Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/C9DBA6A666A211EE8C285556C4F9AE02.roa
File:                     C9DBA6A666A211EE8C285556C4F9AE02.roa (raw, json)
Hash identifier:          WJE7wO/JlHEj6B+7R5O9bqCNsEyoT0slfV6zrQrgUH8=
Subject key identifier:   18:05:BE:5F:9A:FA:81:FB:B2:EC:30:93:B9:5B:D4:FC:B1:C8:EA:73
Certificate issuer:       /CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Certificate serial:       55
Authority key identifier: A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/C9DBA6A666A211EE8C285556C4F9AE02.roa
Signing time:             Mon 09 Oct 2023 12:53:05 +0000
ROA not before:           Mon 09 Oct 2023 12:53:05 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     55720
IP address blocks:        103.92.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl
                          rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 06:23:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
        Validity
            Not Before: Oct  9 12:53:05 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=6523f7b1-7953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1e:61:53:7e:e2:2b:0f:1e:94:4d:68:b3:c1:
                    a9:fa:ee:3f:4b:7f:14:55:3b:a7:92:f4:f5:e6:3e:
                    5b:af:9b:f3:86:15:b6:02:95:09:56:63:84:fc:6d:
                    de:e5:53:ce:ce:ff:f0:89:04:d5:04:90:f0:30:41:
                    e4:84:b3:26:e0:0f:24:c1:b0:2a:62:7c:2a:8e:da:
                    d5:a2:23:e2:87:8a:a9:e1:ac:32:d6:08:bb:36:99:
                    82:5b:07:e2:5c:e5:e0:9e:f5:26:6b:d3:e0:a9:4c:
                    66:70:65:4c:35:4d:64:1d:36:29:5b:a9:7e:57:75:
                    37:36:a8:86:44:c5:25:71:a9:48:8c:a8:9a:1f:e8:
                    12:05:fc:23:7d:14:80:09:b0:db:db:4c:f7:ab:53:
                    cf:63:67:31:c0:b4:40:6f:7a:83:da:71:e5:e5:84:
                    9f:40:a4:44:ea:87:ee:84:3e:29:06:3f:d3:ee:ba:
                    1e:f6:63:9a:3f:15:d3:23:64:7d:54:ef:8c:cb:20:
                    65:4c:71:8d:7f:17:e4:91:0a:ea:ad:6f:bb:74:99:
                    90:73:ea:8e:df:ad:b2:23:c4:b8:ff:89:1a:87:99:
                    da:0d:d2:b0:0d:ce:45:ab:dd:86:f7:63:1e:9c:19:
                    42:37:f2:ce:71:f5:ec:fa:72:68:9e:d1:a3:15:e2:
                    9a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:05:BE:5F:9A:FA:81:FB:B2:EC:30:93:B9:5B:D4:FC:B1:C8:EA:73
            X509v3 Authority Key Identifier:
                keyid:A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/C9DBA6A666A211EE8C285556C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:03:8a:43:a9:9f:41:1e:9a:43:8d:7e:30:c1:ef:d5:f5:e6:
         77:7b:91:20:77:70:00:8f:ad:bb:1a:0e:d3:ab:30:f9:f6:94:
         1a:47:03:92:19:78:39:06:e1:60:c3:e5:79:ce:f5:99:ee:77:
         cb:c5:b1:92:18:f1:3d:1e:79:64:41:fc:44:42:b3:b3:b3:89:
         5c:56:4f:f0:b7:ab:02:c9:da:5f:98:92:d7:06:de:7f:00:55:
         3f:b6:1b:46:60:46:6c:14:3e:ce:c1:48:e3:d4:ab:f2:bc:68:
         f6:2d:d8:fb:88:75:67:99:7e:78:7a:d5:b5:0d:da:3d:cf:4b:
         0b:80:7d:c7:96:06:37:b5:37:f8:1e:67:5a:6d:9b:1d:07:55:
         ca:5e:c6:50:c0:79:43:b0:a5:f7:a0:b4:a0:c3:d4:cc:98:47:
         e5:8e:dc:7d:01:ae:22:49:ca:7d:a0:72:86:53:6b:d3:34:cf:
         bf:36:cf:92:ac:1a:d4:dc:fe:22:65:df:93:a3:35:f5:f3:b7:
         4e:be:06:83:82:80:8b:0e:aa:21:e7:df:b6:4a:04:f8:00:7e:
         96:05:70:33:17:54:b0:5c:fa:21:44:76:73:57:74:0b:b0:60:
         c9:9e:4f:f0:52:83:ad:b9:cb:17:90:58:51:b0:e9:5d:96:ea:
         97:a4:37:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 08:01:40 2024 by rpki-client on console-ams.rpki-client.org