Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/9222BEB4F42811EB93675638C4F9AE02.roa
File:                     9222BEB4F42811EB93675638C4F9AE02.roa (raw, json)
Hash identifier:          5ctxZQMCBBanRgJSVxk2lsTuco//bC5Osf3fvZWriiw=
Subject key identifier:   1D:90:15:43:3F:9E:0C:D2:0A:C4:F5:98:30:08:EF:C7:AB:7F:18:72
Certificate issuer:       /CN=A9134C3E/serialNumber=0C0B1DD5F6AB644C570781A429E448050218E9EB
Certificate serial:       04B9
Authority key identifier: 0C:0B:1D:D5:F6:AB:64:4C:57:07:81:A4:29:E4:48:05:02:18:E9:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/9222BEB4F42811EB93675638C4F9AE02.roa
Signing time:             Tue 03 Sep 2024 01:13:53 +0000
ROA not before:           Tue 03 Sep 2024 01:13:53 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     142610
IP address blocks:        103.170.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.crl
                          rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1209 (0x4b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134C3E/serialNumber=0C0B1DD5F6AB644C570781A429E448050218E9EB
        Validity
            Not Before: Sep  3 01:13:53 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d662d0-dc69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a7:65:46:ac:2c:0c:d0:f8:5a:b2:5c:9e:eb:
                    95:95:69:58:2e:bf:85:b3:18:86:c0:3c:21:38:5d:
                    66:6c:0a:74:b4:a0:ff:cb:27:80:4e:fc:0f:5d:09:
                    8b:1c:43:3f:ee:c6:b0:1d:76:03:b4:0e:c2:ef:e0:
                    49:eb:09:d8:16:ef:59:ef:44:0f:2f:16:50:8f:6d:
                    66:10:58:ed:b9:4b:cb:a8:22:61:77:04:bf:5a:6c:
                    35:17:b3:6e:97:8a:91:d4:be:39:dc:ba:12:7d:59:
                    55:4b:98:b9:13:10:a7:6e:ab:8f:ac:18:92:7c:33:
                    7e:74:0e:eb:55:ba:13:9e:42:f5:42:3e:93:73:aa:
                    24:36:17:94:f4:1b:58:dd:3b:f8:07:04:e8:32:e2:
                    8b:7f:4e:8a:a3:02:ae:c5:17:79:47:64:c6:8f:e8:
                    b0:f7:34:ab:b7:73:02:7f:40:86:bc:96:bb:a8:fd:
                    ff:72:e5:f2:a5:ae:fa:73:91:0e:54:2c:8d:8a:3b:
                    ee:47:90:d8:73:67:c1:d4:c6:6c:06:28:37:75:a1:
                    ba:12:fa:c2:d4:91:fe:1d:65:43:08:9c:ed:ac:32:
                    9b:82:27:bf:ae:9a:72:79:41:e1:5c:6d:0c:e8:f4:
                    0b:4e:a6:a2:13:a0:19:f2:d5:45:69:55:4f:9e:00:
                    a6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:90:15:43:3F:9E:0C:D2:0A:C4:F5:98:30:08:EF:C7:AB:7F:18:72
            X509v3 Authority Key Identifier:
                keyid:0C:0B:1D:D5:F6:AB:64:4C:57:07:81:A4:29:E4:48:05:02:18:E9:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/9222BEB4F42811EB93675638C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:93:47:5a:ab:2c:52:d2:ca:cb:e3:2f:1d:c6:93:5e:87:20:
         ad:a1:c0:71:a5:5c:63:16:4e:eb:97:46:62:b5:8d:76:de:11:
         81:e5:78:00:e0:91:64:95:4f:2f:fe:51:2b:10:ff:af:c5:2d:
         7f:bb:df:f8:79:96:25:90:03:12:10:48:3c:ac:27:98:2f:1d:
         d7:83:10:66:8c:50:ba:53:c3:e3:fc:e3:93:47:86:7d:b6:90:
         80:49:c3:3d:a8:c7:9a:21:da:40:5b:94:8a:83:91:c8:78:4f:
         79:e0:8c:a6:5f:23:57:47:b5:3a:59:79:ce:54:fd:fc:c2:7d:
         2e:c5:99:8d:cb:ef:bd:94:bd:31:85:a2:c9:cb:46:1c:c1:07:
         21:fa:8a:c3:f6:b4:4f:0b:b4:6b:a2:b2:a7:e0:33:a0:18:f7:
         01:c1:8d:2a:f3:6f:b7:e0:d9:53:ca:22:14:54:93:68:27:e7:
         d6:91:13:55:3e:4a:2b:f1:b4:06:a6:9c:4e:f3:28:dd:6d:b9:
         45:09:a7:c8:d3:90:36:0c:73:fb:84:d7:d0:cf:a2:3e:7a:09:
         8a:72:26:93:e3:b7:b2:df:b4:a8:4a:14:70:68:51:aa:0b:e7:
         8e:1b:68:23:99:fe:8e:cb:ec:67:06:0c:8b:6b:ea:68:55:35:
         c5:6e:0a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:32 2024 by rpki-client on console-fra.rpki-client.org