqTUfg11r9FRcEBPWXN3IXgHLc99I=
Subject key identifier:   0B:5B:20:C6:94:4E:FF:9A:B0:D8:3E:B1:B9:66:69:21:1A:14:49:7D
Certificate issuer:       /CN=A917A4F7/serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA
Certificate serial:       02
Authority key identifier: 22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/9BE3C7087E8311EEBC7E6681C4F9AE02.roa
Signing time:             Wed 08 Nov 2023 22:10:22 +0000
ROA not before:           Wed 08 Nov 2023 22:10:22 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     149841
IP address blocks:        103.187.240.0/23 maxlen: 23
                          2400:7fa0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl
                          rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 07:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A4F7/serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA
        Validity
            Not Before: Nov  8 22:10:22 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=654c074d-0a8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:45:0e:fd:d2:cd:c1:67:30:ab:e3:61:1f:17:
                    ec:0c:db:15:13:d3:02:94:47:2c:6d:2a:bd:f2:9f:
                    48:a1:3a:3a:b6:57:9d:18:d5:82:d1:d8:05:fd:17:
                    96:7e:e2:c6:c6:ab:15:37:0c:25:48:32:48:96:9a:
                    e0:cd:ee:d0:62:18:da:fb:7f:1d:74:54:da:90:46:
                    fd:18:4b:a8:8d:b3:28:e6:1a:bf:0b:6a:d8:92:53:
                    68:51:cc:0f:74:fe:c4:32:df:2e:97:59:af:06:1f:
                    bd:a2:a5:05:3d:6f:28:09:e0:73:80:e5:c2:91:b3:
                    ef:1b:0a:21:05:1e:7b:b4:f4:3d:52:c4:37:7f:93:
                    b6:25:99:c8:8b:43:fb:cd:14:cc:2e:91:14:d4:4e:
                    75:2e:3d:6f:aa:7c:81:7a:5a:de:b1:02:13:81:eb:
                    c7:46:98:f5:2f:5d:21:f0:59:20:c7:11:80:74:7b:
                    48:0f:1e:ba:00:28:d9:7d:12:df:24:f3:2c:3f:e8:
                    f9:89:2e:e5:7a:66:59:9f:81:01:18:6b:2f:cd:ee:
                    7e:67:0a:b8:cf:97:a6:ae:20:d9:06:a9:01:8f:c0:
                    ff:d3:f3:dc:03:c1:83:4a:ac:a8:aa:64:89:fe:81:
                    15:6c:8a:80:fe:f2:21:83:aa:d0:be:ef:52:b8:cd:
                    bf:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5B:20:C6:94:4E:FF:9A:B0:D8:3E:B1:B9:66:69:21:1A:14:49:7D
            X509v3 Authority Key Identifier:
                keyid:22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/9BE3C7087E8311EEBC7E6681C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.240.0/23
                IPv6:
                  2400:7fa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:aa:d8:c7:19:00:d5:d0:01:57:88:bf:1e:b2:fe:57:4f:c5:
         2d:97:cb:21:ab:49:bf:b2:f7:fc:b3:8f:74:2d:b4:4d:38:a6:
         a5:bd:08:65:58:2d:75:d8:5f:fd:79:d6:3f:c3:26:83:fc:5e:
         69:5a:c1:ef:05:94:37:3d:f9:42:58:2f:56:26:b5:dd:08:72:
         6c:8e:d8:78:d8:01:07:c1:0c:ba:18:0e:03:ae:0f:e8:e4:9a:
         34:f4:42:9f:4e:43:94:74:af:3d:b4:d5:56:17:6e:e0:b5:ee:
         1e:08:a0:d1:28:ab:ed:eb:13:8f:5a:ac:53:d8:62:91:4a:ea:
         63:84:ad:d3:ec:81:9c:b9:cc:6b:89:83:34:bf:9c:44:90:d2:
         ce:a5:f3:1f:9d:67:23:49:cc:81:6e:41:1b:c8:9e:4d:9f:ce:
         d9:2e:a4:51:da:7e:d1:f4:c0:72:91:ea:34:e6:a4:07:36:b9:
         30:86:55:ab:61:31:74:41:b6:8b:b7:5c:40:88:cb:7c:9a:56:
         a1:fa:4b:47:61:de:b9:8f:c5:0d:da:8d:a3:bd:57:72:09:f7:
         58:7a:95:17:f5:d8:89:6d:4e:70:bd:98:7e:3b:66:3d:06:9c:
         21:7f:24:5f:43:d7:ad:69:a3:e1:a4:f1:48:ee:65:60:09:40:
         4c:7c:b0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 08:42:03 2024 by rpki-client on console-fra.rpki-client.org