Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/E93EEAFCB0F811E595E0F761C4F9AE02.roa
File:                     E93EEAFCB0F811E595E0F761C4F9AE02.roa (raw, json)
Hash identifier:          XONO8AScATR8p+dgN33QWapfnhUPZs7VGzeHh0uX4pc=
Subject key identifier:   2D:CA:E1:71:A5:1C:8E:D2:79:90:E6:72:93:4E:A9:FC:FE:B1:EC:74
Certificate issuer:       /CN=A9154657/serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72
Certificate serial:       3466
Authority key identifier: 20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/E93EEAFCB0F811E595E0F761C4F9AE02.roa
Signing time:             Sat 16 Nov 2024 14:40:13 +0000
ROA not before:           Sat 16 Nov 2024 14:40:13 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     9482
IP address blocks:        103.5.92.0/22 maxlen: 22
                          2402:8700::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl
                          rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13414 (0x3466)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154657/serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72
        Validity
            Not Before: Nov 16 14:40:13 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6738aecc-ed58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:14:0d:46:b8:03:c2:f4:4f:97:fe:f9:2a:31:
                    08:ad:1e:8a:13:81:93:b9:d4:ec:b8:c0:f2:ee:3a:
                    05:41:27:4e:d7:f3:73:99:3a:d4:54:cb:f1:68:35:
                    66:5e:9f:44:14:33:f6:98:1c:a9:ee:cf:a2:9f:3a:
                    5d:8d:ce:c3:96:21:86:ae:7e:b6:08:4e:e1:37:ed:
                    0d:33:8a:76:c5:14:ed:f3:75:dc:96:d0:50:28:1c:
                    57:38:9a:d3:6f:69:cb:be:9f:ab:b2:e9:71:e2:b8:
                    88:26:81:4e:c6:70:eb:7d:e8:38:1e:2a:36:1f:3f:
                    19:b0:d8:f7:fa:c5:91:ae:13:51:f5:0c:b0:b3:67:
                    f9:ec:57:42:39:80:21:79:e8:57:ef:0f:85:8f:88:
                    18:0b:77:eb:bd:b0:58:6f:08:20:e1:ed:08:c6:83:
                    be:9e:5a:5d:44:1e:34:c0:90:8e:ab:ff:f8:cd:0d:
                    63:be:2c:75:0c:52:e0:cd:99:73:d9:dc:a8:b7:df:
                    1c:20:ab:24:56:4a:c0:e6:47:25:84:64:65:a6:33:
                    e3:61:00:bb:8c:42:fc:dc:0f:f6:cd:bd:f1:00:ac:
                    60:04:f3:97:cd:f7:14:fb:6a:e0:4a:26:15:30:e0:
                    f3:a4:ae:06:45:93:58:b0:93:2a:75:c4:d3:c4:fa:
                    3b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CA:E1:71:A5:1C:8E:D2:79:90:E6:72:93:4E:A9:FC:FE:B1:EC:74
            X509v3 Authority Key Identifier:
                keyid:20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/E93EEAFCB0F811E595E0F761C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.92.0/22
                IPv6:
                  2402:8700::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:92:04:91:4c:e6:8c:d9:d4:ed:77:72:e4:a3:2f:6c:f5:17:
         cc:23:fe:de:d1:54:bb:b8:4e:b1:26:74:76:30:d5:11:f7:88:
         70:0c:bc:db:83:4b:38:7e:2a:d7:ed:af:85:18:b1:47:c3:f8:
         27:69:0d:21:42:33:bc:de:a9:9f:4b:84:21:59:98:b1:73:47:
         1b:bd:89:2c:b1:89:09:ed:a5:d4:10:b6:ce:05:e3:27:6f:49:
         d0:0d:4d:81:b7:0e:be:b6:9a:71:bd:6c:5c:6b:a4:40:08:2d:
         4d:ca:00:a8:d4:cb:a1:97:97:0e:61:61:4f:51:2e:9d:ac:ad:
         98:f4:18:07:12:fd:5b:4d:80:6d:4c:ab:7e:59:ed:f7:cf:49:
         cd:ad:aa:3a:e8:1c:3d:04:53:57:85:98:a5:83:88:80:67:89:
         c7:b1:d2:1d:b3:c1:ae:6c:9d:43:ec:0c:5b:7e:81:1d:74:f5:
         07:83:a5:ed:1b:87:7b:2d:e4:fb:b8:83:ed:89:0b:b3:76:f9:
         82:cf:1d:44:aa:b7:81:4c:eb:8e:80:e0:f7:23:1c:16:9e:9e:
         f9:54:b2:98:c0:46:77:be:e5:d3:7a:ff:d2:6f:97:0f:00:41:
         02:1a:81:f2:38:47:2f:19:db:0b:4d:e5:8c:3c:c1:ae:81:29:
         21:3c:0f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:31:14 2024 by rpki-client on console-ams.rpki-client.org