Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/C4E4B26C7F4911EFB795AB1BC4F9AE02.roa
File:                     C4E4B26C7F4911EFB795AB1BC4F9AE02.roa (raw, json)
Hash identifier:          o+7i7IQFtZje0SAveczjIb9oLrkcj364HO7mmgl+Elc=
Subject key identifier:   EA:14:31:62:03:B9:7D:32:87:95:6F:65:EF:FC:CE:89:F8:A1:79:AF
Certificate issuer:       /CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
Certificate serial:       12EA
Authority key identifier: 6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/C4E4B26C7F4911EFB795AB1BC4F9AE02.roa
Signing time:             Mon 30 Sep 2024 16:33:49 +0000
ROA not before:           Mon 30 Sep 2024 16:33:49 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     136030
IP address blocks:        103.120.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl
                          rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4842 (0x12ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
        Validity
            Not Before: Sep 30 16:33:49 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66fad2ec-27ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:26:e6:c9:6e:07:33:10:cf:56:2a:dc:37:0d:
                    ba:e1:d2:b6:63:8a:1d:12:fa:74:b1:41:15:46:db:
                    b2:63:bd:ae:3b:e1:8c:b4:16:32:f1:d1:ee:23:d5:
                    59:9a:ff:38:44:cc:75:a5:15:d7:86:1a:56:7b:ba:
                    a5:94:7e:ed:0b:ea:79:37:03:ab:9a:26:57:5b:88:
                    25:21:86:f6:b1:ed:a8:41:8b:9e:22:d3:0d:43:c6:
                    8d:15:2b:8a:c4:fa:d5:1a:94:09:11:e4:ea:d3:73:
                    50:65:ec:4c:52:50:47:aa:95:9c:2b:06:95:ef:bd:
                    e0:c8:0c:37:cb:20:3c:5a:0d:b2:53:c0:56:7e:f2:
                    da:1a:90:a3:0a:e0:a3:5d:e3:ed:1c:25:d2:0c:cd:
                    16:a2:8c:8f:18:a7:76:bc:ec:eb:10:c0:b2:3f:15:
                    6f:1e:4d:41:aa:0c:ea:29:79:d4:16:39:5b:95:77:
                    22:77:5b:92:6b:88:b0:b3:4a:c0:56:00:be:25:fd:
                    d7:ab:ea:15:4d:aa:8b:c7:67:13:46:66:3d:fe:b3:
                    c5:1e:09:e7:a7:1a:cd:d5:aa:de:0b:fe:26:1f:ac:
                    d7:0f:88:09:dc:d9:12:1c:b7:06:01:a5:fb:dc:0f:
                    8a:1d:17:b0:89:4b:21:00:f7:46:a3:84:4a:58:9d:
                    88:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:14:31:62:03:B9:7D:32:87:95:6F:65:EF:FC:CE:89:F8:A1:79:AF
            X509v3 Authority Key Identifier:
                keyid:6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/C4E4B26C7F4911EFB795AB1BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:6f:cb:9e:c7:39:a6:95:4c:59:df:33:a7:b2:eb:f4:e5:1d:
         5e:68:32:e5:c1:66:b0:16:4b:2a:fa:9b:3e:9b:07:a7:07:e4:
         3e:4a:96:8c:50:7a:ba:23:61:1b:3d:35:0c:d8:eb:9d:b3:94:
         4e:e3:15:9f:cf:1e:54:0e:54:fa:dd:1d:49:02:0f:15:24:05:
         d1:87:41:c3:e4:70:42:f7:d6:88:a0:b2:0b:52:03:f7:2f:50:
         0b:f4:d0:20:30:f6:e1:cd:68:65:4f:52:34:33:e4:a3:a6:6e:
         9a:5f:f9:38:47:4d:43:3a:c9:5e:7c:12:8f:cd:0d:e7:cf:f7:
         5e:e0:3b:84:53:5f:f1:5d:2c:4d:64:d6:ac:46:88:9d:ed:22:
         73:cc:23:2d:b2:0d:c3:3c:59:c5:d5:2d:f1:d7:e7:9a:a4:0a:
         c1:1e:1d:b8:25:a3:e3:78:40:4b:b5:0b:12:c4:6e:ef:d9:3a:
         43:22:cf:f4:72:e6:c3:76:77:57:66:8b:a0:62:2a:26:f1:eb:
         9c:08:1b:7f:ec:c5:a1:a1:47:2f:c4:86:e6:79:d2:26:0f:19:
         64:b0:29:24:55:9e:40:69:cd:91:07:ab:2e:c3:f0:ea:b5:7b:
         33:c9:e6:f0:00:8f:9e:10:58:42:f3:50:64:12:e1:a2:9b:06:
         94:32:61:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:50 2024 by rpki-client on console-fra.rpki-client.org