Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/4AD97410632C11EE96048122C4F9AE02.roa
File:                     4AD97410632C11EE96048122C4F9AE02.roa (raw, json)
Hash identifier:          aWVyhl403G+qwJ6jO2cb4Y7Az8v/lQUgKxECmfe73fI=
Subject key identifier:   11:99:1F:85:B6:0F:B3:6B:78:5A:AE:59:0C:03:7B:4A:E1:36:8A:EC
Certificate issuer:       /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4
Certificate serial:       0BDE
Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/4AD97410632C11EE96048122C4F9AE02.roa
Signing time:             Sun 14 Apr 2024 19:27:41 +0000
ROA not before:           Sun 14 Apr 2024 19:27:41 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     150774
IP address blocks:        103.135.138.0/24 maxlen: 24
                          103.135.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl
                          rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 19:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3038 (0xbde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4
        Validity
            Not Before: Apr 14 19:27:41 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=661c2e2d-0fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a4:64:69:28:3e:6f:c8:74:5a:96:18:cb:a3:
                    4b:13:99:f4:01:ab:a7:06:90:92:a4:0d:03:4d:71:
                    1b:60:52:55:49:ab:71:c6:71:0d:3b:b2:91:97:2a:
                    fa:b7:05:47:e5:f8:ef:77:fe:c0:b4:dc:74:7b:d4:
                    e0:4b:3b:9b:99:c9:63:07:76:27:26:df:22:dd:7f:
                    40:8f:10:74:d9:8c:ab:35:4e:e4:5d:63:ab:13:a6:
                    ac:e9:c2:df:b9:80:7f:c6:6f:10:8e:01:6a:2e:77:
                    24:06:a7:ea:a2:fb:96:e1:db:54:e5:8b:8a:b0:bd:
                    59:dc:92:60:cf:e5:83:6a:df:dc:75:23:7a:0e:9d:
                    2a:df:6c:8a:ea:08:e5:19:96:5b:0c:53:61:03:1d:
                    23:40:2f:65:f8:8b:37:6f:f7:72:88:d7:6b:f5:1e:
                    0f:04:16:90:95:04:79:7c:47:9b:f6:e8:9c:c0:14:
                    f7:52:07:64:07:b3:96:0a:b2:3d:f6:4d:c4:12:fe:
                    a2:78:b7:4b:3f:b0:99:96:26:09:b9:d1:dc:1e:d1:
                    52:be:7a:dd:90:92:03:f2:13:bc:c6:d0:d8:1a:3d:
                    34:55:5a:8b:d8:0d:58:63:ae:98:86:87:e0:d9:67:
                    5c:b0:06:7d:b5:ce:0e:53:3d:36:6f:3e:82:95:c4:
                    91:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:99:1F:85:B6:0F:B3:6B:78:5A:AE:59:0C:03:7B:4A:E1:36:8A:EC
            X509v3 Authority Key Identifier:
                keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/4AD97410632C11EE96048122C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:49:1a:bf:9f:02:c4:26:5e:df:e1:c4:f3:4d:1b:4b:c9:ed:
         9b:f5:17:07:59:74:4b:23:ee:5d:91:82:c7:7f:4e:d2:c5:a6:
         15:83:33:e6:b6:34:4a:bb:f6:41:e2:74:f2:9d:b1:f2:0a:43:
         c9:99:22:63:30:f2:72:2d:2f:95:47:e6:0c:e8:29:8c:d9:ef:
         b0:fb:27:80:5a:6d:c0:1c:54:3f:c2:4d:f1:fc:04:2e:46:1c:
         14:0e:bb:d3:2d:b9:cd:e2:00:6b:01:ba:5e:c9:5c:31:89:87:
         e8:f4:8f:4d:b7:c9:85:90:17:c9:78:d0:87:30:65:94:90:f3:
         40:26:0d:97:5d:1d:6c:c5:47:b7:bd:15:6b:cc:96:98:fb:99:
         83:5d:22:88:ee:6b:2b:47:94:6c:b9:43:0a:1f:77:0a:bd:ea:
         d0:6b:9d:88:32:73:d7:06:e8:24:20:46:d7:d6:ae:80:54:ac:
         76:71:e8:de:3f:a2:0b:3f:52:9b:11:f6:7a:81:15:79:73:db:
         07:b9:ac:99:1a:d7:ab:ad:74:0f:06:eb:7f:0e:78:40:44:a8:
         5f:e4:83:7b:dd:ee:f8:c3:72:d5:8f:b6:9e:22:7c:26:d8:af:
         39:04:b3:a3:a8:11:61:3a:ea:24:36:13:3c:2c:fb:28:b9:ed:
         39:ab:d1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 19:49:59 2024 by rpki-client on console-fra.rpki-client.org