Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/861D1DB82C4411EC9539C124C4F9AE02.roa
File:                     861D1DB82C4411EC9539C124C4F9AE02.roa (raw, json)
Hash identifier:          L7nlhQmvIweH/CDk6Porr52Om6tp3xqWvQb2+9BsORw=
Subject key identifier:   9B:9B:89:64:02:69:A0:51:26:1E:42:27:7B:ED:F2:1E:91:E9:D3:0B
Certificate issuer:       /CN=A9150984/serialNumber=C04C81A6515E5026E21BE68CB9D51D4139A85A92
Certificate serial:       0435
Authority key identifier: C0:4C:81:A6:51:5E:50:26:E2:1B:E6:8C:B9:D5:1D:41:39:A8:5A:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/861D1DB82C4411EC9539C124C4F9AE02.roa
Signing time:             Sat 31 Aug 2024 02:04:57 +0000
ROA not before:           Sat 31 Aug 2024 02:04:57 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     136910
IP address blocks:        103.98.204.0/22 maxlen: 24
                          2401:9f40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.crl
                          rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1077 (0x435)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150984/serialNumber=C04C81A6515E5026E21BE68CB9D51D4139A85A92
        Validity
            Not Before: Aug 31 02:04:57 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d27a49-1f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fc:93:78:df:16:b7:6f:17:c3:bb:d1:12:6e:
                    80:35:59:98:30:0c:d5:d5:32:d3:0c:de:7c:a5:bd:
                    2a:c2:66:8c:dc:e3:14:33:ec:89:3f:c3:3f:20:30:
                    5f:64:70:ef:38:ae:cd:1f:11:e9:5e:a1:41:58:de:
                    68:18:75:e4:a0:fd:75:df:fb:7c:e2:81:5f:f7:3f:
                    a7:b8:c0:69:5f:2f:f5:47:a2:58:11:91:5e:3d:cf:
                    86:92:0f:bf:4f:b2:d9:d5:f2:f7:46:13:1b:d5:8b:
                    83:e3:9a:51:da:78:c7:26:2e:5b:fc:8f:55:8d:bd:
                    a9:7b:54:a2:f1:cd:90:38:8a:06:3a:69:b0:df:2d:
                    5c:8c:b6:98:68:73:0a:3a:45:e5:69:67:af:fd:8b:
                    24:dc:d2:da:19:4a:0e:0c:ad:05:44:52:e7:18:d2:
                    d1:99:e6:6a:81:bc:e8:89:65:7f:bb:0f:23:a4:0f:
                    20:f8:cf:ab:56:d6:f1:6c:b3:25:83:89:05:51:09:
                    13:a7:68:38:80:cb:03:6e:f8:cf:32:eb:bd:bc:9d:
                    6e:80:c8:97:0f:b1:0f:a5:60:40:49:a9:5f:b1:9a:
                    06:be:c5:e3:3a:bc:e9:0a:30:87:a2:e8:3d:cc:29:
                    79:1a:f7:13:64:1d:2a:fc:e5:41:fc:2a:14:ff:5e:
                    26:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:9B:89:64:02:69:A0:51:26:1E:42:27:7B:ED:F2:1E:91:E9:D3:0B
            X509v3 Authority Key Identifier:
                keyid:C0:4C:81:A6:51:5E:50:26:E2:1B:E6:8C:B9:D5:1D:41:39:A8:5A:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/861D1DB82C4411EC9539C124C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.204.0/22
                IPv6:
                  2401:9f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:92:25:b1:c6:81:03:90:99:ca:d8:91:f1:ce:5c:a6:3b:1a:
         3e:3b:21:db:5f:e5:16:da:b9:c2:03:5d:59:7a:55:9a:da:74:
         91:ac:89:ed:03:ab:f0:9d:bb:eb:df:47:70:12:6b:b5:8b:1c:
         a9:cd:a1:9d:0f:07:10:8f:cd:4c:3e:5b:26:eb:ec:e1:17:8d:
         a5:1f:11:79:95:e2:17:38:4a:f5:e0:07:4e:b9:66:01:7c:58:
         6b:e1:80:1c:ff:1a:58:c8:c6:e2:17:15:75:4c:ce:1c:51:1b:
         1e:11:ff:5b:8f:5c:6a:9f:08:4c:5c:3c:87:b9:b5:44:be:c1:
         a8:d9:79:a5:3c:99:ba:73:a9:5a:b9:d5:68:73:0f:94:22:86:
         8f:aa:ba:d2:ec:72:ba:36:b9:e0:95:09:c0:52:42:c4:7b:01:
         d1:54:9f:62:eb:91:f9:0f:16:79:7a:6a:a8:af:82:40:a1:9d:
         c6:77:12:73:b7:5d:a8:6e:18:45:75:5d:3d:84:49:02:07:1c:
         65:71:8e:17:cd:e5:ed:a1:f8:51:cb:08:71:95:24:97:64:08:
         7e:2a:db:58:d4:c0:74:23:08:e6:90:7a:fe:d4:ef:87:53:54:
         2c:53:37:7a:28:ce:ae:89:ee:1c:2f:9e:be:c0:5e:65:ca:d3:
         d2:a4:96:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:22 2024 by rpki-client on console-ams.rpki-client.org