Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/1BC3E9F8D0F711EC8673072FC4F9AE02.roa
File:                     1BC3E9F8D0F711EC8673072FC4F9AE02.roa (raw, json)
Hash identifier:          RV0bq4XHGKUuOS8T3WS7G4aUlSWl2to/4furDRifxYQ=
Subject key identifier:   FF:D1:1D:FE:00:20:0B:79:67:DD:CD:D3:3D:AE:E2:E2:47:73:21:0F
Certificate issuer:       /CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230
Certificate serial:       02AE
Authority key identifier: 2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/1BC3E9F8D0F711EC8673072FC4F9AE02.roa
Signing time:             Thu 19 Sep 2024 01:35:03 +0000
ROA not before:           Thu 19 Sep 2024 01:35:03 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     134415
IP address blocks:        103.42.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl
                          rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 686 (0x2ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230
        Validity
            Not Before: Sep 19 01:35:03 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=66eb7fc7-3f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5f:7c:34:28:3f:af:f9:98:ef:23:2c:44:01:
                    64:95:14:13:68:a1:cf:a3:3e:30:49:de:ad:4b:d2:
                    0a:94:92:11:73:8f:85:c6:7c:83:5d:96:11:1d:ef:
                    09:08:3a:01:bb:20:c5:22:07:3f:71:22:3f:4d:15:
                    c8:cd:9a:a8:18:db:4c:2d:a4:c1:91:a4:52:de:76:
                    a7:9f:55:7a:68:bb:f5:82:13:8c:d0:d3:60:f6:a4:
                    69:f3:7d:57:ba:e2:b5:2e:5b:69:6b:6e:e4:ef:46:
                    7b:5a:61:8b:d0:00:f6:c5:1e:00:ad:e1:3a:f3:14:
                    51:48:c0:05:4c:9f:37:6f:40:b7:1d:3b:06:a3:f4:
                    6a:1c:ff:33:0a:e9:ee:ed:7d:09:3e:19:f5:50:25:
                    29:00:64:a3:5d:e0:e8:fa:1f:c7:79:5b:ff:b9:21:
                    19:7d:63:43:c2:4e:31:cf:25:f6:e9:7e:a3:e9:b2:
                    1d:67:42:29:ce:c1:35:c2:b7:92:e5:46:2f:5c:98:
                    d3:c8:31:15:4c:60:d0:01:2c:31:cf:61:fc:e3:75:
                    0d:4b:06:20:33:52:8b:33:0c:9c:9b:ce:dd:63:6a:
                    06:31:b8:e2:a7:8d:5b:0c:08:84:fa:59:fa:5b:f1:
                    b1:a1:da:87:5d:7a:fa:25:85:01:d2:bb:94:15:11:
                    46:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D1:1D:FE:00:20:0B:79:67:DD:CD:D3:3D:AE:E2:E2:47:73:21:0F
            X509v3 Authority Key Identifier:
                keyid:2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/1BC3E9F8D0F711EC8673072FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:49:6b:2a:9a:4b:de:31:b9:75:4b:3c:26:23:19:63:f1:9f:
         08:a7:47:fb:71:c1:e7:b1:24:ae:5d:b1:93:53:1e:61:de:43:
         49:f6:6e:6a:e7:6b:d5:cf:d0:b5:2f:aa:35:7e:85:67:bc:b6:
         0d:a1:00:78:0a:9f:7e:ab:f3:e7:72:a6:fa:1c:76:07:24:cb:
         cb:9c:0d:df:09:e0:02:d6:7f:f5:4b:4a:72:14:84:c1:d7:e4:
         07:10:7c:4c:7b:d7:cf:56:da:82:bb:cb:56:3a:37:e4:cd:91:
         ba:69:74:54:48:e0:a1:bf:f0:95:a8:1b:cc:7a:30:c7:ba:a3:
         84:df:f8:fa:7a:f2:bf:89:5e:19:44:7f:28:d8:40:80:39:98:
         68:99:b9:6b:d6:8e:29:31:30:71:d2:9f:ad:2c:af:54:f7:3b:
         3b:1e:12:b9:c0:71:10:a6:1e:10:50:bb:a9:95:65:de:4d:c9:
         28:b8:50:39:f1:c5:a8:1c:f9:d6:3e:ff:79:f2:5e:83:9f:94:
         9c:f1:83:b5:9c:3c:b8:37:6e:bf:14:e5:96:07:7f:7b:b5:79:
         de:ff:54:7a:64:05:f9:d4:eb:59:dc:3f:da:5a:41:6e:79:53:
         df:a4:e2:73:34:90:be:82:d8:13:fb:b7:43:48:2b:4f:ea:28:
         b9:a1:fb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:33 2024 by rpki-client on console-fra.rpki-client.org