Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/D661BF1821E111EB85E9C824C4F9AE02.roa
File:                     D661BF1821E111EB85E9C824C4F9AE02.roa (raw, json)
Hash identifier:          D7eIMHmth70W+hfz3W95ECzOu37ccOvCkHAQtqWw0Jc=
Subject key identifier:   7B:08:E0:70:EC:B7:0D:7C:AB:7C:80:9A:C3:69:A7:A1:FA:BB:42:1D
Certificate issuer:       /CN=A919F207/serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04
Certificate serial:       074F
Authority key identifier: E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/D661BF1821E111EB85E9C824C4F9AE02.roa
Signing time:             Wed 20 Sep 2023 21:39:28 +0000
ROA not before:           Wed 20 Sep 2023 21:39:28 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     135386
IP address blocks:        103.153.36.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl
                          rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 21:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1871 (0x74f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F207/serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04
        Validity
            Not Before: Sep 20 21:39:28 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=650b6690-7ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b1:60:ca:59:9b:88:bd:d1:0b:a0:3a:f3:89:
                    cb:59:4f:43:8b:cc:5b:fe:47:24:d3:9b:8e:9e:86:
                    83:88:e0:3a:e0:16:de:0a:61:89:a7:97:6b:01:f9:
                    87:8d:5d:2a:92:b7:78:3d:61:e4:a8:15:d9:d8:2b:
                    30:de:0b:31:e8:5f:f1:7d:de:8c:a1:f3:96:85:bf:
                    f3:23:8b:df:71:a2:03:ca:97:1b:3d:43:14:08:3a:
                    f9:cc:94:3f:d4:55:6a:56:52:ab:c1:2e:c0:a1:b8:
                    6e:a6:e3:20:fa:49:5d:d3:1c:c6:61:1f:d3:aa:e8:
                    d4:41:25:c5:24:71:53:db:ba:ed:c5:56:f3:6d:1c:
                    40:f0:81:51:9e:f5:d9:4c:46:cf:0a:11:46:e3:0e:
                    df:4b:51:a1:d0:08:10:a9:fc:17:fb:b9:70:78:ab:
                    12:41:b4:f3:45:c6:02:a1:6c:26:32:44:26:57:4f:
                    f9:a4:8f:d4:07:97:f3:d3:c0:39:d2:af:35:70:dd:
                    fe:af:e6:84:c6:36:87:94:2c:41:cf:1c:80:19:06:
                    91:6d:46:c9:c7:93:cc:66:eb:78:81:6d:97:d3:62:
                    e3:0a:4c:52:8a:df:f3:b3:29:6d:01:58:50:d8:e8:
                    73:3b:96:63:71:f2:d3:a7:5a:e9:07:1b:46:03:38:
                    48:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:08:E0:70:EC:B7:0D:7C:AB:7C:80:9A:C3:69:A7:A1:FA:BB:42:1D
            X509v3 Authority Key Identifier:
                keyid:E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/D661BF1821E111EB85E9C824C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:04:bf:d3:12:16:f9:bd:19:82:60:ae:00:06:f4:16:45:76:
         62:8a:61:c1:20:a1:fa:a2:49:e5:13:0a:29:7c:cc:33:26:4f:
         ba:ef:9f:ea:c5:1e:45:86:01:da:b5:e2:13:9f:5c:c1:b4:ad:
         8f:b2:b0:75:68:b1:37:8b:2c:e5:db:19:3a:54:f0:67:fd:95:
         c9:03:d9:52:2e:10:26:6c:e6:b2:a5:3e:a0:68:00:ac:66:6e:
         e9:61:7c:ac:57:1c:3e:c4:92:8f:71:19:4c:2c:e7:d8:25:24:
         95:1f:7b:4e:75:2f:fb:99:40:96:f8:cb:0c:71:d0:44:5d:0d:
         42:ad:22:b2:96:a3:7c:f0:94:71:d1:61:ca:17:0b:51:3f:8f:
         79:b6:33:ce:1b:bb:c2:a2:c3:42:19:65:1d:a4:bd:93:37:62:
         e2:6d:50:89:1c:d0:93:ad:7b:8a:3a:4a:33:63:80:25:75:b2:
         b1:99:9c:8b:bc:ea:99:f9:3b:b2:e9:17:a0:79:d3:75:6c:46:
         aa:3f:80:1b:df:72:9d:8c:18:67:65:f0:ce:39:a7:13:43:14:
         aa:ff:c9:1a:2b:b7:0a:f8:e5:57:3f:2f:b4:0a:32:4d:83:51:
         90:c7:63:59:41:b3:35:0f:73:e2:f5:40:d9:ce:d4:06:b3:6e:
         7a:6b:8d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 00:31:20 2024 by rpki-client on console-fra.rpki-client.org