Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/9950A304A55011EFA7FFA969C4F9AE02.roa
File:                     9950A304A55011EFA7FFA969C4F9AE02.roa (raw, json)
Hash identifier:          7w0AxBMbVoZTjF5sqspQh7z8UimR5szml+niNPnLbps=
Subject key identifier:   46:8A:A7:0F:45:83:82:3B:C9:C3:0E:24:3B:1F:BF:84:8F:6A:C8:F8
Certificate issuer:       /CN=A9154840/serialNumber=9CF71478BF59B008B1B542FA93A7C10EFB7F4D62
Certificate serial:       08
Authority key identifier: 9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/9950A304A55011EFA7FFA969C4F9AE02.roa
Signing time:             Mon 18 Nov 2024 01:58:26 +0000
ROA not before:           Mon 18 Nov 2024 01:58:26 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     9266
IP address blocks:        43.250.24.0/22 maxlen: 22
                          103.41.156.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl
                          rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154840/serialNumber=9CF71478BF59B008B1B542FA93A7C10EFB7F4D62
        Validity
            Not Before: Nov 18 01:58:26 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=673a9f42-6948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:58:7a:04:41:7b:c2:ea:8a:bc:fe:69:3a:2d:
                    61:3e:a3:58:86:0c:1d:5c:d7:62:f7:51:6e:4e:43:
                    cb:b9:e9:f6:f5:a8:a3:02:a0:e0:1d:63:e1:a7:b0:
                    2c:53:31:03:85:6c:cd:fb:8c:92:7f:ab:32:8a:1f:
                    86:4a:7e:f8:ed:45:91:88:ca:a3:d8:5f:dd:5d:0c:
                    52:10:9f:86:b4:54:ab:47:d8:c5:e3:a6:55:fd:94:
                    24:82:37:44:0d:52:29:2a:55:73:5b:c9:65:84:eb:
                    11:08:23:d4:6a:6a:ef:79:0e:82:3d:13:40:d5:9c:
                    71:8c:20:0d:b8:b3:ae:61:41:53:dc:50:eb:81:2e:
                    9a:c5:b1:6b:d8:64:28:1f:ed:cd:94:03:bd:3e:f9:
                    10:8c:a7:bb:bf:75:d3:98:db:72:b9:8b:6c:83:11:
                    f5:79:5e:3f:45:88:b9:1a:21:ee:e9:e0:9d:cc:3f:
                    d5:5f:9e:af:16:42:01:6d:28:bc:7c:71:c1:c4:83:
                    6a:fa:da:be:87:0e:66:54:35:9b:a2:39:85:ff:e3:
                    74:c3:41:95:27:40:e3:63:1c:3c:29:9d:04:82:f5:
                    76:3e:4f:82:2a:5e:b4:85:22:71:20:b6:7f:68:b0:
                    b3:4d:dd:a8:98:5b:d6:38:74:43:0e:de:63:7e:7c:
                    c7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8A:A7:0F:45:83:82:3B:C9:C3:0E:24:3B:1F:BF:84:8F:6A:C8:F8
            X509v3 Authority Key Identifier:
                keyid:9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/9950A304A55011EFA7FFA969C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.250.24.0/22
                  103.41.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:14:82:1a:64:4b:e2:51:c7:96:11:74:44:89:79:a3:35:0d:
         32:7a:03:53:43:ff:de:81:0e:32:5f:23:5a:88:62:5e:ad:a0:
         84:45:c5:e4:76:2e:1d:12:17:8b:db:a7:8f:06:9a:17:30:f4:
         46:57:16:60:c1:e5:34:25:80:d8:17:e4:5f:c5:86:7b:51:6c:
         aa:c1:8e:7e:e2:e5:71:0b:a0:7e:7d:05:cd:a5:ae:00:8b:d0:
         8e:e0:75:66:f1:ad:8c:7d:cf:16:e5:28:72:4c:0d:6a:48:5f:
         28:e8:61:cf:67:5d:8c:7e:f3:4d:ab:28:fb:0e:fa:90:87:57:
         f1:1c:99:4c:19:f7:c5:8e:f4:4d:3a:bb:0e:c7:ae:45:0d:5b:
         47:98:30:cd:b9:65:a5:8e:5a:5c:5c:99:94:6d:f2:45:31:c4:
         fa:43:0c:c4:f5:f2:9f:82:66:b2:eb:4f:ba:0f:44:fa:26:f8:
         0b:8c:d6:1c:c6:be:1c:38:ec:79:ba:3f:d6:d5:f2:27:40:0b:
         9b:b8:c5:2d:1b:c0:64:2e:07:00:4e:ad:18:33:01:57:47:03:
         a7:4a:73:d4:06:c2:5a:38:85:2b:0e:40:b3:a3:73:4a:20:b1:
         d6:29:83:8e:12:02:19:7b:af:44:42:91:5d:54:6e:ac:19:d0:
         e2:6f:fb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:31:30 2024 by rpki-client on console-fra.rpki-client.org