Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918369A/C72C518A247011EFB98E625EC4F9AE02/4CE83578247111EFB791AA5FC4F9AE02.roa
File:                     4CE83578247111EFB791AA5FC4F9AE02.roa (raw, json)
Hash identifier:          hZgi/dYJ7uzfy6oclXkFTnS07+g/zy8EpdDFFy5r1gk=
Subject key identifier:   72:6B:8C:F2:55:2F:94:48:5C:6B:C4:F4:8F:B5:18:9C:67:6F:16:47
Certificate issuer:       /CN=A918369A/serialNumber=F6B3A2CE1DC2137D769C51311889AE0CCD204D8E
Certificate serial:       02
Authority key identifier: F6:B3:A2:CE:1D:C2:13:7D:76:9C:51:31:18:89:AE:0C:CD:20:4D:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rOizh3CE312nFExGImuDM0gTY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918369A/C72C518A247011EFB98E625EC4F9AE02/4CE83578247111EFB791AA5FC4F9AE02.roa
Signing time:             Fri 07 Jun 2024 01:57:31 +0000
ROA not before:           Fri 07 Jun 2024 01:57:31 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     136050
IP address blocks:        103.146.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918369A/C72C518A247011EFB98E625EC4F9AE02/9rOizh3CE312nFExGImuDM0gTY4.crl
                          rsync://rpki.apnic.net/member_repository/A918369A/C72C518A247011EFB98E625EC4F9AE02/9rOizh3CE312nFExGImuDM0gTY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rOizh3CE312nFExGImuDM0gTY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:13:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918369A/serialNumber=F6B3A2CE1DC2137D769C51311889AE0CCD204D8E
        Validity
            Not Before: Jun  7 01:57:31 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=6662690b-e556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4d:36:7e:48:27:0e:ce:e2:34:6d:0d:3f:e0:
                    b4:d3:7e:77:84:c1:41:61:35:a9:15:7a:55:b3:4c:
                    09:8e:ce:3b:6e:77:aa:60:c8:1c:d7:51:67:d2:2d:
                    da:bd:75:67:c8:da:06:e9:09:10:b4:dd:e3:02:67:
                    60:91:45:a4:93:48:8f:08:76:61:b1:f9:fe:a1:5c:
                    3c:e3:51:4f:86:38:00:f7:ad:7d:7c:10:b3:6a:ef:
                    f3:ff:7c:85:7f:2e:a9:6f:8b:88:f4:d4:70:21:f0:
                    5b:f8:16:49:35:81:b0:07:0b:75:e4:6f:b3:12:c0:
                    60:46:9b:09:e8:ab:a8:dc:32:e5:0f:35:73:9a:04:
                    b7:c3:2d:b4:d6:05:09:c8:f6:5b:94:13:0e:85:86:
                    33:f4:fe:45:ec:a5:6a:a5:12:3f:79:3b:0f:43:9b:
                    41:a1:e1:b4:92:a9:21:0d:09:86:20:71:e7:c6:90:
                    f8:2b:d8:0c:11:05:70:5e:e1:28:09:64:de:cc:26:
                    3e:6c:39:88:b1:08:58:80:b8:49:34:48:6b:67:5d:
                    81:7b:36:84:aa:79:3b:bb:e6:cc:cf:3a:74:c8:4e:
                    9e:1c:7d:b0:f2:eb:04:65:5b:b8:13:72:5c:63:8b:
                    b5:ec:1f:4c:8e:b6:66:a8:15:40:ef:57:00:08:14:
                    4d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6B:8C:F2:55:2F:94:48:5C:6B:C4:F4:8F:B5:18:9C:67:6F:16:47
            X509v3 Authority Key Identifier:
                keyid:F6:B3:A2:CE:1D:C2:13:7D:76:9C:51:31:18:89:AE:0C:CD:20:4D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918369A/C72C518A247011EFB98E625EC4F9AE02/9rOizh3CE312nFExGImuDM0gTY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rOizh3CE312nFExGImuDM0gTY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918369A/C72C518A247011EFB98E625EC4F9AE02/4CE83578247111EFB791AA5FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:e5:06:aa:00:4c:c6:2a:da:34:6c:0b:9a:54:ee:96:77:8b:
         ed:ef:03:bd:78:c3:34:ad:31:f8:b1:5f:af:68:f6:05:9a:dc:
         b6:45:8b:81:5f:38:74:1f:3b:72:b8:c2:1c:46:46:43:5a:3c:
         7e:80:ef:c4:91:d1:54:2a:6e:dc:91:8d:4b:a5:4d:4d:9a:33:
         ef:92:a3:07:f4:c3:c7:b9:d4:6e:53:63:8f:e2:ac:dc:56:01:
         3b:6d:75:4b:42:21:3e:fb:36:5a:9f:fa:b9:1b:49:41:04:0c:
         e6:6f:03:5a:1e:73:b0:ee:03:9a:3f:9a:ed:03:0d:e9:dc:8d:
         5d:e6:30:f6:2b:cf:86:e8:2b:55:13:aa:5e:68:01:59:fd:4a:
         01:8c:89:92:01:7f:2c:a7:24:10:80:af:44:86:41:8c:04:aa:
         5c:db:02:0e:e2:9a:31:8b:03:77:fc:1d:26:94:c7:68:4a:9b:
         e2:e2:12:c7:bd:47:81:6c:25:ec:e7:16:b5:4b:81:33:eb:2d:
         c4:28:38:8e:7f:3e:de:14:ee:0f:c4:77:d4:dc:ef:83:0b:af:
         3d:bb:1d:4a:8e:dc:76:08:48:1b:59:46:40:ef:06:c8:70:c6:
         d6:fe:ef:f5:47:04:64:02:3f:82:97:b2:ba:88:05:0c:86:a6:
         70:30:03:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:18 2024 by rpki-client on console-fra.rpki-client.org