Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/3A9B909286BE11ED93DB0765C4F9AE02.roa
File:                     3A9B909286BE11ED93DB0765C4F9AE02.roa (raw, json)
Hash identifier:          XahtR2T510aEKb9I/6EITKzZRawtEl9xMR6MDMSwo6w=
Subject key identifier:   EF:6D:5B:77:BA:A6:B6:CE:58:AF:9A:5B:75:7D:13:6D:89:0E:88:70
Certificate issuer:       /CN=A919EF6A/serialNumber=2FB07BF13614AD5A19350AFC75AFB054C86BAFAD
Certificate serial:       014F
Authority key identifier: 2F:B0:7B:F1:36:14:AD:5A:19:35:0A:FC:75:AF:B0:54:C8:6B:AF:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/3A9B909286BE11ED93DB0765C4F9AE02.roa
Signing time:             Thu 03 Oct 2024 03:06:57 +0000
ROA not before:           Thu 03 Oct 2024 03:06:57 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     140985
IP address blocks:        103.154.94.0/24 maxlen: 24
                          103.154.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.crl
                          rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:19:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EF6A/serialNumber=2FB07BF13614AD5A19350AFC75AFB054C86BAFAD
        Validity
            Not Before: Oct  3 03:06:57 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66fe0a51-944c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:70:f5:d1:b8:a5:01:90:4f:1d:5c:8e:bb:fe:
                    60:80:41:a6:d8:bb:a5:eb:e7:7b:35:a9:10:57:c2:
                    48:80:03:88:ea:00:04:c9:10:b6:f2:41:d4:96:a8:
                    c7:1a:2e:f4:92:c7:ab:89:ef:32:db:cb:ea:05:a3:
                    a9:a5:30:51:ff:37:3f:fc:2e:92:25:42:c9:ee:dc:
                    43:fc:ec:f6:c4:07:66:b5:cd:b6:41:12:19:ec:6a:
                    32:a0:03:d7:fe:16:cd:a9:f6:e4:b2:d3:f2:8c:9a:
                    3e:d8:75:a1:46:98:85:f4:f2:52:80:35:f1:2d:3e:
                    c9:4f:eb:4c:4e:a7:0e:14:44:46:1a:28:6e:ab:76:
                    2c:5e:c4:cd:24:fa:cd:42:1c:15:5d:51:f6:ca:74:
                    b3:8a:07:c6:18:48:70:19:a5:e7:d0:7e:72:70:84:
                    6a:fe:cc:da:e1:1f:fd:24:5b:70:0e:8f:88:3d:39:
                    71:62:fc:ee:52:55:fd:72:b9:76:d2:22:57:5e:3b:
                    87:f2:3d:1b:d6:76:bb:86:8d:0c:c2:23:38:bb:50:
                    ee:28:a3:c1:2e:32:d1:94:e5:21:24:24:4f:9f:6a:
                    50:8e:f5:c9:ee:63:b6:01:e9:b3:c4:2f:31:f5:a4:
                    69:4d:56:66:58:27:61:94:f9:a9:1a:e9:1c:a7:8b:
                    16:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6D:5B:77:BA:A6:B6:CE:58:AF:9A:5B:75:7D:13:6D:89:0E:88:70
            X509v3 Authority Key Identifier:
                keyid:2F:B0:7B:F1:36:14:AD:5A:19:35:0A:FC:75:AF:B0:54:C8:6B:AF:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/3A9B909286BE11ED93DB0765C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:24:79:a5:e9:5f:26:fa:5e:d5:b6:f1:18:3c:2c:17:8d:81:
         95:55:2e:c8:b2:da:14:a6:34:e7:01:6c:f7:95:d5:d7:43:84:
         dc:00:d4:aa:23:1c:3f:ab:a6:49:1e:ff:d9:5c:4b:43:65:5e:
         95:16:55:78:b6:b1:cd:c8:eb:b7:d7:7a:02:16:65:d5:56:f3:
         75:e4:9d:f8:0c:2f:53:20:b5:c3:ab:1c:ab:77:55:b9:fe:4c:
         bf:89:32:56:d8:34:4a:d1:c1:0a:aa:98:d9:27:3c:fc:5b:4b:
         75:0a:52:86:00:21:e3:ce:2a:04:6b:49:43:02:1e:5e:44:0f:
         53:e3:96:17:f4:33:ca:e8:aa:6e:3c:95:84:05:9b:40:98:f7:
         68:98:f6:d3:e4:2c:41:cb:16:89:5b:1c:91:2f:5d:02:4c:26:
         dc:e1:a3:a6:1b:87:9a:68:46:a7:bc:3d:7b:24:ce:10:b6:27:
         3b:d4:07:ca:bc:b3:6f:48:b3:2c:6f:a0:78:14:28:8a:31:28:
         de:c0:d2:a1:60:bc:e9:bb:49:bc:e9:67:f4:4e:f9:c1:43:f1:
         a9:ce:f2:5b:40:23:89:a3:58:8e:02:46:17:07:36:89:27:44:
         09:87:33:0d:f2:89:80:ac:9e:58:55:ee:6a:4c:80:c9:07:2a:
         ae:d4:5f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:54 2024 by rpki-client on console-fra.rpki-client.org