Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/1396BBE630E811EEAE1F1212C4F9AE02.roa
File:                     1396BBE630E811EEAE1F1212C4F9AE02.roa (raw, json)
Hash identifier:          G0Z1hBSAadu8OlmCXadHF0WS+wiuqOrbeJFTILrE+Vo=
Subject key identifier:   BF:53:86:C6:29:0D:2A:02:67:0F:DF:29:0B:8F:BF:25:6D:55:B2:8A
Certificate issuer:       /CN=A9135F3C/serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC
Certificate serial:       05A2
Authority key identifier: 23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/1396BBE630E811EEAE1F1212C4F9AE02.roa
Signing time:             Wed 03 Jan 2024 00:01:52 +0000
ROA not before:           Wed 03 Jan 2024 00:01:52 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     198584
IP address blocks:        103.161.34.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl
                          rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1442 (0x5a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135F3C/serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC
        Validity
            Not Before: Jan  3 00:01:52 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=6594a3f0-59a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:87:ac:5d:cc:5d:42:c4:8e:0c:f6:29:a4:64:
                    cc:75:b8:69:cb:7e:18:7a:ed:51:73:80:54:f4:5c:
                    fb:d5:bc:7b:7d:d5:1c:3d:32:58:88:74:7f:a5:0c:
                    5a:dd:6c:00:67:eb:b9:b3:97:65:bc:ba:5e:e4:0e:
                    1e:54:30:02:da:9a:c4:a7:cc:c3:e8:c6:35:87:38:
                    13:ba:8b:8e:4c:dd:63:d9:36:11:6a:2f:28:be:72:
                    ea:01:92:6d:e6:7c:85:7d:88:ff:bc:1c:75:7f:0d:
                    08:75:19:79:5c:6d:4b:b0:f5:5d:86:91:b7:84:74:
                    76:c3:ea:95:cb:d5:72:d4:c5:36:5c:0a:7d:b5:21:
                    e6:0f:d6:b1:fa:fb:be:8f:0b:e0:9e:ef:9c:55:d4:
                    1d:ee:e4:06:76:b9:a0:d5:6f:d8:ad:63:fa:2c:e3:
                    64:2b:e0:e0:a3:cf:fb:ab:6b:96:ff:9f:b3:dd:d7:
                    84:fc:5b:19:dc:8d:3c:b2:e5:92:9a:90:22:4d:0f:
                    c9:19:ad:ac:7f:15:1a:f8:6a:5f:80:d3:06:e1:5a:
                    ea:77:0c:40:d6:f5:0a:39:f2:05:8d:16:1a:4c:df:
                    ce:df:32:73:d6:6d:9d:34:ef:2b:87:69:16:2d:3a:
                    e4:38:10:36:16:37:b4:f0:8d:01:7c:e5:54:03:d9:
                    ce:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:53:86:C6:29:0D:2A:02:67:0F:DF:29:0B:8F:BF:25:6D:55:B2:8A
            X509v3 Authority Key Identifier:
                keyid:23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/1396BBE630E811EEAE1F1212C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:c5:a8:5d:a0:95:f6:57:31:87:e4:41:d1:2f:33:78:8d:59:
         78:05:0c:5e:8a:14:51:96:fe:14:a4:76:33:d0:5e:94:42:aa:
         99:ce:11:51:4b:38:69:45:9a:3d:86:de:90:9f:c6:df:50:8e:
         63:78:b0:ec:a2:48:30:13:60:5a:f1:3a:13:af:23:81:7e:14:
         24:6f:60:30:8b:fb:af:33:09:ec:9b:b8:14:94:be:31:af:05:
         ae:e2:56:70:00:01:2f:68:a5:be:87:d2:a4:33:7c:73:a6:9c:
         40:da:d6:aa:95:4e:96:e2:5f:9e:68:d7:67:42:15:48:59:42:
         31:74:da:45:a8:9b:d8:38:ab:5e:5e:0f:e7:73:a3:d7:2e:a9:
         53:e8:a3:14:cb:44:e4:2e:6f:e2:64:fb:ba:7d:73:6f:c6:e3:
         5c:bb:1f:3b:2d:2d:a1:2e:3c:3e:5a:9b:1b:46:4e:0a:4d:07:
         9d:02:d7:a2:eb:8b:87:09:dd:f2:2c:cd:9c:19:63:a4:79:07:
         98:1c:0e:7e:7e:63:f2:99:14:68:d9:da:b9:a7:0a:80:20:00:
         5e:17:41:0e:34:2d:59:58:3a:2f:8c:2b:ee:7e:96:a6:be:b6:
         4f:8e:1e:c0:c0:81:28:2e:29:f2:b2:63:af:82:fd:0a:97:31:
         1f:c1:f7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:24 2024 by rpki-client on console-fra.rpki-client.org