Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/0F785ED8171F11EB9D7AD884C4F9AE02.roa
File:                     0F785ED8171F11EB9D7AD884C4F9AE02.roa (raw, json)
Hash identifier:          ZpjOcQRNDlH5qRGo4JGz7s8WdXPnuqrQVNeiUcwkU1I=
Subject key identifier:   17:81:A6:C9:98:AA:CF:CB:B4:7A:58:F8:AD:56:CA:AB:CD:ED:EF:DB
Certificate issuer:       /CN=A9190B12/serialNumber=9874E6D61A60D8844C301D81F3377CBF34F0D8BF
Certificate serial:       06BC
Authority key identifier: 98:74:E6:D6:1A:60:D8:84:4C:30:1D:81:F3:37:7C:BF:34:F0:D8:BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHTm1hpg2IRMMB2B8zd8vzTw2L8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/0F785ED8171F11EB9D7AD884C4F9AE02.roa
Signing time:             Sat 01 Jun 2024 00:42:29 +0000
ROA not before:           Sat 01 Jun 2024 00:42:29 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     134155
IP address blocks:        103.55.217.0/24 maxlen: 24
                          103.100.44.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/mHTm1hpg2IRMMB2B8zd8vzTw2L8.crl
                          rsync://rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/mHTm1hpg2IRMMB2B8zd8vzTw2L8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHTm1hpg2IRMMB2B8zd8vzTw2L8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1724 (0x6bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190B12/serialNumber=9874E6D61A60D8844C301D81F3377CBF34F0D8BF
        Validity
            Not Before: Jun  1 00:42:29 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=665a6e74-594d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:47:d7:b1:d6:8d:9a:06:fe:58:18:e9:68:40:
                    03:d3:81:5e:3e:04:28:b8:22:64:0e:72:a6:94:75:
                    68:6b:34:7c:67:73:d9:7e:42:3d:62:2e:aa:6a:08:
                    47:14:6d:04:55:45:66:34:8e:69:18:38:a6:0c:f6:
                    82:6a:32:ec:d5:1d:2f:6e:c3:05:80:9a:37:d6:ea:
                    27:db:4d:d4:77:04:5e:3e:d2:e6:29:a8:c2:ac:92:
                    87:e1:da:6f:0b:e6:23:47:10:59:c8:51:f3:4f:63:
                    88:bd:b1:51:48:c7:41:95:54:a5:b3:ad:bb:53:30:
                    81:78:20:9f:61:c9:33:b3:77:bb:96:19:86:45:44:
                    8a:1f:62:08:a6:86:5d:d4:e2:7f:dc:00:6b:3a:01:
                    3e:66:28:c9:6e:ec:a1:3c:28:87:37:5e:9d:2d:41:
                    ec:86:b5:9f:fb:ed:74:00:56:87:d0:96:43:ad:ea:
                    cf:a3:5a:7b:77:19:15:46:ec:e2:25:a5:d3:5f:df:
                    a9:7f:2f:eb:7a:a1:f5:4d:5e:14:f6:2b:e0:9f:81:
                    d8:2e:4d:e2:9f:41:c0:7e:76:f5:dd:86:8e:83:97:
                    4b:f7:25:fe:83:b2:28:bd:08:ae:08:51:25:c8:f1:
                    cd:0e:78:95:63:82:36:e2:76:75:87:09:22:8f:a4:
                    c2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:81:A6:C9:98:AA:CF:CB:B4:7A:58:F8:AD:56:CA:AB:CD:ED:EF:DB
            X509v3 Authority Key Identifier:
                keyid:98:74:E6:D6:1A:60:D8:84:4C:30:1D:81:F3:37:7C:BF:34:F0:D8:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/mHTm1hpg2IRMMB2B8zd8vzTw2L8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHTm1hpg2IRMMB2B8zd8vzTw2L8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/0F785ED8171F11EB9D7AD884C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.217.0/24
                  103.100.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:d4:f1:98:00:b6:a4:bd:9a:41:d1:74:b3:ea:6c:69:21:b5:
         b1:da:08:4c:c0:a1:4c:4f:cb:81:fc:3d:6a:67:5b:48:3c:c4:
         95:66:ce:92:06:7b:d7:89:f4:13:6c:6a:a6:55:86:a8:ec:2f:
         39:4b:e8:3b:0d:79:be:34:57:c9:9e:30:e7:47:04:88:ee:82:
         fb:76:ca:e8:54:ea:85:d8:81:a7:48:a4:db:d3:31:24:56:42:
         c9:3b:b4:64:31:ab:ef:4b:6d:3f:c2:86:0f:19:dd:2f:4f:44:
         b4:a6:05:ee:a7:56:35:f1:92:c9:b6:c0:ad:ba:d9:7a:31:12:
         ec:1a:50:a1:5b:2e:2c:8b:40:88:a9:9d:0a:6d:c2:79:2f:5f:
         3c:8c:27:ca:ee:da:4a:2b:04:91:eb:a4:22:50:f9:b4:b2:77:
         66:24:43:aa:eb:12:8b:ca:0d:ad:09:91:f0:1d:61:3f:4b:b7:
         a4:c9:07:3b:80:e4:ea:fb:6f:34:13:ff:fc:ea:5d:82:76:21:
         46:7b:61:c9:87:92:84:7b:9d:79:5b:37:8b:d4:5d:23:25:02:
         fb:85:94:2a:a0:e1:54:22:3c:e5:a0:5c:19:b4:c6:05:84:8b:
         49:98:f9:8b:ed:de:f2:33:fc:41:b3:a2:8f:d5:97:88:f0:43:
         a9:b8:8d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:10 2024 by rpki-client on console-fra.rpki-client.org