Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917418A/0E090968E4A911EC93E50751C4F9AE02/FCA92EAAE4AD11EC839CED77C4F9AE02.roa
File:                     FCA92EAAE4AD11EC839CED77C4F9AE02.roa (raw, json)
Hash identifier:          wW4HCqhcoyo/dCvusJDIhbj+A+f9Rh4hUlMCJe2c3dY=
Subject key identifier:   0E:D5:FD:3C:2D:D6:21:7D:5F:60:11:AE:B6:A3:6E:CB:E5:0E:EE:82
Certificate issuer:       /CN=A917418A/serialNumber=18727237F6B7D165252BF9BDB386B6E1EAE05574
Certificate serial:       0251
Authority key identifier: 18:72:72:37:F6:B7:D1:65:25:2B:F9:BD:B3:86:B6:E1:EA:E0:55:74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHJyN_a30WUlK_m9s4a24ergVXQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917418A/0E090968E4A911EC93E50751C4F9AE02/FCA92EAAE4AD11EC839CED77C4F9AE02.roa
Signing time:             Thu 15 Aug 2024 02:44:38 +0000
ROA not before:           Thu 15 Aug 2024 02:44:38 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     136621
IP address blocks:        103.94.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917418A/0E090968E4A911EC93E50751C4F9AE02/GHJyN_a30WUlK_m9s4a24ergVXQ.crl
                          rsync://rpki.apnic.net/member_repository/A917418A/0E090968E4A911EC93E50751C4F9AE02/GHJyN_a30WUlK_m9s4a24ergVXQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHJyN_a30WUlK_m9s4a24ergVXQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 593 (0x251)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917418A/serialNumber=18727237F6B7D165252BF9BDB386B6E1EAE05574
        Validity
            Not Before: Aug 15 02:44:38 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66bd6b95-b2c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:95:3e:ae:51:a7:31:29:8c:bf:c0:10:38:d4:
                    34:1b:3f:4e:93:00:13:e5:49:13:3a:de:92:e5:9b:
                    0a:6f:79:09:b1:f9:fb:77:b2:d0:ac:97:45:39:c8:
                    26:11:38:20:a5:b6:1f:9b:cc:30:93:9f:cb:ff:6e:
                    86:f2:50:d3:74:c5:71:a3:73:43:44:e0:cf:2d:dd:
                    95:8c:08:80:f9:c3:a8:fe:0d:54:d2:9e:1f:62:8f:
                    1d:f1:51:a8:11:8f:6d:bf:00:12:7b:d3:3d:82:70:
                    a8:64:2b:ad:ac:fb:ae:82:33:16:72:6d:f7:57:15:
                    d4:06:87:5a:2d:e4:1d:5d:9f:06:b0:42:c7:10:c7:
                    ad:ce:6e:8a:fb:8a:de:cc:32:7c:4c:9b:9d:70:f4:
                    bf:9c:42:67:29:1c:f3:83:24:a1:a1:c9:40:21:a5:
                    85:ee:2b:4f:17:8d:43:56:d2:45:2a:c7:89:84:af:
                    48:3e:8a:28:3f:bf:40:41:ff:90:a7:50:3e:b0:66:
                    19:31:11:ba:f2:fb:ce:21:39:1b:4f:39:db:0d:92:
                    e8:9e:e4:6e:cc:b8:d7:79:be:58:27:4a:3e:7d:c4:
                    6e:98:f0:b7:0f:19:a4:91:7e:bd:2c:71:1f:c9:10:
                    77:91:c9:3d:4b:75:c3:59:85:79:0a:f2:cc:2a:4c:
                    66:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D5:FD:3C:2D:D6:21:7D:5F:60:11:AE:B6:A3:6E:CB:E5:0E:EE:82
            X509v3 Authority Key Identifier:
                keyid:18:72:72:37:F6:B7:D1:65:25:2B:F9:BD:B3:86:B6:E1:EA:E0:55:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917418A/0E090968E4A911EC93E50751C4F9AE02/GHJyN_a30WUlK_m9s4a24ergVXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHJyN_a30WUlK_m9s4a24ergVXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917418A/0E090968E4A911EC93E50751C4F9AE02/FCA92EAAE4AD11EC839CED77C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:67:cf:a5:04:10:08:7a:41:39:35:cf:33:bc:eb:46:9c:61:
         85:c4:be:b6:4a:34:0f:3d:16:a5:a8:c4:d3:53:e5:76:b6:07:
         39:a5:bb:7f:6e:dd:35:f3:d9:c9:ac:a5:31:82:5a:04:87:18:
         05:c0:c1:57:c3:35:5c:a6:40:ab:d0:ea:d2:20:3c:e4:53:29:
         92:b7:45:7c:79:db:f9:cd:ce:f4:ed:f1:7e:81:b5:84:b6:60:
         08:82:b5:b9:1d:d9:74:99:60:7f:39:9a:5b:6f:e8:e1:15:7c:
         81:18:c0:be:65:80:c6:56:d2:bb:15:e3:47:91:7e:8d:c8:e4:
         79:81:10:a7:3f:05:ec:1d:94:08:77:d1:dc:d3:e0:f6:8b:ab:
         29:4e:2b:98:04:2b:7e:da:be:12:ab:05:13:fc:b4:f3:92:b2:
         24:aa:f6:5b:7e:f5:77:d9:f4:0d:c5:fa:8f:e4:3e:bc:72:07:
         02:10:2c:39:e9:2e:9d:40:ef:8d:b4:8b:db:0c:df:d5:eb:96:
         e5:2d:27:b3:15:55:d2:37:fb:d3:ab:f8:6e:34:ae:e8:18:da:
         e4:c8:d6:bc:4b:a0:7b:5d:60:dc:23:1a:08:1a:d2:99:86:e4:
         0e:43:f8:40:73:59:8d:73:56:f0:de:c9:98:65:06:6b:b1:11:
         e7:ba:4f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:39 2024 by rpki-client on console-fra.rpki-client.org