Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/0F785ED8171F11EB9D7AD884C4F9AE02.roa
File:                     0F785ED8171F11EB9D7AD884C4F9AE02.roa (raw, json)
Hash identifier:          XjGl6szoCEp2QY5fhdXG4icraLDWSjGHGsKQbx05UXM=
Subject key identifier:   59:09:8D:16:89:76:F9:F0:CB:20:DC:3E:72:C2:F7:27:F4:63:64:57
Certificate issuer:       /CN=A9190B12/serialNumber=9874E6D61A60D8844C301D81F3377CBF34F0D8BF
Certificate serial:       05FC
Authority key identifier: 98:74:E6:D6:1A:60:D8:84:4C:30:1D:81:F3:37:7C:BF:34:F0:D8:BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHTm1hpg2IRMMB2B8zd8vzTw2L8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/0F785ED8171F11EB9D7AD884C4F9AE02.roa
Signing time:             Sat 27 May 2023 00:36:50 +0000
ROA not before:           Sat 27 May 2023 00:36:50 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     134155
IP address blocks:        103.55.217.0/24 maxlen: 24
                          103.100.44.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/mHTm1hpg2IRMMB2B8zd8vzTw2L8.crl
                          rsync://rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/mHTm1hpg2IRMMB2B8zd8vzTw2L8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHTm1hpg2IRMMB2B8zd8vzTw2L8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 May 2024 23:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1532 (0x5fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190B12/serialNumber=9874E6D61A60D8844C301D81F3377CBF34F0D8BF
        Validity
            Not Before: May 27 00:36:50 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=647150a1-df9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:27:11:00:06:b6:af:39:9c:fb:a8:73:4e:ef:
                    21:20:81:61:a5:05:32:ec:7e:39:a4:b1:54:35:20:
                    12:4b:c8:fe:a5:44:8b:df:4a:d1:d5:bb:36:bd:ba:
                    a4:0e:78:e3:5a:9c:d7:99:b8:55:f8:fe:a8:40:f4:
                    2a:b8:f0:dc:fe:25:73:75:8d:1c:1f:94:a5:73:35:
                    4a:f7:97:50:b7:c6:e2:54:ce:a9:78:40:09:af:4c:
                    90:94:15:e8:e5:60:3c:b3:15:b9:92:07:11:55:c3:
                    f6:78:c6:d1:df:ab:eb:84:1a:1c:eb:05:ac:17:1e:
                    b2:bc:7d:05:35:b3:9d:68:33:b1:a2:29:c3:68:04:
                    0d:20:4f:4c:49:46:60:4c:71:48:1c:cb:29:76:78:
                    49:3f:57:c8:0e:de:d7:6e:17:c0:ae:e5:5f:65:ba:
                    59:e1:89:1b:17:7e:76:bd:6e:35:64:00:b2:4d:65:
                    66:89:46:f3:78:dd:09:39:d6:43:ee:0a:72:f5:8c:
                    d8:07:49:3c:7e:86:47:85:69:4a:44:5a:2e:04:c7:
                    8b:cd:db:ca:24:97:74:4e:5c:9b:19:cb:5b:22:c4:
                    d9:86:64:26:91:03:c1:ce:a8:6d:15:70:4e:71:70:
                    be:5f:e3:86:b3:f9:39:ec:a4:0a:df:b2:7d:62:58:
                    ff:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:09:8D:16:89:76:F9:F0:CB:20:DC:3E:72:C2:F7:27:F4:63:64:57
            X509v3 Authority Key Identifier:
                keyid:98:74:E6:D6:1A:60:D8:84:4C:30:1D:81:F3:37:7C:BF:34:F0:D8:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/mHTm1hpg2IRMMB2B8zd8vzTw2L8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHTm1hpg2IRMMB2B8zd8vzTw2L8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/0F785ED8171F11EB9D7AD884C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.217.0/24
                  103.100.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:36:51:63:8c:de:da:b4:38:99:2e:89:1a:72:5b:c7:7a:c3:
         4e:bb:83:07:5f:93:ad:12:58:4f:1b:bf:f8:0e:44:04:61:d8:
         63:f3:dc:d9:6d:ee:bc:d9:8d:55:e0:cf:87:65:a0:95:a9:60:
         89:23:78:dd:c0:fd:cd:79:b4:8a:45:11:e0:2f:b6:1e:1b:06:
         d1:7a:20:87:89:f7:ef:ec:92:ff:eb:64:46:f0:bd:84:37:39:
         22:70:e2:b6:ac:62:68:2f:32:f7:d5:22:53:94:64:b2:66:45:
         95:1d:32:43:43:7f:86:30:fc:13:c4:13:d3:ea:37:98:8e:5d:
         5e:85:df:b7:9b:ff:8f:6c:27:4a:63:af:34:d0:06:ad:42:c0:
         67:9f:f4:48:48:9d:56:50:75:d7:d5:59:bf:b1:e3:9c:f6:a0:
         de:ed:6a:95:99:9a:ea:e0:58:ba:a0:77:ab:14:89:3e:1a:d7:
         9b:08:16:e0:39:0c:de:b6:b9:91:2b:3a:44:71:b8:78:36:8c:
         c9:00:30:07:77:e7:b9:d5:fe:19:ae:13:df:dd:b2:a0:a7:15:
         4b:eb:4b:1d:a2:37:da:cd:fc:13:da:13:c9:69:ae:16:64:3d:
         cc:56:d6:14:c0:db:b3:ee:23:cb:22:9b:82:34:14:ee:a8:ec:
         56:50:9f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 01:24:51 2024 by rpki-client on console-fra.rpki-client.org