Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/3AA7BED6ECBA11EE8736F274C4F9AE02.roa
File:                     3AA7BED6ECBA11EE8736F274C4F9AE02.roa (raw, json)
Hash identifier:          rV9ie1oJtm2rSFQCCjvltoUnDjD6SpJTDB+pUT5QuIQ=
Subject key identifier:   DA:17:A0:46:EC:C0:56:08:90:B0:C2:96:A0:98:DF:ED:EA:F9:C1:DA
Certificate issuer:       /CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA
Certificate serial:       013B
Authority key identifier: E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/3AA7BED6ECBA11EE8736F274C4F9AE02.roa
Signing time:             Sat 27 Jul 2024 04:46:43 +0000
ROA not before:           Sat 27 Jul 2024 04:46:43 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     134218
IP address blocks:        103.234.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl
                          rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:14:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA
        Validity
            Not Before: Jul 27 04:46:43 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a47bb3-3d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1d:e7:bf:18:f8:ab:ab:4b:9c:c5:74:9d:fd:
                    99:93:64:2b:7a:67:04:fa:10:63:39:11:4a:a5:e8:
                    3a:3b:7a:40:53:68:6b:0b:2d:4b:dc:5f:ad:1f:a6:
                    0c:66:2e:8a:d1:e8:ef:cc:b3:86:b3:fc:c5:0c:eb:
                    b1:3b:1f:91:f6:d9:b3:94:cd:81:7a:69:e2:9c:a5:
                    25:3b:bb:dd:ce:87:6a:3f:ee:fa:9d:9d:ed:ff:63:
                    ca:59:1b:15:5f:96:5b:30:f0:70:39:cb:b8:7a:89:
                    f2:bf:0e:aa:a2:6f:8a:90:37:4f:1e:ee:31:25:d7:
                    23:e9:26:a1:44:9d:94:a3:94:16:fa:54:69:e7:60:
                    e5:22:17:14:2a:92:6a:53:28:ba:98:60:88:ed:4d:
                    f7:0a:c9:8d:0e:da:db:40:b1:07:ac:49:89:5b:0c:
                    36:02:9a:09:d5:0c:79:18:e1:b2:7e:09:c3:44:7c:
                    f1:b6:5b:77:36:0d:c4:77:0d:6a:f2:b3:67:86:50:
                    52:ea:4f:b5:1a:3f:28:c9:65:6e:16:53:aa:6b:a7:
                    a6:bc:f9:b7:6c:db:3a:30:fd:8c:41:93:fb:1b:c9:
                    22:16:22:73:2d:1e:50:f4:8f:67:58:8f:44:01:a0:
                    51:e9:bd:4c:03:93:4b:5b:bb:4c:5d:ef:cd:63:a8:
                    7b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:17:A0:46:EC:C0:56:08:90:B0:C2:96:A0:98:DF:ED:EA:F9:C1:DA
            X509v3 Authority Key Identifier:
                keyid:E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/3AA7BED6ECBA11EE8736F274C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:0d:25:a5:ca:42:7a:79:43:cb:95:2e:60:bc:26:d2:cb:82:
         e7:b2:41:cf:9d:d3:c3:ea:23:97:58:28:be:21:1d:be:34:da:
         d4:df:6f:75:30:44:bf:6d:3d:3f:b5:98:ef:61:d6:a8:14:35:
         bc:b0:6a:e2:57:87:4b:29:94:fb:48:e5:2e:21:ff:6c:90:b2:
         b9:c6:ee:9d:dd:9e:04:17:5e:3a:44:08:9c:dd:b8:36:55:d6:
         e4:ba:53:75:e8:7f:da:5d:d7:a9:01:05:f5:78:02:8b:1e:df:
         1b:e1:40:5e:8e:8e:55:6b:8e:0a:28:1b:8c:03:cb:68:48:f2:
         8f:a6:cc:b6:66:2a:36:48:f7:f8:df:2a:ac:db:2b:84:69:84:
         26:4a:a7:f8:8b:47:e1:b2:1d:95:5f:96:15:62:b9:41:45:09:
         50:2a:3d:2b:f2:70:a4:be:d9:a1:a6:a4:06:4d:f1:e0:50:f2:
         f6:6d:08:b9:56:57:59:a4:31:bd:cf:36:ae:27:ba:0d:7f:02:
         55:6e:65:99:f8:ec:88:fb:0e:1d:2d:e3:fd:b2:29:18:49:d8:
         47:8f:85:67:b6:64:10:ba:0e:86:dd:ee:ab:d8:b5:ea:ee:fe:
         03:96:6f:1f:1e:52:0d:74:a2:2a:b7:51:00:61:0d:ef:26:47:
         d5:9e:a8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:45 2024 by rpki-client on console-fra.rpki-client.org