Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/6580E03C79E511EC99DA1B51C4F9AE02.roa
File:                     6580E03C79E511EC99DA1B51C4F9AE02.roa (raw, json)
Hash identifier:          SiyXp8s8/hAXjY68zK9BtwMRoILRvuLxj/zVeKFswVk=
Subject key identifier:   F9:91:E1:36:2A:E6:F9:42:E1:68:AF:19:5B:7B:34:DC:6D:67:D4:14
Certificate issuer:       /CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Certificate serial:       09C3
Authority key identifier: AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/6580E03C79E511EC99DA1B51C4F9AE02.roa
Signing time:             Tue 14 May 2024 21:30:46 +0000
ROA not before:           Tue 14 May 2024 21:30:46 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     10103
IP address blocks:        115.160.135.0/24 maxlen: 24
                          202.64.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
                          rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 22:04:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2499 (0x9c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
        Validity
            Not Before: May 14 21:30:46 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6643d805-c978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:88:b8:64:36:70:3c:94:1f:52:eb:80:f2:06:
                    20:32:b7:fd:04:ae:d4:9e:21:99:5a:02:15:d4:01:
                    6b:f6:2e:48:60:78:c6:58:6a:d9:52:e1:2e:65:bb:
                    a5:aa:a1:04:af:0e:5a:88:dc:1e:e9:3e:51:05:ee:
                    b5:6e:df:cd:da:d6:a1:e9:5e:88:05:ce:d0:03:e6:
                    92:21:49:10:b5:d5:fb:0f:5d:93:00:c5:d1:a4:c7:
                    5a:ea:80:8f:e4:35:bd:fb:8d:d9:f6:44:46:de:e1:
                    2d:dc:93:93:36:1e:47:29:51:96:4a:6c:7d:df:bc:
                    5b:9e:78:22:f5:28:d9:a5:83:37:6b:cb:95:38:80:
                    ac:73:95:d0:5f:ff:63:4a:2e:b2:63:73:3a:16:83:
                    af:8b:77:e8:68:0e:83:e1:00:68:f7:a0:f3:30:a7:
                    04:78:b6:20:d4:ce:3e:fa:65:83:e2:ac:d9:82:80:
                    8a:75:c3:dd:91:17:82:aa:9e:13:82:4f:ab:e4:84:
                    8b:5e:39:de:b2:46:73:56:b4:a3:91:cd:83:cd:7e:
                    7d:2c:b1:08:de:85:90:ef:2d:45:72:a0:dc:39:50:
                    6b:8b:02:75:a2:71:b0:9e:16:ee:70:1e:9f:a8:21:
                    03:8e:c6:63:4a:8d:8f:b5:b6:aa:9a:52:8b:95:14:
                    67:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:91:E1:36:2A:E6:F9:42:E1:68:AF:19:5B:7B:34:DC:6D:67:D4:14
            X509v3 Authority Key Identifier:
                keyid:AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/6580E03C79E511EC99DA1B51C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.160.135.0/24
                  202.64.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:d3:1b:89:0d:ad:2c:39:22:8a:c5:d9:95:88:64:df:d1:4b:
         3a:c4:5d:89:73:08:3d:27:08:e2:07:3a:95:ca:5f:97:f6:f8:
         7d:28:ae:75:e6:0b:73:21:2d:16:b0:e7:56:ff:f1:44:dc:6d:
         51:38:02:04:77:ad:f4:92:77:da:87:14:a5:49:f1:25:81:bb:
         9c:1f:4e:92:5d:65:5f:59:44:b6:44:ac:e3:70:51:7c:be:43:
         df:ca:76:06:28:63:5d:71:cf:6a:20:5b:a8:93:01:a0:6a:84:
         cf:ea:7e:83:ce:ee:ee:21:76:e9:e7:4e:01:c3:9f:20:d0:47:
         db:ae:8b:c2:c1:67:96:40:51:f4:b3:59:67:90:f0:39:c4:7b:
         42:2f:69:c9:e1:6a:cd:b0:57:f9:b9:f0:95:b3:e2:b2:f7:21:
         c8:fd:d4:ae:a9:3f:df:d5:2a:f4:a8:92:06:ac:3b:c8:a6:2a:
         ff:fa:29:71:9f:b7:63:a9:bf:b6:b3:38:60:41:51:b3:4b:0e:
         29:26:dc:9e:7e:db:9c:e2:d0:7d:21:87:e7:b7:eb:e6:70:0b:
         99:d3:4c:3f:e2:46:17:90:dc:ee:59:45:f3:9e:eb:2c:2b:c5:
         4f:97:30:9c:6b:1a:f5:0a:2a:97:fa:e9:f5:98:b7:3d:76:fd:
         94:6a:81:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 22:56:56 2024 by rpki-client on console-fra.rpki-client.org