Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/37E179CC6F0011EEAFD97016C4F9AE02.roa
File:                     37E179CC6F0011EEAFD97016C4F9AE02.roa (raw, json)
Hash identifier:          sf8Mnz1qsHdpKeF1ILemxPeqebYjdCIUvrzVLMZpW/o=
Subject key identifier:   2A:4B:16:E6:28:57:08:DC:CC:2F:CA:FB:E1:AF:5A:BF:DF:7C:F0:F2
Certificate issuer:       /CN=A91A1B9F/serialNumber=F53E56407698C1FAA75D25765513B507652C97AB
Certificate serial:       A9
Authority key identifier: F5:3E:56:40:76:98:C1:FA:A7:5D:25:76:55:13:B5:07:65:2C:97:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/37E179CC6F0011EEAFD97016C4F9AE02.roa
Signing time:             Sat 07 Sep 2024 06:38:29 +0000
ROA not before:           Sat 07 Sep 2024 06:38:29 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     10143
IP address blocks:        203.21.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl
                          rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1B9F/serialNumber=F53E56407698C1FAA75D25765513B507652C97AB
        Validity
            Not Before: Sep  7 06:38:29 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66dbf4e5-e086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5a:76:b0:4b:e7:bb:c2:b5:ab:bd:e1:71:40:
                    36:ef:26:78:c4:b5:df:81:27:84:24:1f:8f:b7:62:
                    27:89:8d:d7:e3:87:c8:98:92:4c:dd:63:51:f0:3e:
                    42:2b:79:ce:b5:2b:be:19:3b:8e:c0:bf:fb:80:69:
                    b2:75:5f:61:92:36:bd:5c:34:7f:2f:3c:84:ea:a9:
                    f2:ad:87:65:70:03:9f:16:e2:49:4c:34:aa:82:d7:
                    5c:84:bb:b1:71:d3:97:5e:a6:eb:be:ff:a5:3b:dd:
                    bd:d4:0a:76:53:b4:65:f4:53:48:00:83:67:d7:86:
                    fe:62:ef:5c:1d:00:78:f9:9b:25:58:dc:02:ad:00:
                    08:a6:59:5a:4c:e1:80:99:1b:71:31:7e:70:70:ec:
                    44:8f:fd:3c:e2:72:7a:b3:92:e4:d1:3b:9c:17:5f:
                    2a:e6:c5:d0:d4:f0:c1:ff:17:47:7e:19:1e:a7:dc:
                    a5:08:2e:0d:a0:16:7d:d8:80:f5:13:fc:0b:c5:f5:
                    4d:86:3c:63:0e:79:6b:f0:d4:13:dc:52:ec:17:f5:
                    3b:0b:b2:38:ec:25:40:7c:da:60:02:c5:ec:51:b5:
                    b5:09:88:af:48:35:3e:23:18:f1:8c:5e:cc:63:16:
                    e1:a0:50:d0:df:13:3c:e7:76:a2:f2:6c:dc:2e:b5:
                    5c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4B:16:E6:28:57:08:DC:CC:2F:CA:FB:E1:AF:5A:BF:DF:7C:F0:F2
            X509v3 Authority Key Identifier:
                keyid:F5:3E:56:40:76:98:C1:FA:A7:5D:25:76:55:13:B5:07:65:2C:97:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/37E179CC6F0011EEAFD97016C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.21.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:7b:35:26:f1:05:2a:d4:30:03:1d:96:6f:e4:8c:1c:7e:e6:
         f4:d4:35:a2:ff:a3:96:c3:b4:42:df:5b:f7:91:8f:c5:26:09:
         b1:07:aa:7c:54:e3:7d:97:76:44:fc:2c:7a:b6:7a:e7:2c:66:
         2e:dd:d7:ae:1e:61:75:b6:96:7b:6e:88:f6:12:a5:1c:4b:48:
         65:1d:64:17:eb:df:ea:40:f6:a6:60:28:c1:82:a9:0e:a6:7d:
         ae:a9:64:2a:09:87:b1:5d:92:0b:bb:cb:02:50:59:4e:c2:25:
         f6:bd:77:96:7c:fb:57:c2:c2:3e:75:36:97:8d:b9:1a:3e:b2:
         21:f4:bf:64:0a:61:c6:2a:10:a1:db:c2:15:03:4a:0b:d8:61:
         5b:43:5f:f0:af:f3:8f:58:69:ab:17:08:04:21:55:1d:a0:42:
         36:5d:5f:88:0f:4e:0b:3b:ac:10:f9:44:a3:ca:ed:18:ec:a4:
         c4:3a:5c:26:50:cc:c9:60:28:88:cc:70:b4:5d:a7:96:46:b8:
         76:d0:f3:81:e5:40:36:c4:60:2a:61:90:3f:d4:fe:a9:84:be:
         f0:81:94:2e:83:6a:6a:18:c7:da:4c:54:71:02:ac:af:c1:30:
         ea:11:0f:4c:fe:84:38:1e:02:b9:81:ce:b0:1c:4c:59:8b:c7:
         aa:8f:71:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:18 2024 by rpki-client on console-ams.rpki-client.org