Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/77465F12874511EEBEA58225C4F9AE02.roa
File:                     77465F12874511EEBEA58225C4F9AE02.roa (raw, json)
Hash identifier:          jd8h3qfSfb7yBPDyyETIHrIlzzkiLkKJgmfMYV76Qls=
Subject key identifier:   57:10:59:31:4D:F7:03:83:64:2B:1E:5B:F4:5C:A0:D9:11:18:8A:BD
Certificate issuer:       /CN=A919899D/serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632
Certificate serial:       0431
Authority key identifier: 9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/77465F12874511EEBEA58225C4F9AE02.roa
Signing time:             Tue 19 Dec 2023 08:37:16 +0000
ROA not before:           Tue 19 Dec 2023 08:37:16 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     1299
IP address blocks:        103.168.34.0/24 maxlen: 24
                          103.168.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl
                          rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 01:20:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1073 (0x431)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919899D/serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632
        Validity
            Not Before: Dec 19 08:37:16 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=6581563c-048b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ac:64:3d:78:39:51:7e:0e:d3:7c:6f:4c:01:
                    aa:fc:4f:bc:fc:62:47:06:2d:e3:6d:fe:03:8d:88:
                    4a:e1:55:f0:d4:8c:f2:97:16:65:5a:d5:2b:f4:cc:
                    93:bd:9e:ad:bc:1f:06:77:83:cf:66:84:ec:09:f5:
                    1a:2b:ae:34:cf:bc:e7:c1:f1:5e:fc:77:fe:02:05:
                    b9:42:32:2d:eb:7d:a3:bb:07:3c:2c:b4:e9:88:54:
                    60:07:a1:82:73:69:11:86:bb:5b:f2:2a:34:40:d7:
                    79:65:eb:83:3f:e7:a6:77:1b:26:80:26:10:57:53:
                    16:b0:d9:bb:a3:1b:80:f4:e8:2f:a3:63:15:a1:cb:
                    87:a7:21:c9:df:95:65:a5:c8:83:7a:8d:3b:7f:52:
                    ea:52:c5:79:f2:17:3b:61:bc:5b:f0:89:58:59:39:
                    35:bc:17:b0:6d:95:7e:a7:9f:72:ad:ce:45:32:a2:
                    6e:1b:14:f5:1e:53:23:a8:b9:98:90:cf:74:57:97:
                    45:53:81:91:39:d6:e4:46:5f:cd:af:5c:cb:48:0f:
                    e5:af:cc:51:7a:b3:80:99:7d:74:02:8e:c6:99:33:
                    60:e0:f2:8f:8f:1e:65:18:22:80:47:46:0f:b6:9a:
                    67:b5:be:d7:e2:9b:97:f4:9a:7f:17:46:7d:fc:66:
                    d3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:10:59:31:4D:F7:03:83:64:2B:1E:5B:F4:5C:A0:D9:11:18:8A:BD
            X509v3 Authority Key Identifier:
                keyid:9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/77465F12874511EEBEA58225C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:06:48:7f:8b:67:97:f7:32:5e:0f:9b:67:ad:b4:5d:2e:e3:
         3e:c7:3c:af:34:69:26:05:68:fc:24:de:b7:34:ce:9a:08:ae:
         d4:4f:37:77:0e:53:e1:bf:13:74:27:29:32:5d:ec:da:db:19:
         0d:6c:62:68:06:8d:cb:54:1f:b6:db:cc:38:fc:dd:b7:ea:7a:
         f4:c6:b3:c8:a7:30:78:3b:1e:f6:1a:5b:a4:09:ef:38:d2:22:
         35:78:81:46:f5:34:40:b4:03:0e:e8:4d:fb:b7:18:0c:59:de:
         c4:fe:69:04:74:c0:b5:f7:91:62:fc:25:44:48:1e:a6:7f:e7:
         58:1e:2b:66:8d:4c:5f:de:42:94:e6:8a:e5:1e:c4:e0:be:0e:
         ae:57:9a:46:1d:41:92:a5:7c:10:e6:99:76:fc:7f:f5:04:5b:
         6c:18:21:e6:60:d4:de:65:70:f5:54:ff:44:4b:03:07:e1:9d:
         23:81:c7:d0:72:02:3c:29:0d:7d:a7:02:06:b9:b7:40:a7:0a:
         2e:fc:1e:9b:f6:8c:c1:6e:7a:33:2a:5d:4d:55:0e:58:85:36:
         40:4b:3c:8b:ba:28:ec:2a:25:58:ac:3a:3e:e1:10:85:9f:e6:
         24:48:c1:d5:3a:c0:34:81:ba:5b:b7:8d:08:8b:cc:9a:af:c4:
         e1:2e:56:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 02:26:57 2024 by rpki-client on console-fra.rpki-client.org