Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/E73006AA682811EB8D635520C4F9AE02.roa
File:                     E73006AA682811EB8D635520C4F9AE02.roa (raw, json)
Hash identifier:          ZNofJJyV32x048IIAwL342hD68XT9y4Jhxi+r+3WXTo=
Subject key identifier:   6D:F9:3F:64:2B:4B:D5:66:19:F7:3E:77:49:07:74:6B:28:31:76:69
Certificate issuer:       /CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Certificate serial:       3341
Authority key identifier: 3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/E73006AA682811EB8D635520C4F9AE02.roa
Signing time:             Tue 08 Aug 2023 15:31:06 +0000
ROA not before:           Tue 08 Aug 2023 15:31:06 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     17448
IP address blocks:        103.131.95.0/24 maxlen: 24
                          2001:df4:e900::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl
                          rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13121 (0x3341)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
        Validity
            Not Before: Aug  8 15:31:06 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64d25fb9-6716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:57:0d:92:62:ca:94:08:38:f6:12:30:c2:b9:
                    99:95:30:1e:98:0e:00:ea:7e:63:81:9b:d4:df:2f:
                    fa:e0:09:f4:74:47:8c:21:75:59:79:d7:05:ec:a5:
                    45:99:42:ec:42:9e:66:53:d9:25:b9:eb:0b:1d:c6:
                    c5:8c:5f:fd:9a:08:eb:6b:31:4d:10:86:b6:39:b6:
                    92:a9:ef:aa:f4:f4:f9:29:b8:43:09:cb:02:47:18:
                    12:c8:dc:6a:be:b4:23:bb:31:b4:32:a8:2d:2f:aa:
                    ca:77:d4:52:b7:8e:2f:0b:0c:b5:f6:fa:79:fd:69:
                    a1:7d:83:5c:f9:75:7f:99:63:93:9c:5a:f7:65:ec:
                    0a:14:20:27:72:c8:93:46:16:72:98:07:51:23:2c:
                    41:66:2d:0c:d1:f2:3a:22:5e:87:dc:18:d5:85:66:
                    9f:db:f0:59:3d:0f:52:97:db:cb:75:72:52:fe:2d:
                    36:07:4e:6f:b2:4f:6a:45:5f:2b:88:1a:05:8a:54:
                    23:4c:b7:b0:10:bc:aa:18:69:81:0f:8a:e4:6d:fd:
                    81:ed:ed:33:75:45:ae:9c:f0:36:86:94:cc:44:c9:
                    d6:7f:96:82:b1:32:bf:d6:0d:17:36:33:ad:2b:74:
                    ad:a6:87:4f:e5:6a:1c:83:c0:1d:1b:8c:e8:db:66:
                    b2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F9:3F:64:2B:4B:D5:66:19:F7:3E:77:49:07:74:6B:28:31:76:69
            X509v3 Authority Key Identifier:
                keyid:3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/E73006AA682811EB8D635520C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.95.0/24
                IPv6:
                  2001:df4:e900::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:cf:7d:80:16:0d:c3:db:e5:af:ec:82:62:59:a4:c2:80:30:
         07:91:7e:0b:7d:af:a3:fa:81:ed:26:c4:56:f9:f2:10:12:8a:
         ed:57:59:da:79:e0:8a:8d:5b:f9:5e:d3:8f:65:6f:09:1c:8b:
         2c:f0:75:0d:d9:3e:8e:59:dd:6a:f8:5c:ba:94:e5:71:33:33:
         8e:81:1f:3a:a8:dd:a6:af:b2:3c:a4:02:ad:ac:0e:c7:a6:fb:
         9e:9f:fc:4a:52:1e:a0:5f:d3:27:94:77:09:d3:91:be:61:94:
         4d:59:97:e9:c2:7e:b3:55:a6:2a:e5:fd:83:dd:fe:59:91:41:
         03:de:ea:80:6c:9d:1f:c4:75:ca:5b:c7:e8:c5:5b:55:46:91:
         26:3a:39:aa:50:5b:41:77:9a:c7:8e:35:a8:ce:ea:12:0d:ef:
         eb:56:23:3c:2e:ad:fc:31:dc:cf:21:49:02:0a:87:86:ab:51:
         fc:0a:04:b9:68:7a:e1:bd:b4:82:98:30:d0:9f:5b:24:75:bb:
         2f:0e:67:7e:34:5f:4d:47:25:b0:39:52:e3:86:a8:f6:12:87:
         ba:2a:eb:a9:87:c2:65:b5:5e:9f:de:82:cb:30:7f:50:a5:46:
         e5:e0:23:3e:17:ec:1c:cc:86:8c:be:44:c5:a3:2d:fd:40:d0:
         bd:82:ec:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 17:11:02 2024 by rpki-client on console-fra.rpki-client.org