Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/A8006A74DA9511ED8DC28C24C4F9AE02.roa
File:                     A8006A74DA9511ED8DC28C24C4F9AE02.roa (raw, json)
Hash identifier:          X1glrT5f9w7YDV8Emvf/OQc19tME85EguXsv6m5Ss3s=
Subject key identifier:   60:4E:B5:66:68:99:19:08:95:57:83:79:AD:46:6F:FB:BD:E7:14:2C
Certificate issuer:       /CN=A9163695/serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3
Certificate serial:       7A
Authority key identifier: A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/A8006A74DA9511ED8DC28C24C4F9AE02.roa
Signing time:             Tue 05 Dec 2023 05:36:05 +0000
ROA not before:           Tue 05 Dec 2023 05:36:05 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     1221
IP address blocks:        103.78.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl
                          rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:49:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163695/serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3
        Validity
            Not Before: Dec  5 05:36:05 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=656eb6c5-b01c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:60:c7:77:83:0a:ab:22:33:c4:7b:33:17:fe:
                    2b:67:10:89:3a:d6:36:b9:bc:7b:32:2c:1f:4e:d1:
                    ca:59:fc:f5:91:0c:58:c2:a0:15:8e:ff:f3:fc:5b:
                    a1:3f:d3:b6:30:87:5f:9d:73:58:90:e0:fd:b7:54:
                    6b:69:9e:24:9c:68:4f:8c:23:b9:25:4d:2a:0f:00:
                    07:32:36:af:1c:87:bf:ef:ce:2b:7f:f6:a9:84:05:
                    25:cc:68:a3:d9:c4:48:31:7d:8e:9c:14:26:fc:1a:
                    06:8b:fd:92:68:2a:89:25:dd:d3:23:fb:d9:a5:5b:
                    77:ef:db:e5:a9:90:37:b7:c4:7c:c3:e8:e8:3a:46:
                    4f:ad:a5:d6:b9:e3:89:5c:b1:65:5b:9a:b3:8c:02:
                    51:0a:7d:95:55:a0:1f:69:c1:d7:be:9f:aa:06:8c:
                    7a:c1:6e:87:d2:d3:e5:a9:e9:b2:c6:94:c2:b3:eb:
                    d6:6d:68:d8:19:33:1d:37:87:dc:9b:f3:5f:b0:c6:
                    ae:99:e7:88:78:6f:d1:7c:6e:6a:0c:4c:8f:62:03:
                    f4:77:b1:92:c9:a0:1f:cd:f0:5c:45:b9:cb:67:c2:
                    2b:27:7e:8d:5b:10:5d:6d:09:ad:57:42:01:66:95:
                    e0:68:d2:94:f0:11:0a:08:36:ce:7c:ad:b3:7b:6f:
                    bb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4E:B5:66:68:99:19:08:95:57:83:79:AD:46:6F:FB:BD:E7:14:2C
            X509v3 Authority Key Identifier:
                keyid:A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/A8006A74DA9511ED8DC28C24C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:8e:3c:7e:40:a7:ee:38:49:0c:39:bc:2f:6b:5a:0d:db:05:
         59:8d:58:6e:4f:ee:cf:ae:ba:10:2d:b8:5c:15:82:16:15:3c:
         6a:7b:c1:f5:96:1f:f9:eb:0e:48:23:df:97:73:82:3a:94:3f:
         33:0b:1f:81:34:47:7b:72:61:1d:d4:71:81:3b:e1:f5:f0:c6:
         13:f4:bf:1b:56:b5:88:9e:da:9d:c3:5e:5c:4a:d9:3b:ce:91:
         5a:ff:6e:9e:0d:91:1e:75:e8:6a:03:3a:64:6a:cc:73:2e:00:
         50:d2:c8:e5:03:25:be:10:e0:bc:a9:04:d7:c9:ad:19:d9:78:
         cf:ff:dc:6b:54:61:e6:34:82:cd:89:09:30:d2:e9:36:4c:ee:
         65:e8:66:60:92:d1:de:0c:49:ff:be:30:78:f0:27:08:e7:7b:
         cc:a9:b2:96:ae:c8:e7:68:a4:51:e4:29:c6:d6:46:ff:63:ce:
         95:83:6c:df:6e:8b:f5:40:05:aa:2f:26:3d:e5:2f:b0:c4:8a:
         4d:90:8f:8c:3c:2f:07:7a:70:d3:ac:ca:07:70:33:73:8b:24:
         c5:23:8f:96:8f:20:9c:3f:eb:35:69:7f:d3:e5:96:da:58:ae:
         42:51:30:81:7a:4c:13:a8:95:7f:57:7b:5f:ff:94:b2:6b:24:
         1b:34:a4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:50 2024 by rpki-client on console-fra.rpki-client.org