Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/083499C00F7711EBBCB67820C4F9AE02.roa
File:                     083499C00F7711EBBCB67820C4F9AE02.roa (raw, json)
Hash identifier:          iH4fPRrd7IgPg8RKrkUWfUFk9KGwtBM2lg9Wq+mePiI=
Subject key identifier:   46:C5:68:16:AA:F3:4C:29:2E:38:47:7E:8B:EC:23:3E:44:B5:0A:31
Certificate issuer:       /CN=A9186F51/serialNumber=D907B059CC8DEE48BCE3E839A1E68817A2D63AD4
Certificate serial:       06FD
Authority key identifier: D9:07:B0:59:CC:8D:EE:48:BC:E3:E8:39:A1:E6:88:17:A2:D6:3A:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/083499C00F7711EBBCB67820C4F9AE02.roa
Signing time:             Wed 28 Aug 2024 22:31:19 +0000
ROA not before:           Wed 28 Aug 2024 22:31:19 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     139315
IP address blocks:        103.141.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.crl
                          rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1789 (0x6fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186F51/serialNumber=D907B059CC8DEE48BCE3E839A1E68817A2D63AD4
        Validity
            Not Before: Aug 28 22:31:19 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66cfa537-c319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6a:f6:a1:23:fd:4d:80:27:37:e5:d2:cb:ff:
                    68:cf:ab:0d:40:10:5a:7c:a9:89:cd:57:bf:5b:85:
                    21:36:ad:87:29:67:49:df:d2:38:26:ae:d1:7b:eb:
                    4e:3f:c8:35:3a:28:57:05:51:a2:3a:63:6b:d6:58:
                    c8:5c:2e:f2:bd:1c:e2:d4:be:d1:7e:d3:4b:07:cd:
                    b5:ab:ef:88:73:3f:3e:38:ee:d1:25:56:f3:4b:6e:
                    f2:0a:93:b9:51:f8:9a:17:3b:02:9e:94:79:e3:95:
                    39:3a:b0:40:a5:66:76:71:f9:ab:3b:9c:87:a8:07:
                    6a:54:69:d6:a7:67:d5:84:77:62:08:d4:c3:a9:88:
                    ab:a4:a4:ad:69:de:c4:ba:a3:00:82:de:cc:49:c9:
                    8a:ad:f1:86:fe:b1:a8:5b:cf:78:5b:e7:c8:56:c1:
                    66:48:1f:0f:06:37:a2:b8:e1:04:b8:51:e2:3f:92:
                    bb:ad:2f:15:96:03:1b:c9:b2:12:c1:04:0b:5e:5b:
                    12:26:56:fe:f8:64:1d:f5:f7:22:d0:f1:df:3f:ee:
                    e3:3d:cf:2d:ff:53:fc:a5:8d:9f:7e:34:e2:de:f7:
                    c8:c1:e2:6b:af:9b:e4:e2:35:65:18:22:26:ff:18:
                    f8:8c:66:c9:6f:94:0c:f6:55:83:e2:37:6a:63:dd:
                    26:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C5:68:16:AA:F3:4C:29:2E:38:47:7E:8B:EC:23:3E:44:B5:0A:31
            X509v3 Authority Key Identifier:
                keyid:D9:07:B0:59:CC:8D:EE:48:BC:E3:E8:39:A1:E6:88:17:A2:D6:3A:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/083499C00F7711EBBCB67820C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:10:fb:2d:36:23:17:46:80:c6:8f:d4:ef:e7:51:24:c1:9a:
         07:5d:6c:ed:2f:9f:be:9d:ab:a7:47:33:55:a9:59:ce:3e:48:
         18:60:06:d4:fd:4b:cb:ee:6f:5a:8a:79:91:1a:f7:20:e0:20:
         71:fb:b8:de:24:e7:bb:9e:43:8c:74:e3:11:f9:75:47:18:44:
         c0:6b:c5:46:df:55:e7:90:9a:86:72:31:42:14:2a:67:40:5b:
         19:34:ba:e3:c5:45:f2:0a:13:69:fb:d4:2a:7d:d8:bf:82:51:
         c6:b1:ca:dc:fe:96:de:83:70:ba:3e:6d:fe:4c:d6:a0:23:3b:
         80:79:bd:1d:16:f2:6e:ee:0b:b6:17:ab:ec:2c:c1:7e:58:29:
         51:cf:2b:f0:42:5f:e6:c7:b9:55:87:5d:da:68:df:1b:f8:40:
         58:a1:cb:87:c8:cf:e7:2d:aa:a0:78:69:c1:36:4e:7b:ee:1e:
         5f:cc:02:02:ff:6d:27:ed:7d:6e:6c:d3:6b:61:8c:fd:5a:60:
         81:68:84:23:3a:ba:39:96:6c:2b:84:c7:4a:49:58:8e:9e:8d:
         d5:59:8d:9f:73:f1:ed:5f:3d:c6:95:2b:3e:58:11:cd:ea:5e:
         41:c8:77:eb:6b:03:fe:11:a4:8c:d2:c1:57:09:1b:5c:85:a5:
         15:4c:c7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:10 2024 by rpki-client on console-fra.rpki-client.org