Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/3971266E4A4A11EE9424B146C4F9AE02.roa
File:                     3971266E4A4A11EE9424B146C4F9AE02.roa (raw, json)
Hash identifier:          fd0Lwdq/7SZ2UavzVgoHYT6CmTGiRbUxqj79hmV6+p0=
Subject key identifier:   1B:DE:03:3D:2E:93:82:09:29:61:75:56:05:13:FF:AA:98:2B:CA:BD
Certificate issuer:       /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
Certificate serial:       0C80
Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/3971266E4A4A11EE9424B146C4F9AE02.roa
Signing time:             Thu 14 Mar 2024 19:07:10 +0000
ROA not before:           Thu 14 Mar 2024 19:07:10 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     138640
IP address blocks:        103.109.56.0/24 maxlen: 24
                          103.109.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl
                          rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 19:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3200 (0xc80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
        Validity
            Not Before: Mar 14 19:07:10 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65f34ade-a387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:71:99:b8:7a:b5:c1:50:66:e6:72:03:4b:
                    4c:a6:12:28:d2:11:42:e3:32:55:8a:f4:40:13:88:
                    ca:83:77:44:a4:de:72:c9:a7:97:fb:45:8c:a8:19:
                    bd:5b:8c:01:af:b8:6d:5c:71:25:e3:d2:4b:70:5e:
                    15:56:2d:6e:7d:e3:3e:d9:cb:dd:33:7b:40:ae:61:
                    43:9f:da:e6:f6:7e:b2:85:93:65:69:4c:aa:eb:29:
                    02:c2:f3:5f:b0:15:67:3e:79:51:21:a5:1b:8b:34:
                    dd:45:d0:74:43:67:92:0b:7a:c4:37:9a:af:45:19:
                    2b:6e:6b:df:23:7a:ba:12:40:06:88:07:a1:8d:42:
                    f6:01:45:fb:73:7a:26:cc:d5:67:b2:cc:34:15:71:
                    f7:62:b1:43:aa:89:36:c0:6b:db:17:93:37:e1:48:
                    b3:cf:5a:7e:e1:53:55:f8:88:74:5a:d6:28:64:9c:
                    d9:bf:68:b1:d1:e6:da:9c:a0:2d:e8:2d:c5:16:fd:
                    20:6c:64:11:37:59:8e:02:c9:58:65:71:80:32:b8:
                    19:ab:a6:97:f5:d0:09:50:7b:67:b1:48:47:a1:fe:
                    2b:13:04:ee:ca:02:c5:1c:c1:09:ae:12:e6:47:77:
                    36:19:2a:72:d7:e3:5b:39:ff:3e:c3:e7:18:db:fd:
                    d2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DE:03:3D:2E:93:82:09:29:61:75:56:05:13:FF:AA:98:2B:CA:BD
            X509v3 Authority Key Identifier:
                keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/3971266E4A4A11EE9424B146C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.56.0/24
                  103.109.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:2a:b7:44:85:62:28:81:e0:4d:f6:d7:d6:f8:9b:94:c6:08:
         bc:da:0d:17:7a:4a:54:40:8d:50:40:28:b4:69:e9:bb:b7:17:
         d2:f8:a8:93:ef:71:42:60:b4:4c:5e:65:cc:7f:88:be:9a:c5:
         5c:b9:8a:b3:c5:7a:34:30:09:16:6f:34:d8:f1:af:75:cc:c8:
         83:26:cc:86:2c:cf:ed:a2:25:33:b5:66:22:96:ec:36:e8:94:
         97:33:5f:75:4b:a0:10:3d:8b:91:1d:78:48:f3:d8:20:32:27:
         30:d3:f3:65:b0:d6:ec:39:b4:40:e0:c0:3d:a9:3f:91:d9:56:
         16:7c:22:c6:2a:6c:d8:1d:67:b8:ff:27:d8:4d:14:4a:06:aa:
         c4:5d:0f:24:3b:aa:04:4a:a9:c7:26:55:33:f4:ab:fc:0a:43:
         39:33:cc:04:64:28:a0:29:8f:b0:13:38:bb:89:21:35:ec:d7:
         be:ed:07:86:8b:63:89:54:42:a9:f9:83:60:12:f4:52:5b:47:
         6a:79:f7:dd:f7:a2:44:fb:ef:a7:e0:a2:b7:9d:f1:24:79:4a:
         89:49:fd:48:41:b4:b6:0b:4d:6d:d8:40:ae:d8:de:57:7b:13:
         a7:13:06:e8:db:d9:32:53:db:8d:e6:3e:44:93:df:52:63:ae:
         b0:c5:11:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 19:49:59 2024 by rpki-client on console-fra.rpki-client.org