Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/E46B7DACDC3611EEBE5CDD37C4F9AE02.roa
File:                     E46B7DACDC3611EEBE5CDD37C4F9AE02.roa (raw, json)
Hash identifier:          EUS1TcmCLEChYsSUsTW2xirwCeaCm7aIPgo/Dh+GRoU=
Subject key identifier:   E4:FB:8D:1D:61:3B:F6:D8:A9:F8:AB:40:0B:4E:87:FA:83:E7:48:F3
Certificate issuer:       /CN=A9122041/serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130
Certificate serial:       02
Authority key identifier: 7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/E46B7DACDC3611EEBE5CDD37C4F9AE02.roa
Signing time:             Thu 07 Mar 2024 03:58:01 +0000
ROA not before:           Thu 07 Mar 2024 03:58:01 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     151789
IP address blocks:        103.140.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl
                          rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122041/serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130
        Validity
            Not Before: Mar  7 03:58:01 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=65e93b49-7c5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f8:2b:fa:fe:da:98:11:cf:6f:fc:c9:e3:d5:
                    46:a2:ae:3f:aa:02:1c:48:21:77:61:b2:ca:f8:f0:
                    94:1a:51:e6:6a:b3:90:10:b0:a9:b1:c9:bd:fa:59:
                    2c:83:06:8e:19:40:9a:4d:3c:68:5c:63:75:58:91:
                    f7:11:ae:9c:64:0e:4c:0c:bb:f5:e8:22:15:69:34:
                    d8:1d:ab:3b:a9:22:98:c7:e9:53:ed:35:6d:66:f3:
                    1f:42:b5:23:63:c1:02:ab:d3:4e:de:46:d5:78:ff:
                    69:b6:4b:61:ff:96:a4:ed:d1:87:f9:85:c3:2e:1e:
                    63:4d:58:40:24:7f:26:f5:9a:34:96:c4:fb:83:49:
                    8d:dd:32:2a:90:fc:de:a5:87:17:fd:b3:78:d9:29:
                    01:fc:39:6b:71:cb:1f:a0:3b:fc:bd:b7:8b:bc:83:
                    13:8f:a0:24:ef:bb:09:6b:77:30:8c:c3:c4:e8:9a:
                    84:30:30:24:1d:2a:dc:76:14:f5:5f:0b:2c:ee:87:
                    8d:72:91:76:a4:73:8e:6d:6e:b7:87:d5:54:3e:8d:
                    4d:11:03:79:0b:38:40:3d:86:78:03:5b:9e:a6:ab:
                    37:23:91:32:fe:b8:28:7f:96:17:12:9e:b8:57:7f:
                    e0:30:4e:58:91:36:f1:a6:b2:f9:65:36:8d:b4:65:
                    fb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FB:8D:1D:61:3B:F6:D8:A9:F8:AB:40:0B:4E:87:FA:83:E7:48:F3
            X509v3 Authority Key Identifier:
                keyid:7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/E46B7DACDC3611EEBE5CDD37C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:2a:38:54:b8:1e:84:fc:ce:70:c5:bc:78:59:e4:65:bc:d3:
         49:c8:57:2f:ed:d8:c0:27:98:d1:44:d6:81:7f:7b:74:19:34:
         60:4b:58:a4:b0:32:0b:ab:48:f3:f1:78:5d:ca:d8:a4:83:fb:
         e3:df:8f:62:40:c8:03:37:b7:9c:91:5a:15:4b:0d:e5:bc:4c:
         69:e9:8a:fa:16:cc:d1:ad:f2:b4:93:ca:7e:84:e6:d3:89:09:
         08:3a:c0:98:36:08:f7:44:52:ef:8c:25:44:d7:ac:d9:5c:52:
         eb:6b:71:eb:d2:f7:96:99:3d:7c:f4:8d:f4:37:72:a4:f3:e4:
         ee:69:d5:79:bc:02:bc:d4:44:55:6f:11:5c:e4:60:ba:0f:77:
         49:48:b7:76:37:8e:02:2b:35:c4:a2:6e:6c:20:e0:f6:aa:f4:
         e5:5e:96:28:7e:33:7f:75:43:72:97:d4:6e:74:78:19:0e:10:
         dc:ed:b9:43:f6:6e:cd:d3:19:d2:85:bd:ca:66:34:d3:81:34:
         65:ca:cd:72:ae:f3:1c:b4:e8:18:70:ec:c9:7b:97:cb:af:16:
         cb:32:5e:0c:95:02:fb:47:e7:e2:b3:a1:a8:3d:22:c7:3f:13:
         22:ca:ba:14:18:e6:1d:2f:6d:7c:c4:5b:95:70:92:b7:b5:49:
         d5:8c:48:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:22 2024 by rpki-client on console-fra.rpki-client.org