Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/A045C92CB46611EEAFEE8758C4F9AE02.roa
File:                     A045C92CB46611EEAFEE8758C4F9AE02.roa (raw, json)
Hash identifier:          Dzc4D2svD4HZgKffca9S+m/lbPDWtOze7CoWdAxSe58=
Subject key identifier:   6D:7A:C9:BB:4E:C7:78:04:BC:3B:2A:53:6E:21:02:AA:24:5B:23:0F
Certificate issuer:       /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Certificate serial:       60
Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/A045C92CB46611EEAFEE8758C4F9AE02.roa
Signing time:             Tue 16 Jan 2024 11:58:56 +0000
ROA not before:           Tue 16 Jan 2024 11:58:56 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     9009
IP address blocks:        103.115.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
                          rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 03:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
        Validity
            Not Before: Jan 16 11:58:56 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=65a66f80-260f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c0:72:9a:67:74:d2:ee:99:2a:58:1f:3d:b7:
                    fc:c4:5b:2f:6d:4b:29:24:19:d8:0c:08:03:c1:90:
                    d1:1d:63:d6:b7:02:a2:a7:db:63:c9:5f:ca:af:2d:
                    24:32:5d:1a:1c:aa:0f:a3:9c:8c:1e:a2:66:55:1a:
                    d9:28:55:ce:8e:34:3a:2e:ec:32:0d:a0:2e:12:34:
                    fb:24:d5:86:12:82:52:2a:66:39:60:7d:98:ea:24:
                    7a:02:78:57:8c:3a:ec:1f:f3:86:4e:2e:8c:3d:3a:
                    97:c2:60:ca:73:90:61:ee:86:9f:01:9b:95:a7:2e:
                    41:07:5e:1d:3a:b9:c6:e1:5b:5f:49:21:45:d0:44:
                    af:88:41:e4:c3:0d:5d:ee:2b:37:c0:38:75:73:f9:
                    56:3b:55:5a:7d:57:ea:0a:61:13:bc:62:56:ef:64:
                    b6:cd:7e:43:4a:e1:44:c5:10:f2:dd:a8:0f:39:da:
                    c0:11:1a:e0:47:31:b3:66:6e:ba:24:ca:fe:fc:68:
                    5b:05:95:be:c3:54:87:cc:0c:14:39:04:58:61:6f:
                    5f:6f:37:32:af:57:2c:ba:b7:91:ce:57:3c:18:cb:
                    0f:2f:43:1a:1f:3d:29:48:c7:f5:f0:ea:69:4a:b2:
                    ea:e1:35:9d:2f:d9:66:73:9c:d6:47:79:b1:8a:74:
                    a9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7A:C9:BB:4E:C7:78:04:BC:3B:2A:53:6E:21:02:AA:24:5B:23:0F
            X509v3 Authority Key Identifier:
                keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/A045C92CB46611EEAFEE8758C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:ee:51:2c:38:cf:6a:58:e2:5b:a7:47:e4:0e:7f:8d:f3:68:
         98:e6:1a:b9:1f:6d:d8:75:76:50:c0:b3:48:19:b1:51:e3:9b:
         45:f1:15:ac:f1:ac:dd:cc:10:32:71:13:e2:1f:73:01:5a:42:
         a5:ff:bd:ed:f2:94:bd:94:06:4f:0f:c8:48:6e:ed:b9:9a:db:
         7d:6a:b9:e5:81:26:b8:64:98:da:82:4f:f8:83:f6:6c:0b:72:
         d1:85:44:27:8d:5e:db:b6:2c:3a:2a:2c:1e:c1:71:f0:e6:23:
         1a:40:ef:17:9a:b3:e1:f1:e3:b0:a5:2d:f2:a0:f9:7e:39:eb:
         13:30:d6:95:b7:5f:1c:4e:48:cc:4c:8d:b3:aa:08:7e:24:12:
         7a:51:1c:08:74:ba:3a:7f:cf:8a:b3:b4:cc:68:6f:bb:eb:91:
         ec:e7:dd:90:08:0c:3a:77:0f:32:a6:9a:8a:f7:3b:7b:19:af:
         97:20:74:26:c0:12:fa:f1:c7:a2:1f:f9:72:d7:92:95:a9:f3:
         95:53:91:78:bb:ba:e6:9c:a2:c1:0b:50:04:1e:2f:15:19:1d:
         d0:c3:fb:bb:63:13:5a:37:11:46:23:95:94:e6:ef:db:9e:0d:
         85:56:18:a7:ea:48:d1:26:de:ce:98:43:96:c4:77:2f:a1:2f:
         1c:b6:b0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:23 2024 by rpki-client on console-ams.rpki-client.org