Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/4F1694B4C87B11ED981CC523C4F9AE02.roa
File:                     4F1694B4C87B11ED981CC523C4F9AE02.roa (raw, json)
Hash identifier:          gj62wsvXwwOlr2ppNQr1W4bvhGHIvpnGz5Ii0dWtU3E=
Subject key identifier:   69:A0:73:9E:62:35:ED:B5:66:0B:88:B2:E8:E1:F4:D3:43:09:37:E6
Certificate issuer:       /CN=A9183BBC/serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D
Certificate serial:       0573
Authority key identifier: 06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/4F1694B4C87B11ED981CC523C4F9AE02.roa
Signing time:             Wed 07 Feb 2024 00:12:53 +0000
ROA not before:           Wed 07 Feb 2024 00:12:53 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     149840
IP address blocks:        103.44.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl
                          rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 01:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1395 (0x573)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183BBC/serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D
        Validity
            Not Before: Feb  7 00:12:53 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65c2cb04-ee02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bc:7e:00:af:f5:45:45:06:d0:0b:75:25:43:
                    67:6b:51:5b:43:7b:02:f7:cc:42:18:92:02:6e:f0:
                    bc:78:92:96:71:30:55:e8:b7:4e:1c:e1:b8:5a:44:
                    3f:75:c6:4c:b0:e2:00:e7:3a:5d:03:12:a5:87:f3:
                    9f:e6:8d:85:19:3a:93:bc:bf:0a:c8:65:26:15:6a:
                    91:da:1e:33:53:84:1c:34:d6:1e:0b:6b:75:62:ad:
                    1e:74:fe:f4:60:78:35:4e:82:1d:f6:03:ef:9e:e5:
                    7f:72:e4:a7:1e:04:b7:8d:31:36:cf:a2:9b:84:c6:
                    6b:00:21:28:77:e0:8b:cd:ac:17:c2:4b:0c:23:f8:
                    a9:87:8b:45:f1:71:72:b5:c4:3a:35:bc:0d:bc:29:
                    99:b7:ed:f5:fe:a0:30:88:52:0b:98:65:28:31:6e:
                    c0:3c:e3:64:3c:97:b3:0b:b6:62:35:3c:a8:7c:72:
                    3c:76:c3:12:1e:07:39:d1:64:34:7b:79:5d:5a:80:
                    50:64:35:6c:9a:60:cc:9e:ec:8f:44:59:a0:05:cf:
                    e9:2d:63:9e:bd:0e:73:07:fc:c6:d8:14:b2:93:29:
                    92:9d:6d:eb:8b:3a:ab:71:c1:df:42:34:79:5d:15:
                    80:a4:1b:40:37:b5:e0:a4:94:22:ee:fd:86:3b:6f:
                    49:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A0:73:9E:62:35:ED:B5:66:0B:88:B2:E8:E1:F4:D3:43:09:37:E6
            X509v3 Authority Key Identifier:
                keyid:06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/4F1694B4C87B11ED981CC523C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:47:fe:c8:a7:91:7c:ba:5f:89:61:7b:e7:a8:96:e7:9f:25:
         18:70:74:af:a3:a0:44:bb:77:84:cb:d4:29:01:6d:3f:82:d1:
         f5:34:13:0f:2f:d6:45:af:39:03:da:91:6c:91:ea:be:55:86:
         4a:1a:10:4c:4e:ba:19:d8:d5:0f:5a:aa:93:8d:55:23:2d:09:
         a2:39:d4:6e:66:ad:fa:82:bb:7e:44:66:93:58:d6:d9:1c:50:
         0f:ff:7a:87:cc:68:a2:5d:94:05:e2:8f:9f:8a:ce:a1:36:d6:
         98:4a:f5:b4:87:d1:87:fc:09:d8:da:99:24:3c:69:e3:fe:22:
         68:5e:42:b7:03:f5:1f:08:88:d6:93:aa:a2:2f:20:a1:1a:08:
         3c:65:8c:14:c6:34:f9:5f:17:be:8a:bf:bf:b1:14:ac:50:a3:
         dc:d7:6e:9e:a2:2e:77:68:c7:7b:5d:be:99:4f:25:9c:88:25:
         22:85:fb:26:4e:dc:0e:7f:62:9a:dd:80:d5:57:13:17:c8:0b:
         1c:e6:99:b1:a2:78:e7:fb:0b:7c:1b:b2:e6:12:5a:7f:9c:e2:
         bf:df:f7:b5:e5:fb:2c:8b:b8:62:22:61:98:7e:a5:a4:48:b1:
         5f:29:ff:6d:1b:2c:dd:ea:22:8e:b1:d6:1e:c2:07:d5:98:ad:
         a9:7b:1d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:55:17 2024 by rpki-client on console-fra.rpki-client.org