Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/ED31D84EC81D11EBA4C0E321C4F9AE02.roa
File:                     ED31D84EC81D11EBA4C0E321C4F9AE02.roa (raw, json)
Hash identifier:          jhR9QDlVyj8BS8+j4iE/uh7zPevk6Wzm1xP+iEk0Yvg=
Subject key identifier:   80:CB:99:BD:CE:40:3D:DF:13:7C:F5:58:32:06:22:31:40:D1:71:D4
Certificate issuer:       /CN=A9169903/serialNumber=C437D58F123A6AE057C608E216BB6BFD6584476A
Certificate serial:       04E2
Authority key identifier: C4:37:D5:8F:12:3A:6A:E0:57:C6:08:E2:16:BB:6B:FD:65:84:47:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/ED31D84EC81D11EBA4C0E321C4F9AE02.roa
Signing time:             Fri 05 Apr 2024 01:34:56 +0000
ROA not before:           Fri 05 Apr 2024 01:34:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     134693
IP address blocks:        103.164.162.0/23 maxlen: 24
                          2407:3d40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.crl
                          rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1250 (0x4e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169903/serialNumber=C437D58F123A6AE057C608E216BB6BFD6584476A
        Validity
            Not Before: Apr  5 01:34:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=660f5540-b49f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:66:ac:3f:d9:3f:24:ea:a3:a6:5c:97:82:b6:
                    54:2e:65:3f:0e:9a:90:bf:62:97:37:eb:9a:07:12:
                    0d:9e:29:8c:9e:fe:4c:f0:24:73:a4:47:34:82:d0:
                    70:74:71:be:33:fa:b0:50:f9:2d:fd:7b:e4:b0:7a:
                    90:da:e2:35:2c:02:5f:68:07:97:71:cc:ca:06:ad:
                    63:24:b7:c8:99:3f:09:53:a8:2d:b3:d6:b3:ac:6c:
                    e6:c7:35:ae:b9:0b:07:46:9a:d7:f9:39:a8:54:fc:
                    9a:bf:93:ee:eb:72:f3:ef:85:28:55:bd:97:e3:67:
                    5d:3c:46:85:04:00:ae:8a:aa:93:0d:d8:05:8b:ea:
                    be:ff:f1:64:3d:f7:20:03:05:be:fa:d5:a5:c2:e6:
                    1b:90:3e:90:76:a4:48:6f:1a:bc:94:34:03:3c:93:
                    5e:2b:57:21:66:a4:88:d8:79:f9:37:fc:50:59:62:
                    a4:46:b7:20:77:91:9f:13:5b:5d:f6:2e:9b:43:10:
                    97:e4:88:00:6f:ac:de:e6:7a:91:e4:fe:e0:c4:5d:
                    5f:50:77:34:93:19:0e:a5:3f:1f:70:6e:5d:b3:66:
                    e4:f2:56:77:5e:77:4c:39:15:92:51:0d:25:6c:a3:
                    a2:82:97:29:c8:f8:0f:3f:8a:82:f2:b6:1e:c1:db:
                    ec:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CB:99:BD:CE:40:3D:DF:13:7C:F5:58:32:06:22:31:40:D1:71:D4
            X509v3 Authority Key Identifier:
                keyid:C4:37:D5:8F:12:3A:6A:E0:57:C6:08:E2:16:BB:6B:FD:65:84:47:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/ED31D84EC81D11EBA4C0E321C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.162.0/23
                IPv6:
                  2407:3d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:0a:33:60:46:cc:8b:ec:9d:dd:46:26:17:b3:fe:a3:d7:46:
         6b:25:aa:15:33:3b:dc:05:7f:ef:a6:46:7e:ce:d1:8a:f6:d4:
         a2:47:c7:17:2e:f6:54:c7:f0:36:7a:03:1b:60:72:44:9f:82:
         d4:e3:c9:6f:f5:59:2d:ba:70:4f:89:d5:f4:23:6b:9e:65:7d:
         86:82:93:0a:a9:0d:4a:36:17:56:bb:82:70:ba:ed:81:89:17:
         8d:27:f7:56:4c:cb:59:25:fc:0e:84:d5:68:1b:dd:da:56:78:
         84:2b:68:83:37:b4:ba:5f:34:d5:e5:19:14:53:db:52:e7:37:
         7e:38:79:ee:58:9e:f9:c0:47:79:14:32:3d:49:93:4b:50:53:
         2d:86:06:ef:e5:b4:1c:47:f2:0a:c8:f7:bc:d7:76:50:e8:5d:
         98:a1:8a:db:2a:1d:e6:35:87:f0:07:04:ed:0d:83:bb:c7:1e:
         fe:2a:60:2e:df:f3:4d:69:41:31:c5:1e:94:ef:ee:2f:18:14:
         a9:c3:77:f3:1e:c7:17:76:67:7e:33:ad:4a:28:9a:a4:c7:73:
         31:de:ba:6b:08:7a:58:fe:36:41:d7:c8:cf:b8:a4:62:7a:8b:
         88:b1:ba:aa:28:18:40:e7:eb:6f:41:d3:a2:f3:d2:83:4e:b0:
         20:f1:dc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:27 2024 by rpki-client on console-fra.rpki-client.org