Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/90AEB6B26C0411EF903ED20BC4F9AE02.roa
File:                     90AEB6B26C0411EF903ED20BC4F9AE02.roa (raw, json)
Hash identifier:          X1M966/mtttlH1mBhSxIPJxCpOTRUbMMjveWzFUoyQk=
Subject key identifier:   FA:00:9A:74:77:63:34:ED:ED:FA:98:14:DE:90:17:8C:2C:7B:4F:08
Certificate issuer:       /CN=A916ED3C/serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A
Certificate serial:       04A3
Authority key identifier: B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/90AEB6B26C0411EF903ED20BC4F9AE02.roa
Signing time:             Thu 03 Oct 2024 00:03:56 +0000
ROA not before:           Thu 03 Oct 2024 00:03:56 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     147070
IP address blocks:        103.172.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl
                          rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1187 (0x4a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ED3C/serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A
        Validity
            Not Before: Oct  3 00:03:56 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66fddf6c-d77b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e2:0b:85:43:d3:49:b0:87:0e:16:94:93:63:
                    06:23:c4:c8:d1:27:00:c2:64:58:30:89:16:fa:81:
                    20:b0:71:9b:46:5e:ad:f0:76:2c:b0:32:47:ad:5c:
                    a4:2e:dd:6a:a1:f6:25:d9:c7:90:b8:e7:3d:09:f4:
                    6f:b7:49:c8:2a:6e:b2:02:98:60:56:e9:15:30:c3:
                    89:08:52:66:31:3b:1f:7c:20:74:e4:59:91:e2:36:
                    7f:74:14:fd:c5:e6:5e:a7:45:5a:56:08:36:57:8a:
                    35:fc:4b:10:03:6b:b9:2c:3e:50:c9:8b:07:68:eb:
                    3e:70:9d:9c:e1:70:a9:1c:c7:f4:b0:a2:8f:3a:d8:
                    75:aa:26:89:07:7d:ee:ae:da:fc:53:29:59:a6:2a:
                    6d:e2:05:98:de:58:10:15:a9:30:16:3c:05:e5:c9:
                    18:b3:e3:f5:3a:20:26:4a:e9:7c:88:20:9d:07:27:
                    f2:42:6f:e5:69:36:c8:65:af:f1:89:09:63:9c:f7:
                    e1:a9:c1:4f:64:67:ed:56:09:e2:ac:d7:23:66:e7:
                    32:59:da:5c:a6:56:9c:14:1b:e3:0e:0e:f3:34:ec:
                    87:ef:18:1d:a0:7c:34:05:09:4b:4e:df:bf:eb:ef:
                    09:bc:ef:7d:88:63:dc:25:be:5a:da:c4:d2:6e:cd:
                    cc:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:00:9A:74:77:63:34:ED:ED:FA:98:14:DE:90:17:8C:2C:7B:4F:08
            X509v3 Authority Key Identifier:
                keyid:B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/90AEB6B26C0411EF903ED20BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:1a:b9:59:11:68:58:64:07:50:43:47:19:fc:31:57:b8:a2:
         1d:84:49:65:1a:d4:d6:8d:15:ca:75:3c:96:e1:36:a9:e0:12:
         68:c7:f7:8f:61:ec:9f:6b:0b:d0:d4:e1:76:5e:0e:4b:a7:2e:
         5a:43:b5:40:ca:74:89:c4:fd:39:cb:9f:c3:95:64:2c:2a:34:
         21:56:90:05:9e:59:14:93:06:da:4d:81:0f:41:45:75:6e:4d:
         a3:48:de:17:2c:ac:1c:f5:59:4b:7f:62:48:1a:87:c0:fc:f9:
         cc:e2:36:35:14:47:74:19:df:6a:c9:cb:9d:8a:83:eb:9e:dc:
         0d:b8:05:1f:98:19:87:42:b6:90:47:74:19:10:c2:62:22:99:
         41:b8:2e:95:ac:a7:5c:13:b2:37:0c:a1:0a:07:02:57:03:36:
         32:09:38:6a:18:73:48:a4:79:b8:2f:e0:78:6c:07:63:95:89:
         a2:79:3d:03:42:5c:71:95:bf:cc:f6:1d:13:21:bc:15:0d:e2:
         04:a9:14:eb:09:d3:24:b6:bf:65:ec:2e:b0:5d:78:4c:fd:6f:
         fd:d1:e2:1d:da:08:cc:5f:5c:a0:f9:3f:4d:0b:3e:4f:4d:76:
         85:fe:7e:4c:d7:47:c4:b9:be:82:4b:7d:da:28:9f:2f:b0:c8:
         5e:84:40:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:35 2024 by rpki-client on console-fra.rpki-client.org