Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/A8A940C6429811EDBB392C35C4F9AE02.roa
File:                     A8A940C6429811EDBB392C35C4F9AE02.roa (raw, json)
Hash identifier:          us+hXVbT4+IxuDXf1t8Zy0IqvnZFy688N7EVgUtl4FA=
Subject key identifier:   39:8F:35:C5:E9:23:8F:9D:62:2E:52:C8:7B:DC:B6:FC:38:12:3E:43
Certificate issuer:       /CN=A9194715/serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67
Certificate serial:       016C
Authority key identifier: BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/A8A940C6429811EDBB392C35C4F9AE02.roa
Signing time:             Sat 07 Sep 2024 04:16:51 +0000
ROA not before:           Sat 07 Sep 2024 04:16:51 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     136797
IP address blocks:        103.96.110.0/24 maxlen: 24
                          103.141.226.0/24 maxlen: 24
                          2001:df1:d900::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl
                          rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:52:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194715/serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67
        Validity
            Not Before: Sep  7 04:16:51 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66dbd3b3-89b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fe:93:24:c9:19:34:8a:93:0c:68:34:81:2b:
                    8d:2b:30:bb:81:e1:92:32:4e:09:10:f6:6e:54:af:
                    f9:52:72:00:cb:12:ac:68:0c:0f:8d:f2:2f:dc:b3:
                    28:ee:c1:0d:6a:e0:6f:3f:b4:6c:fc:65:0b:00:85:
                    11:ae:7e:ed:73:d3:ad:7e:be:bb:62:9c:9b:4e:89:
                    57:b8:06:37:84:06:22:7a:dc:3b:4c:d0:7c:23:4d:
                    c2:10:b5:09:c7:38:60:b8:a6:6b:ff:7b:e9:19:a7:
                    92:4f:f7:0c:63:89:29:da:89:56:bf:5b:32:f5:ad:
                    f9:19:2a:f5:47:bd:48:3f:bc:16:14:9b:0d:1b:d0:
                    60:6b:3f:99:15:f1:85:c6:6a:ed:72:57:0f:0b:ac:
                    8e:44:6b:cd:0e:da:f2:a7:eb:5d:29:15:e9:6e:54:
                    33:9b:51:7e:38:a4:96:50:88:10:b9:3f:09:98:bf:
                    7a:0b:55:12:39:2b:52:bc:6d:f0:07:e4:b0:b9:fd:
                    ed:41:ad:4d:38:91:e4:18:b2:ce:48:0b:19:5b:c7:
                    48:dd:17:d1:e7:90:cc:b8:a5:6e:49:1b:9f:80:76:
                    11:99:fe:71:4b:7d:f3:c7:bf:8f:38:cc:c9:c7:15:
                    87:35:e1:8a:a8:c8:8e:07:ac:f4:ca:ee:84:f2:c5:
                    77:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8F:35:C5:E9:23:8F:9D:62:2E:52:C8:7B:DC:B6:FC:38:12:3E:43
            X509v3 Authority Key Identifier:
                keyid:BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/A8A940C6429811EDBB392C35C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.110.0/24
                  103.141.226.0/24
                IPv6:
                  2001:df1:d900::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:e4:eb:c6:ce:8e:e6:75:6c:44:df:7b:58:3b:d4:e2:f9:a5:
         56:86:30:c1:69:17:2e:51:84:3b:2c:4f:15:24:aa:4b:13:35:
         fa:74:ee:ee:1b:9a:fa:31:ef:f3:39:65:b2:bc:41:67:c4:cb:
         2c:e9:93:9e:35:f9:89:57:03:11:7d:59:7a:4c:2b:08:a5:3b:
         1b:33:0d:e5:4a:03:c0:fc:60:ac:35:e8:e7:51:93:5f:37:ea:
         66:91:fd:35:b9:82:a9:52:44:c1:a3:db:8c:8b:49:33:28:a0:
         a3:2e:6e:3a:ff:6e:4a:dd:56:d4:2f:2a:c4:9c:37:6a:25:7a:
         0c:6f:71:ae:9c:ea:0d:e7:5f:6c:ec:c1:dc:e6:d7:a9:42:67:
         fb:6d:62:f5:58:a0:99:68:fc:22:45:df:5b:e7:5a:22:3d:39:
         ae:9c:42:aa:e1:e5:bb:3c:64:ce:02:b2:c5:99:e4:dd:ad:03:
         cf:6d:e9:8d:1c:8d:29:77:7e:c0:f0:ef:8e:13:92:50:bb:15:
         e5:3a:7f:89:40:bf:22:a3:41:b1:7d:b1:90:ee:d0:d4:1e:50:
         40:43:53:25:bf:3f:d8:20:57:de:36:e4:f1:d7:04:50:d7:05:
         4f:31:0d:49:d9:da:24:f0:e3:de:50:17:b3:5c:cd:03:95:6a:
         ed:d8:f4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:45 2024 by rpki-client on console-ams.rpki-client.org