Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/C569659C02DF11EBB54FAE29C4F9AE02.roa
File:                     C569659C02DF11EBB54FAE29C4F9AE02.roa (raw, json)
Hash identifier:          ksZCQUpgjigR3J12hgj4ozKRCV6ZGeFDC2+Ja2MoW5k=
Subject key identifier:   3C:B9:77:34:E5:6D:36:46:D6:75:8C:87:B1:95:C6:78:FA:84:4B:3E
Certificate issuer:       /CN=A917A717/serialNumber=495EFD3CD43E3FEEEBD22AD1DDEA79F35ED478F5
Certificate serial:       12E5
Authority key identifier: 49:5E:FD:3C:D4:3E:3F:EE:EB:D2:2A:D1:DD:EA:79:F3:5E:D4:78:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SV79PNQ-P-7r0irR3ep5817UePU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/C569659C02DF11EBB54FAE29C4F9AE02.roa
Signing time:             Fri 16 Aug 2024 17:34:56 +0000
ROA not before:           Fri 16 Aug 2024 17:34:56 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     136894
IP address blocks:        103.97.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.crl
                          rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SV79PNQ-P-7r0irR3ep5817UePU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4837 (0x12e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A717/serialNumber=495EFD3CD43E3FEEEBD22AD1DDEA79F35ED478F5
        Validity
            Not Before: Aug 16 17:34:56 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66bf8dc0-914a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cb:85:b1:41:fe:97:d2:fe:31:8b:45:e2:f0:
                    5f:a7:10:89:d2:46:d5:6d:3d:00:35:6f:ff:0b:51:
                    28:a5:97:5c:b0:7b:c9:95:11:fc:46:c4:f2:34:4c:
                    e3:91:6e:a5:c2:7e:a8:9f:22:96:9d:80:18:9a:e2:
                    30:e5:5e:52:f8:e6:3b:4f:59:0a:f6:21:e6:50:d7:
                    79:a5:44:ed:13:75:06:a4:ca:d3:b0:e8:4e:66:a9:
                    a3:b9:e5:c5:33:6b:2a:0e:d1:7c:5b:f1:0f:be:2e:
                    d3:b9:ea:54:97:a7:17:0b:5f:01:90:d6:fb:b6:1b:
                    20:6f:44:c9:d5:48:8f:4b:f3:f6:2d:65:66:87:1b:
                    a6:c6:07:be:8c:a7:86:f5:5d:41:82:e5:4e:48:09:
                    d0:63:81:1f:0b:8b:74:9c:b7:95:03:34:fb:71:3c:
                    55:2c:2a:17:17:ec:2b:3a:59:53:35:7c:78:f1:ad:
                    48:dd:c1:81:fc:be:eb:2e:48:4f:bd:79:ce:72:3d:
                    e5:8a:fc:23:b4:a6:9a:1e:88:a4:c6:48:4f:1e:c4:
                    49:65:fa:8f:56:9b:56:05:07:86:07:e7:04:cf:c0:
                    0e:4c:8a:c8:41:ad:44:4f:10:09:8c:c1:6e:9c:4c:
                    21:2b:2b:85:7e:00:f6:7b:36:e9:98:78:6f:9c:39:
                    ad:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B9:77:34:E5:6D:36:46:D6:75:8C:87:B1:95:C6:78:FA:84:4B:3E
            X509v3 Authority Key Identifier:
                keyid:49:5E:FD:3C:D4:3E:3F:EE:EB:D2:2A:D1:DD:EA:79:F3:5E:D4:78:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/SV79PNQ-P-7r0irR3ep5817UePU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SV79PNQ-P-7r0irR3ep5817UePU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A717/631102009C6211E8A8B06E32C4F9AE02/C569659C02DF11EBB54FAE29C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:e8:77:c4:36:5f:91:74:86:24:b1:5f:da:46:c7:44:61:df:
         eb:63:0f:12:b8:89:88:bf:b4:a6:f2:ec:79:0f:d1:34:9a:fb:
         32:9c:a8:5a:45:2f:2f:8c:94:8b:e4:c5:67:8d:49:d7:33:ba:
         6e:ea:5a:ba:3b:69:3e:be:c4:4e:6e:04:c8:c4:54:c5:0d:26:
         e9:ea:3d:22:66:73:ba:90:c6:63:2d:50:5a:c0:50:2f:92:ca:
         63:d0:76:61:49:34:24:4e:7d:56:7f:7f:fe:82:bf:80:b9:43:
         cb:46:90:33:fb:f9:06:63:37:89:5c:e1:ac:9e:d6:63:b4:d2:
         03:09:d9:8a:b2:f6:c7:24:f8:fe:15:93:5a:9c:95:dc:89:2c:
         f9:7c:fd:a6:d4:d2:3d:e4:b1:02:a7:9c:98:e1:ed:5d:7e:5c:
         9a:ed:22:cd:fd:42:ff:bc:c1:39:c6:e0:d8:c7:bc:54:aa:cc:
         bf:13:cc:27:ab:f2:4f:f3:4d:9e:1f:c6:8c:10:89:06:99:b2:
         ea:83:ce:6b:76:b6:a3:60:74:63:11:7d:ca:28:51:91:15:37:
         90:ca:37:45:50:bf:17:0b:77:f5:5e:b2:86:70:24:da:1d:85:
         e8:f0:a9:14:0f:9b:68:f4:db:25:76:bb:b5:45:05:7d:c5:6a:
         3f:7d:e6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:05 2024 by rpki-client on console-ams.rpki-client.org