Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/F609B0309D5F11EE94076E6FC4F9AE02.roa
File:                     F609B0309D5F11EE94076E6FC4F9AE02.roa (raw, json)
Hash identifier:          LSFIulSHGa/QEqEdNS+GTaiAPbq49nSfpVu6PIaKrno=
Subject key identifier:   44:B9:70:7C:44:05:5F:94:33:BD:6F:B4:31:F8:2C:F0:C5:AD:B9:12
Certificate issuer:       /CN=A9131AB9/serialNumber=F2B792422A8DB97954763CFE89166E922E631984
Certificate serial:       0D
Authority key identifier: F2:B7:92:42:2A:8D:B9:79:54:76:3C:FE:89:16:6E:92:2E:63:19:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/F609B0309D5F11EE94076E6FC4F9AE02.roa
Signing time:             Sun 31 Dec 2023 07:07:40 +0000
ROA not before:           Sun 31 Dec 2023 07:07:39 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     59242
IP address blocks:        103.228.49.0/24 maxlen: 24
                          103.254.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.crl
                          rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131AB9/serialNumber=F2B792422A8DB97954763CFE89166E922E631984
        Validity
            Not Before: Dec 31 07:07:39 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6591133b-3bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5a:b0:7f:5b:bb:82:66:dc:15:cf:dc:f9:3b:
                    f9:9c:84:5d:48:e3:4f:d6:29:6f:16:4c:75:64:53:
                    0e:4e:49:ad:74:bb:0e:c3:3a:c5:4d:af:d8:c5:66:
                    5c:e9:a8:5a:13:94:4c:3f:39:c5:48:93:3a:66:92:
                    c1:78:91:64:82:32:59:36:39:4e:18:c8:8e:ae:9d:
                    0f:63:ea:99:20:02:08:6b:a4:23:b7:e2:33:b9:b5:
                    67:27:aa:d8:16:66:00:76:95:18:93:a0:91:2d:2e:
                    3d:b6:63:c1:51:51:a0:74:c2:03:cf:0a:41:ca:6f:
                    91:81:d1:1b:93:9f:76:f0:97:e4:0e:ec:cf:08:f1:
                    1c:9e:4f:dd:42:98:1d:d0:69:0d:2b:04:07:48:20:
                    f4:80:ef:93:06:85:82:78:45:08:84:25:6c:0b:5f:
                    5e:93:59:a3:a4:b8:5c:a4:84:f9:78:79:ab:54:ce:
                    54:7d:f1:58:41:c8:b1:ab:92:61:b2:4b:cb:0a:79:
                    d8:f3:08:e0:d3:09:62:94:81:73:cb:21:68:97:0c:
                    2d:ea:13:85:4a:71:09:89:f8:5b:3d:e1:1e:31:1e:
                    45:17:ed:22:77:1d:00:9f:a8:3e:b9:b2:1d:26:6a:
                    91:5f:4d:6a:8f:0e:e9:c9:54:4d:2d:47:f5:b3:1d:
                    10:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B9:70:7C:44:05:5F:94:33:BD:6F:B4:31:F8:2C:F0:C5:AD:B9:12
            X509v3 Authority Key Identifier:
                keyid:F2:B7:92:42:2A:8D:B9:79:54:76:3C:FE:89:16:6E:92:2E:63:19:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/F609B0309D5F11EE94076E6FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.228.49.0/24
                  103.254.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:21:ac:84:2f:9a:5e:19:29:f8:d2:84:6a:31:73:62:59:72:
         03:0e:0b:00:2d:3b:45:36:27:04:6c:2e:58:64:8d:cb:75:e9:
         98:5a:c0:47:78:58:91:15:1b:4f:91:03:5c:ed:f6:90:a0:eb:
         19:9c:f9:04:e1:e2:1c:ec:b8:cc:60:f6:9a:80:8a:f2:89:9a:
         bb:18:e9:0d:c6:d9:64:b7:d6:85:99:26:f8:7c:19:bf:0a:34:
         b0:9a:50:f5:a3:ab:42:48:5b:07:7a:3f:a2:46:73:39:de:82:
         fa:4d:06:73:8f:1f:e3:3c:98:ac:75:1a:3d:dd:fe:02:de:e8:
         a9:5e:db:89:ae:f7:f1:0a:d7:03:e2:8c:37:ce:df:6d:1a:14:
         25:0f:3e:6e:bb:55:ac:f3:41:d6:fc:d8:36:d7:1c:ec:b4:2c:
         3c:ec:9f:94:08:36:89:ce:39:75:30:29:b1:cc:04:c0:28:d4:
         12:19:0b:4f:9c:71:43:c2:4a:55:c7:03:8b:74:3e:0d:f9:79:
         13:1b:ac:8e:38:56:85:4b:06:ca:67:13:ec:c6:23:23:87:69:
         8e:b8:d8:fb:a7:17:2b:43:44:86:7d:0d:5b:a1:6b:6a:ab:cf:
         9d:3a:64:56:a6:85:d2:14:60:64:8a:c3:7f:f5:66:0d:60:0c:
         28:f7:3a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:05 2024 by rpki-client on console-ams.rpki-client.org