Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/32509B68EDAE11E595DF6C28C4F9AE02.roa
File:                     32509B68EDAE11E595DF6C28C4F9AE02.roa (raw, json)
Hash identifier:          aiAqLVoZ6cEM6hY/DjBukcfxFi5I+NxU4FFn5k2CPUQ=
Subject key identifier:   A6:F3:63:56:58:9F:CA:F3:4C:D4:63:FF:F7:B3:24:AF:1F:9C:AF:36
Certificate issuer:       /CN=A9154657/serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72
Certificate serial:       3465
Authority key identifier: 20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/32509B68EDAE11E595DF6C28C4F9AE02.roa
Signing time:             Sat 16 Nov 2024 14:40:12 +0000
ROA not before:           Sat 16 Nov 2024 14:40:12 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     9443
IP address blocks:        103.5.92.0/22 maxlen: 22
                          103.5.94.0/24 maxlen: 24
                          2402:8700::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl
                          rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 14:19:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13413 (0x3465)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154657/serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72
        Validity
            Not Before: Nov 16 14:40:12 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6738aecc-bf0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:27:18:6f:39:60:e0:ba:af:22:3a:c0:dc:ae:
                    0a:72:e0:45:5a:25:aa:ef:28:43:39:53:97:f5:fd:
                    1a:71:94:8f:3c:97:0b:c1:d0:d8:e9:d6:93:13:3f:
                    88:41:6f:bc:41:f3:8c:c4:d5:87:a8:8d:87:dd:6c:
                    bf:ac:a1:12:51:d9:57:4d:82:23:88:ad:73:13:02:
                    26:60:51:bd:89:5c:5e:65:21:ae:22:1d:53:f6:13:
                    d4:54:7e:7f:1d:d6:80:73:8c:a3:3e:79:e4:8e:e5:
                    1d:cc:4b:b5:ab:6c:b0:35:65:dd:33:c0:c8:b7:a4:
                    58:00:a6:60:3b:79:b2:8c:bd:06:5b:00:72:4e:43:
                    a4:81:83:96:4b:6c:c2:5a:8b:45:27:79:ef:c5:a1:
                    1b:96:2b:ae:5a:a8:43:7c:a8:d9:3a:f5:1d:f3:7b:
                    b5:ea:d5:a1:16:81:c8:bf:8d:fd:83:d1:c3:03:c1:
                    83:19:a7:db:55:79:e4:5f:31:34:4e:2c:e0:1c:e7:
                    57:6d:e8:70:7f:07:31:fb:cd:17:c0:e4:1a:cc:5a:
                    45:71:f6:39:18:b5:d3:5d:b5:d7:3a:8a:13:cb:05:
                    4c:af:dc:38:86:a4:e6:f0:72:cf:5b:28:9c:98:3e:
                    a9:f0:b8:62:e2:82:c4:64:cf:a2:b0:cb:c8:3f:89:
                    a1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F3:63:56:58:9F:CA:F3:4C:D4:63:FF:F7:B3:24:AF:1F:9C:AF:36
            X509v3 Authority Key Identifier:
                keyid:20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/32509B68EDAE11E595DF6C28C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.92.0/22
                IPv6:
                  2402:8700::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:55:fb:d2:c4:de:d1:5a:bb:5f:1e:33:a8:d7:fa:dd:5b:e4:
         ff:fd:1c:03:ca:b6:f5:e7:96:fc:99:75:24:cc:0d:ef:55:26:
         0a:a1:4a:34:11:f8:0c:f6:34:4c:64:07:d5:e1:59:c7:1f:bd:
         52:a8:ec:c4:63:21:77:e0:ab:0c:64:fd:36:54:3f:97:bb:0a:
         72:b9:ca:e2:bc:d8:ff:78:54:f0:cc:c1:34:35:4c:40:7b:9e:
         33:76:54:53:0b:38:5f:5d:89:f5:45:43:67:de:c2:43:8d:f7:
         c6:bc:7f:aa:40:35:a0:9e:4e:2b:6e:7a:81:fc:58:6c:67:66:
         1a:d2:1e:7b:61:08:19:e8:e8:99:25:4e:2c:5a:3f:5c:7e:ba:
         86:23:6d:66:2b:b7:dd:ee:de:59:b8:f1:7a:e5:81:ad:c8:74:
         c2:5f:ec:40:2b:0c:ea:8d:2b:f8:15:2b:27:98:82:3e:91:ef:
         61:a2:f5:f1:1e:d7:cc:e6:3d:2a:eb:2f:c8:b4:84:82:36:63:
         f8:7e:aa:ce:30:fb:5b:42:8e:57:e1:9d:af:01:89:40:55:3b:
         cd:43:51:4c:75:64:83:7c:64:54:2b:4a:ed:e3:cf:e0:74:ef:
         56:22:04:87:e1:26:bc:61:fe:2e:2f:78:8f:9e:5b:71:c0:5b:
         1d:83:85:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:20:04 2024 by rpki-client on console-fra.rpki-client.org