Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/09FB57587C7411EFB8CF8A27C4F9AE02.roa
File:                     09FB57587C7411EFB8CF8A27C4F9AE02.roa (raw, json)
Hash identifier:          EfqdiAfFoa0ZonYMj3ssTP4hOkGO4+MLqEbn+7K2Sak=
Subject key identifier:   75:AB:1E:5E:3F:06:D0:58:97:53:92:CC:5B:E3:50:8D:46:EC:95:A8
Certificate issuer:       /CN=A91B0380/serialNumber=5BD324A69BD26EDDADF5129CD18F77A1D80523B6
Certificate serial:       03
Authority key identifier: 5B:D3:24:A6:9B:D2:6E:DD:AD:F5:12:9C:D1:8F:77:A1:D8:05:23:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9MkppvSbt2t9RKc0Y93odgFI7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/09FB57587C7411EFB8CF8A27C4F9AE02.roa
Signing time:             Fri 27 Sep 2024 01:58:50 +0000
ROA not before:           Fri 27 Sep 2024 01:58:50 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     18361
IP address blocks:        103.239.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9MkppvSbt2t9RKc0Y93odgFI7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0380/serialNumber=5BD324A69BD26EDDADF5129CD18F77A1D80523B6
        Validity
            Not Before: Sep 27 01:58:50 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66f61159-57dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:24:6e:5d:ee:eb:d4:69:1c:cb:ca:8f:72:ef:
                    66:ed:dd:47:2c:5e:5d:8c:8d:f1:ef:1f:68:3a:de:
                    1f:f4:87:93:73:b5:5c:f5:45:82:50:55:47:db:2c:
                    9a:41:ab:08:6b:47:3b:d4:dc:74:b8:07:a8:a2:65:
                    2c:db:2e:88:4d:64:4a:85:5f:ff:28:1e:12:91:c0:
                    ee:21:c4:05:96:5e:d2:e3:0c:fd:0a:cb:ab:3e:d0:
                    cb:04:86:59:0f:98:68:1a:86:ad:97:dc:5f:0e:3a:
                    0f:a9:26:f9:d5:ce:26:5d:97:89:1b:de:05:c8:5b:
                    e8:10:fc:b5:a7:44:43:38:8a:c8:28:ca:0d:75:53:
                    0e:d3:4d:e5:df:e6:ef:48:10:e9:db:c4:b5:66:bb:
                    55:98:0a:ea:36:c6:31:a4:64:69:ff:2d:07:37:f0:
                    e6:a9:87:52:ba:76:c9:5c:9d:25:cc:aa:9d:a9:1d:
                    5e:42:c4:30:43:22:f7:cd:02:ae:36:f3:c2:c4:c0:
                    a7:9e:48:6c:64:d9:b2:ee:52:98:da:86:41:2f:b2:
                    e8:64:a3:c5:96:b3:00:03:10:3e:9e:69:04:2d:fd:
                    ce:30:dc:db:b9:a5:07:fb:1e:0a:4a:39:4e:35:2d:
                    f2:3f:88:e5:a1:12:5e:4a:d5:76:d0:4e:6e:65:fa:
                    ae:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AB:1E:5E:3F:06:D0:58:97:53:92:CC:5B:E3:50:8D:46:EC:95:A8
            X509v3 Authority Key Identifier:
                keyid:5B:D3:24:A6:9B:D2:6E:DD:AD:F5:12:9C:D1:8F:77:A1:D8:05:23:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9MkppvSbt2t9RKc0Y93odgFI7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/09FB57587C7411EFB8CF8A27C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:b9:e1:8d:dc:45:bd:cf:40:17:7f:7d:5d:36:ae:f8:1a:d0:
         df:e6:77:55:56:7c:36:9c:d6:64:6e:62:a6:dc:c7:82:c2:41:
         90:ab:44:65:07:b7:27:18:ef:92:61:74:9e:75:2f:0e:8b:88:
         46:e2:34:32:32:4d:95:a0:66:36:e3:24:2b:72:bc:fa:9b:14:
         b4:55:b4:a8:78:07:1e:d9:e5:0c:b0:82:e0:67:10:d0:c9:e7:
         61:2e:6b:bb:17:cb:9b:b0:df:9e:87:19:b0:6b:2c:f4:6f:4a:
         fa:4d:63:cc:e2:12:40:2e:e1:fd:28:76:77:0a:da:31:dc:df:
         81:c8:78:6f:6d:61:a1:64:33:56:3c:7c:16:eb:ed:66:3a:c2:
         b0:8c:26:0e:70:db:92:84:94:34:4d:16:37:5b:6f:31:41:a9:
         dc:03:6f:b0:2b:ca:c9:52:11:a8:0e:5c:f6:45:ba:13:d4:65:
         3a:82:a1:7a:39:f9:88:41:1e:d4:89:1c:90:c4:86:24:9e:91:
         c6:16:36:9a:ec:ba:8d:4f:05:eb:f9:c1:f8:0d:c2:7d:a2:b8:
         69:9d:ec:d7:48:e8:e6:57:8f:0c:b0:40:fd:23:da:5e:9c:37:
         da:4c:76:e1:5c:c6:e0:c3:74:43:d8:f2:f9:04:2d:80:e1:c4:
         a9:e2:75:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:45:04 2024 by rpki-client on console-ams.rpki-client.org