Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D8BA/48B40A8401D411EDA92EAA2DC4F9AE02/9E92DC7601D611EDA3BFA62EC4F9AE02.roa
File:                     9E92DC7601D611EDA3BFA62EC4F9AE02.roa (raw, json)
Hash identifier:          6VDPVFoQlCu4wCzBTF2TWLpMU3Hb5lq9GZwN5BT2PcI=
Subject key identifier:   3A:D3:B4:67:9E:EF:EB:17:1B:B8:1B:96:CC:0E:F3:AB:43:92:CD:E3
Certificate issuer:       /CN=A911D8BA/serialNumber=7318DA73A0AB3DD090E6B73FC4DF0D7510185CF1
Certificate serial:       01E4
Authority key identifier: 73:18:DA:73:A0:AB:3D:D0:90:E6:B7:3F:C4:DF:0D:75:10:18:5C:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxjac6CrPdCQ5rc_xN8NdRAYXPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D8BA/48B40A8401D411EDA92EAA2DC4F9AE02/9E92DC7601D611EDA3BFA62EC4F9AE02.roa
Signing time:             Mon 03 Jun 2024 05:21:56 +0000
ROA not before:           Mon 03 Jun 2024 05:21:56 +0000
ROA not after:            Tue 01 Oct 2024 00:00:00 +0000
asID:                     17483
IP address blocks:        103.227.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D8BA/48B40A8401D411EDA92EAA2DC4F9AE02/cxjac6CrPdCQ5rc_xN8NdRAYXPE.crl
                          rsync://rpki.apnic.net/member_repository/A911D8BA/48B40A8401D411EDA92EAA2DC4F9AE02/cxjac6CrPdCQ5rc_xN8NdRAYXPE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxjac6CrPdCQ5rc_xN8NdRAYXPE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 484 (0x1e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D8BA/serialNumber=7318DA73A0AB3DD090E6B73FC4DF0D7510185CF1
        Validity
            Not Before: Jun  3 05:21:56 2024 GMT
            Not After : Oct  1 00:00:00 2024 GMT
        Subject: CN=665d52f4-fa4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:58:1a:7b:08:e1:43:6f:ad:9a:42:8b:e3:22:
                    93:32:46:0b:e0:dc:59:7f:3a:2d:e8:12:2a:41:28:
                    8f:23:85:b6:42:31:9a:d9:80:1d:02:70:45:20:94:
                    c6:c0:da:f3:df:d5:dd:6e:0a:5f:4c:d9:aa:2c:76:
                    61:31:b6:5a:aa:4e:21:d9:98:ca:d0:07:b0:e1:27:
                    6d:9d:7a:be:a6:5a:53:0b:67:62:5b:68:2b:13:45:
                    1e:44:a6:bd:28:34:4b:11:b2:be:3c:59:bb:4a:12:
                    39:43:b7:77:a5:fa:2f:11:34:0c:84:df:3d:f6:ba:
                    59:97:fe:32:97:26:fe:48:17:e8:ae:bb:26:cd:d6:
                    a9:81:c4:28:bc:39:d7:8d:57:dd:de:bb:5c:29:88:
                    a1:e0:d2:4b:bc:29:a8:91:4b:22:57:8e:1f:fa:d0:
                    b3:d7:05:59:e0:8d:dd:1f:5c:b8:98:dd:9c:40:84:
                    e2:76:45:5a:d6:9e:ba:fa:42:20:35:6f:6d:90:a7:
                    7d:56:63:ce:3e:84:8b:06:3b:a4:c2:4a:6c:66:16:
                    c4:bb:e8:c6:b3:7f:37:07:54:46:9c:be:81:89:6b:
                    14:24:01:42:bc:0e:da:68:f2:e6:cf:3c:89:06:93:
                    75:27:a2:82:c3:1b:f6:78:de:41:d6:32:5e:23:35:
                    75:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D3:B4:67:9E:EF:EB:17:1B:B8:1B:96:CC:0E:F3:AB:43:92:CD:E3
            X509v3 Authority Key Identifier:
                keyid:73:18:DA:73:A0:AB:3D:D0:90:E6:B7:3F:C4:DF:0D:75:10:18:5C:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D8BA/48B40A8401D411EDA92EAA2DC4F9AE02/cxjac6CrPdCQ5rc_xN8NdRAYXPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxjac6CrPdCQ5rc_xN8NdRAYXPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D8BA/48B40A8401D411EDA92EAA2DC4F9AE02/9E92DC7601D611EDA3BFA62EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:09:1e:ad:b9:66:85:d5:aa:be:b9:25:62:2d:d6:e4:0a:32:
         be:e7:25:05:72:f0:d7:ef:a4:35:64:55:db:fd:ad:0a:30:5e:
         27:c6:66:a0:56:b1:3e:a6:0d:1a:43:21:1a:be:27:45:a5:f6:
         a5:95:29:21:60:60:1d:06:a6:22:80:49:5b:16:6f:b5:37:09:
         60:a1:e6:eb:b0:d4:d3:eb:5a:bc:76:67:e6:6a:e9:3f:84:e0:
         ea:ff:12:31:40:04:cf:14:b0:e2:34:4b:d2:3d:94:bf:0b:5a:
         ef:5a:da:31:49:f1:59:20:b7:58:46:f7:18:42:8b:68:4e:44:
         06:7a:36:ba:0f:fa:a0:55:76:dd:fc:69:fd:75:4c:8e:c8:14:
         f4:ea:3e:bb:c3:32:a3:88:4c:ee:98:b9:d4:14:20:9c:05:16:
         f0:37:f1:3d:93:d0:3a:89:0b:32:17:72:7c:13:25:58:a7:51:
         eb:21:2d:bc:02:9e:20:93:8c:9e:58:59:2d:ec:4a:15:9d:0b:
         6d:36:ec:50:92:97:d6:92:d9:46:5e:70:03:f9:0e:64:66:48:
         03:c9:bd:07:93:a5:14:a2:19:a0:95:9a:c1:2e:27:69:80:8e:
         b8:5e:80:86:e5:46:c0:1f:ad:da:a6:c0:32:01:32:3d:de:6a:
         11:3a:92:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 05:09:19 2024 by rpki-client on console-ams.rpki-client.org