Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/69C96612D0F411EC8DAD6D11C4F9AE02.roa
File:                     69C96612D0F411EC8DAD6D11C4F9AE02.roa (raw, json)
Hash identifier:          zRGHLr8o7A/D/r9KWR7LY3IvuquDXPxtjtwrPymfsx8=
Subject key identifier:   63:65:8E:69:45:FF:7A:7B:0B:73:2F:D8:2B:F1:13:B7:28:E6:FC:1E
Certificate issuer:       /CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230
Certificate serial:       02AF
Authority key identifier: 2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/69C96612D0F411EC8DAD6D11C4F9AE02.roa
Signing time:             Thu 19 Sep 2024 01:35:05 +0000
ROA not before:           Thu 19 Sep 2024 01:35:05 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     134416
IP address blocks:        103.42.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl
                          rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 687 (0x2af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230
        Validity
            Not Before: Sep 19 01:35:05 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=66eb7fc9-9be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ec:ed:44:5a:23:90:55:0f:21:b5:10:c3:43:
                    31:a3:90:e3:f0:a6:24:1b:02:3d:ff:74:f9:12:f3:
                    66:f2:fd:b7:02:8f:16:19:28:ee:08:e8:ff:be:6e:
                    02:38:07:9a:b9:34:47:cb:6f:5e:b7:8f:fe:cc:1c:
                    c3:39:b0:7e:d2:51:de:ad:d2:4f:3c:d6:db:33:3e:
                    b8:c5:61:bd:ed:2f:7f:e5:28:5a:3e:51:f1:db:8c:
                    b8:8e:92:85:e4:d0:f0:0a:1e:06:f9:ed:7a:4f:8d:
                    ea:12:7e:02:f2:e9:89:15:1e:6a:55:2f:c9:3a:12:
                    5a:94:06:85:36:96:e2:c6:45:aa:f0:b3:6a:65:c1:
                    59:be:24:a5:24:8c:6f:57:a6:bf:78:d0:ae:c7:56:
                    48:ca:fa:57:a8:a6:3b:e7:95:f0:8c:a0:f2:27:da:
                    45:4d:75:e7:8a:60:42:c6:0c:3c:a6:30:31:03:9f:
                    d5:ee:3d:c7:8d:59:ef:f9:2f:c8:63:b5:f3:9a:78:
                    b9:2f:fe:0f:68:e6:4e:30:9e:31:ac:15:ff:fa:a8:
                    fc:62:d7:6f:89:15:44:3b:cc:2e:c6:d0:63:cc:d5:
                    8a:b0:cb:d8:0d:9d:50:bf:39:de:6d:4d:fc:0c:58:
                    aa:58:69:19:98:bc:71:84:64:d5:0c:75:be:bc:5c:
                    0e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:65:8E:69:45:FF:7A:7B:0B:73:2F:D8:2B:F1:13:B7:28:E6:FC:1E
            X509v3 Authority Key Identifier:
                keyid:2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/69C96612D0F411EC8DAD6D11C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:cb:0d:76:b1:e7:72:c7:5f:60:86:d7:50:e2:83:46:8b:97:
         a4:37:99:b6:54:0a:20:e1:6c:a1:bc:3e:92:6d:21:4b:b4:dd:
         97:e0:83:f5:39:6c:19:c0:cb:a3:90:02:13:8d:78:57:d5:20:
         82:71:b6:bc:b2:2a:b8:f5:c4:0e:db:d7:87:e9:bc:27:e7:3d:
         a4:cf:c7:b5:9c:d9:ce:b2:27:b0:f1:7e:1d:31:74:2c:ea:32:
         62:bf:e3:45:9d:31:13:c5:70:f4:f8:fa:d0:9e:16:6a:09:06:
         7c:44:d4:9f:f9:2d:f0:13:e0:82:89:a3:64:37:ad:49:99:7a:
         b1:65:cb:c4:7d:26:d0:8e:af:e1:e8:61:8b:bc:54:36:0e:77:
         fd:95:1f:02:6f:43:db:bc:ec:63:ea:f7:ae:d5:7f:14:cf:f8:
         a8:f3:cc:06:6e:2b:ac:65:fd:1b:65:3d:1a:9e:2a:ab:b6:d3:
         db:bc:f7:79:0b:0d:93:9c:88:ac:8d:5e:eb:9c:b1:a3:4d:d0:
         cd:42:65:3d:ad:02:03:cb:fb:0a:6e:19:15:f0:df:c5:9f:3e:
         f6:96:ad:17:23:c3:1d:c4:b0:f7:f0:96:0d:eb:03:0c:92:26:
         a9:db:fa:07:6e:56:31:36:c2:61:df:f6:49:99:fe:cc:45:2d:
         39:86:62:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:37 2024 by rpki-client on console-ams.rpki-client.org