Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/FE0AB7E8A1A911EBA0379F75C4F9AE02.roa
File:                     FE0AB7E8A1A911EBA0379F75C4F9AE02.roa (raw, json)
Hash identifier:          1Yx6OPE7IjJZNQrXxMJMBR13NdGO1+U2Nx1orLYZVUA=
Subject key identifier:   AF:C4:24:F5:67:3F:A2:BF:5B:86:63:24:B1:90:A6:AC:77:06:C6:84
Certificate issuer:       /CN=A9115F79/serialNumber=95E9F795AFDF22050BBD303A8FAD7D9C8D46FC48
Certificate serial:       0541
Authority key identifier: 95:E9:F7:95:AF:DF:22:05:0B:BD:30:3A:8F:AD:7D:9C:8D:46:FC:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/FE0AB7E8A1A911EBA0379F75C4F9AE02.roa
Signing time:             Tue 09 Apr 2024 01:03:46 +0000
ROA not before:           Tue 09 Apr 2024 01:03:46 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     134136
IP address blocks:        103.166.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.crl
                          rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1345 (0x541)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115F79/serialNumber=95E9F795AFDF22050BBD303A8FAD7D9C8D46FC48
        Validity
            Not Before: Apr  9 01:03:46 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=661493f2-6d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:92:2b:8d:ee:ee:ac:7f:f2:91:c6:da:af:0e:
                    53:ec:2f:8d:08:c8:86:96:7a:9f:e2:44:d2:37:56:
                    db:4d:c8:d5:77:55:ad:d8:c3:3e:ef:69:68:9d:68:
                    73:d7:7a:ca:05:ba:32:f0:f4:d2:cc:d8:6d:a9:bd:
                    70:dc:3c:d2:2e:65:bb:31:41:1a:df:3e:64:84:5e:
                    ed:ee:8d:9d:95:5e:73:a3:84:4d:6b:5d:41:8d:71:
                    bd:60:29:f2:0d:83:b1:20:d9:c9:11:67:ab:5c:73:
                    e3:63:20:24:49:36:36:7a:e8:d8:97:e8:92:20:76:
                    c2:e0:6c:1d:55:ae:17:72:13:ce:d0:97:d7:42:ac:
                    2f:30:5d:09:5b:37:8f:54:a8:a9:7a:c9:d2:a1:3b:
                    dc:82:64:ed:51:fc:f2:50:0e:12:94:f2:e8:ac:d9:
                    f9:d2:7b:0f:93:b9:72:25:9b:cf:14:df:af:cd:be:
                    53:d1:2d:f4:d5:17:7d:89:b4:db:4f:0a:a6:33:91:
                    b4:d1:84:36:2c:0e:62:b5:86:04:c8:cd:01:1c:1a:
                    5c:b1:f4:cf:9c:23:63:0d:3d:0a:36:c1:3c:d9:a0:
                    ff:19:de:d1:de:4e:93:e2:40:7f:54:ee:84:9e:f0:
                    9e:60:45:9d:b4:8d:6a:87:51:29:d3:38:69:2b:b2:
                    e0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C4:24:F5:67:3F:A2:BF:5B:86:63:24:B1:90:A6:AC:77:06:C6:84
            X509v3 Authority Key Identifier:
                keyid:95:E9:F7:95:AF:DF:22:05:0B:BD:30:3A:8F:AD:7D:9C:8D:46:FC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/FE0AB7E8A1A911EBA0379F75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:f4:e4:90:39:b0:a9:5f:0b:ad:43:08:55:d4:e6:8a:2c:19:
         ab:35:65:e0:3e:81:7b:9e:bd:5e:45:89:07:1a:96:2a:dc:90:
         71:9a:90:29:8c:20:ee:01:07:59:87:64:48:07:90:2f:ee:21:
         da:bf:68:66:f6:b0:27:62:05:aa:61:7b:be:a4:ab:51:1a:85:
         a3:6d:0b:af:23:32:9b:5b:0d:ce:2f:42:c9:9b:f0:99:17:40:
         4e:3c:f6:74:d0:e5:6d:21:7a:87:53:52:6d:be:83:25:56:04:
         bb:ef:7d:c9:d4:5f:28:e8:fa:2b:52:d0:a3:c6:00:c1:48:cf:
         32:3c:8b:2e:bc:4b:e1:6b:4d:4e:b2:6e:4b:6a:b0:2d:1f:4d:
         e8:15:35:08:28:26:a9:f7:81:69:98:f9:4c:de:10:8f:a2:af:
         2c:cb:e1:fa:d2:67:dc:97:1a:2f:52:d3:99:fc:99:a9:b5:50:
         f4:57:97:00:38:22:63:9f:77:57:90:8f:b6:11:a9:23:be:4f:
         12:7a:de:0f:c1:f4:60:e8:6c:aa:b8:86:1e:b7:8b:a5:97:92:
         bf:05:cb:4a:de:92:37:46:c0:e5:3c:24:86:cf:1b:59:4b:6d:
         79:ce:84:76:c3:4d:e9:a3:be:92:9f:66:4e:a6:e3:41:ce:ea:
         ac:b7:92:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:34 2024 by rpki-client on console-ams.rpki-client.org