Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/9D82415E4C0D11EF8F20AB7FC4F9AE02.roa
File:                     9D82415E4C0D11EF8F20AB7FC4F9AE02.roa (raw, json)
Hash identifier:          opFHYiLBM/PFitK8/EB4zQ6tx7HTLL4f7xdDyLH5RXw=
Subject key identifier:   E8:DB:07:7B:83:E4:E1:47:88:15:26:4E:2B:B3:FB:05:F7:97:01:0E
Certificate issuer:       /CN=A9112804/serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01
Certificate serial:       06F6
Authority key identifier: 09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/9D82415E4C0D11EF8F20AB7FC4F9AE02.roa
Signing time:             Sun 28 Jul 2024 18:56:20 +0000
ROA not before:           Sun 28 Jul 2024 18:56:20 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     58689
IP address blocks:        103.97.162.0/24 maxlen: 24
                          103.97.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl
                          rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Oct 2024 18:17:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1782 (0x6f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112804/serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01
        Validity
            Not Before: Jul 28 18:56:20 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a69454-3c39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:74:85:fb:cb:ec:40:55:94:92:e8:bb:b6:8e:
                    23:07:79:3c:1b:a6:d2:a9:4b:51:cf:8b:b9:47:e8:
                    55:98:60:75:2b:2b:8c:c7:ac:11:03:c8:ed:52:26:
                    d4:04:bd:8b:23:77:5a:8b:99:c8:75:96:14:54:50:
                    b4:57:70:ea:78:66:30:05:98:97:74:ed:cb:49:36:
                    4f:f5:91:09:ef:d2:be:56:48:25:8b:ff:30:48:c1:
                    dd:18:9d:75:de:12:ff:79:ca:da:6b:62:3d:e2:e3:
                    a1:d9:e2:b5:6b:10:d2:41:57:dc:67:e6:21:3c:fe:
                    17:8e:b0:f8:f2:b8:bd:c1:3a:af:44:d9:59:87:a1:
                    87:3f:96:e8:b7:00:3c:cf:80:a8:16:26:de:c4:a0:
                    78:3d:8f:25:72:4f:34:8e:cf:f4:99:2d:21:a0:8d:
                    29:86:da:b2:17:36:da:75:3a:0d:58:aa:c4:bc:16:
                    4f:ce:5b:5b:4a:0f:9c:17:77:1b:33:b5:87:66:38:
                    68:ec:a3:ec:25:ca:ef:08:2a:e0:7a:0e:ca:3b:d6:
                    3a:cd:3e:3a:2c:48:a9:6e:21:05:60:79:cd:0d:a9:
                    0a:c8:cd:c0:7d:c8:3a:44:7e:31:73:92:cc:39:30:
                    95:e1:56:49:18:75:33:8f:c5:6e:1e:03:2b:dc:07:
                    b5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DB:07:7B:83:E4:E1:47:88:15:26:4E:2B:B3:FB:05:F7:97:01:0E
            X509v3 Authority Key Identifier:
                keyid:09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/9D82415E4C0D11EF8F20AB7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:5b:b5:94:da:a1:35:7f:8c:26:9b:0d:07:e4:89:b4:77:c2:
         62:36:47:47:0f:9f:02:82:48:ca:ac:19:03:0d:e1:41:c4:aa:
         21:7e:59:d2:80:ee:2f:51:e3:8a:6d:aa:ab:11:47:d9:f4:52:
         90:68:16:02:c0:2b:82:35:75:93:db:ea:ca:fd:bd:ae:f7:49:
         0b:d5:4e:ce:fa:b0:10:12:44:75:e6:da:37:c1:1c:95:e9:1e:
         99:ce:01:f7:61:cc:48:73:44:97:59:95:6e:2f:05:fb:38:d1:
         8e:2a:48:db:6c:05:cd:50:74:b6:88:6d:87:07:e3:60:b3:9f:
         c9:50:40:88:a6:3d:9b:84:2a:41:3f:69:c1:cb:d9:9b:ff:b2:
         65:23:82:0c:e7:7c:e1:e7:d5:ae:78:30:24:3e:0a:13:54:ed:
         40:ab:14:76:3b:2a:36:90:d1:c9:94:0e:6f:be:7e:d5:61:d6:
         ac:8e:ff:da:14:b2:0a:8a:8c:b2:84:bc:54:ee:70:65:2b:30:
         85:90:3b:93:e6:4b:44:f6:4f:21:4f:37:df:cf:95:d5:43:d1:
         f7:d3:6a:fd:d5:07:a0:8f:6a:b8:9b:2b:d1:e3:4e:8d:c2:de:
         12:5f:d4:4e:c0:f9:8e:fc:26:e3:fb:1a:01:9f:e8:29:79:25:
         08:f0:6b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 20:08:56 2024 by rpki-client on console-fra.rpki-client.org