Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/54E193E20AD511EA8397192EC4F9AE02.roa
File:                     54E193E20AD511EA8397192EC4F9AE02.roa (raw, json)
Hash identifier:          iayrZJYEitBNATqG7kmIbJVdbWLvR5eomEWbBMlShno=
Subject key identifier:   38:BF:DE:2F:31:AF:5F:1E:F7:2E:5D:2A:F1:96:62:33:FD:96:ED:A4
Certificate issuer:       /CN=A9186777/serialNumber=AC713504CB43EBCE35794B7DD22AEA7BB5823C49
Certificate serial:       0BA9
Authority key identifier: AC:71:35:04:CB:43:EB:CE:35:79:4B:7D:D2:2A:EA:7B:B5:82:3C:49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHE1BMtD6841eUt90irqe7WCPEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/54E193E20AD511EA8397192EC4F9AE02.roa
Signing time:             Fri 30 Aug 2024 19:27:28 +0000
ROA not before:           Fri 30 Aug 2024 19:27:28 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     139343
IP address blocks:        103.141.134.0/23 maxlen: 23
                          103.141.134.0/24 maxlen: 24
                          103.141.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.crl
                          rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHE1BMtD6841eUt90irqe7WCPEk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:35:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2985 (0xba9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186777/serialNumber=AC713504CB43EBCE35794B7DD22AEA7BB5823C49
        Validity
            Not Before: Aug 30 19:27:28 2024 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=66d21d20-5524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b7:87:db:fb:f3:8d:29:54:b9:0e:d3:04:c6:
                    3a:83:6d:76:7d:ac:67:ba:6e:f3:a7:eb:56:30:a2:
                    f5:05:c0:ec:2b:06:38:e5:0e:b7:03:99:bb:0f:79:
                    58:8d:4b:26:3e:e4:53:07:c8:ca:80:32:a0:44:cc:
                    d9:43:3a:0a:9f:01:18:4b:02:b4:28:7d:a6:66:0d:
                    e9:f9:53:26:23:1f:f7:15:10:8a:e3:82:8f:ce:69:
                    29:26:99:72:19:0e:7b:d4:ae:0b:b1:61:85:02:12:
                    2a:46:72:d5:c5:9a:cb:a2:b9:b8:e2:9c:37:3f:65:
                    d0:27:18:89:9f:b7:c8:a2:c4:69:b8:5a:d6:c6:f9:
                    48:e0:1a:af:19:2a:2e:29:06:2d:f6:a8:d8:25:8a:
                    76:24:63:a6:5b:c2:5e:65:79:17:74:d4:1f:05:e4:
                    f7:73:be:6f:20:f7:54:d0:ca:90:71:ec:63:99:8c:
                    45:69:c6:6b:62:0e:6a:e2:be:be:27:70:2e:bb:3e:
                    29:23:e8:88:8f:ef:f2:71:a3:3b:e9:f9:52:06:43:
                    49:e0:3a:20:32:a1:85:6c:e7:4f:86:41:5e:49:e1:
                    41:f5:26:7d:c0:a1:5b:bd:eb:ac:2e:06:8e:70:eb:
                    91:c4:72:37:b8:ed:41:d0:d6:3c:f6:cc:d8:4e:f4:
                    83:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:BF:DE:2F:31:AF:5F:1E:F7:2E:5D:2A:F1:96:62:33:FD:96:ED:A4
            X509v3 Authority Key Identifier:
                keyid:AC:71:35:04:CB:43:EB:CE:35:79:4B:7D:D2:2A:EA:7B:B5:82:3C:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHE1BMtD6841eUt90irqe7WCPEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/54E193E20AD511EA8397192EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:01:ea:54:cd:4b:df:fc:91:b9:ea:30:e9:6f:36:b9:3c:e8:
         7e:1f:7f:eb:fb:e8:83:7e:81:ba:a5:61:ff:0b:05:59:e5:0a:
         ee:b2:5a:b1:6e:32:41:b5:5d:13:fe:5c:8c:3b:60:06:ba:7c:
         2d:f3:98:a1:d3:af:01:15:00:9c:f5:86:69:7c:fd:5f:d4:44:
         52:8e:ab:22:33:2c:28:df:57:c2:1e:8f:4d:92:43:17:e9:6d:
         0a:e9:30:cd:63:f3:44:84:1c:ff:e6:41:9f:55:6a:e0:58:ae:
         dd:a3:99:c1:0e:5b:0d:81:d1:ff:79:b4:80:3d:2a:21:ed:96:
         6c:3d:91:b0:c0:5b:ea:3e:2e:64:d7:f9:4c:6f:15:f9:21:a1:
         08:0d:16:17:59:8d:90:aa:81:bb:42:75:b7:0b:cd:32:bf:e4:
         93:16:f7:28:01:de:47:31:80:bd:1b:7d:3a:13:44:cc:e1:b5:
         dc:55:9e:8b:8f:ef:90:22:e3:fd:49:c5:e2:dc:8c:f8:8a:e6:
         6f:55:3c:cc:ad:73:ae:c5:2f:6c:27:cf:0c:fb:a2:65:3e:eb:
         f8:8b:dd:fe:cf:a9:f4:b5:e6:d4:90:69:6f:a0:1f:d1:bc:54:
         05:28:45:83:90:76:da:9f:9f:aa:9d:93:d3:f4:b1:bd:65:03:
         bf:8f:58:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:06 2024 by rpki-client on console-ams.rpki-client.org