Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/2C9AACDAB2FC11ECA5096770C4F9AE02.roa
File:                     2C9AACDAB2FC11ECA5096770C4F9AE02.roa (raw, json)
Hash identifier:          8jqMqpbkGL/NhnTHLijkEMxx4SoTbudObYd/SEM5Ayc=
Subject key identifier:   7F:4A:0A:41:AD:25:D4:3A:2A:DE:96:2D:D6:CB:3F:C9:A3:2B:97:54
Certificate issuer:       /CN=A91EC9AE/serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5
Certificate serial:       024A
Authority key identifier: A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/2C9AACDAB2FC11ECA5096770C4F9AE02.roa
Signing time:             Fri 17 Nov 2023 03:03:37 +0000
ROA not before:           Fri 17 Nov 2023 03:03:37 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     137995
IP address blocks:        103.131.176.0/22 maxlen: 24
                          2403:cec0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl
                          rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 04:44:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC9AE/serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5
        Validity
            Not Before: Nov 17 03:03:37 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=6556d809-4706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d3:61:e8:0e:31:08:3e:ca:7b:66:ca:c2:ef:
                    64:c3:85:dc:21:9b:50:0a:bc:95:51:b8:04:3f:a0:
                    4c:7b:cf:f7:da:b8:d9:fb:cc:28:e1:d3:af:2d:db:
                    ec:d6:b2:f2:c1:68:b6:0d:a3:64:25:2f:c1:a0:90:
                    b8:c2:4b:b4:50:11:9d:46:c0:c1:81:1d:ec:d2:07:
                    8d:4c:15:90:f8:ea:4b:e7:f6:f3:21:a4:37:c7:40:
                    bf:fc:60:1f:d7:49:2d:d8:d2:58:5b:7d:d0:ef:9b:
                    0c:47:fe:ef:35:00:a7:6a:4d:ca:37:eb:a8:73:75:
                    3a:61:87:4f:2e:9a:20:55:e8:c9:91:73:97:59:71:
                    3a:04:59:f2:c5:4c:39:47:dc:89:2c:26:ca:57:e2:
                    90:47:14:9f:14:0b:e1:07:f3:c4:c4:45:81:c4:49:
                    c8:57:35:b6:f4:92:a8:81:06:5a:f2:b3:04:10:f2:
                    4d:97:d4:4e:81:d6:26:1f:95:36:0b:f4:fb:b9:f9:
                    f9:15:6b:65:5f:87:8a:8c:86:35:6d:cc:90:85:83:
                    a5:d4:48:a8:83:8d:c7:89:e7:83:9c:d1:8d:4e:29:
                    2a:28:b6:5f:75:f2:dc:6a:9f:9b:75:48:39:b5:e4:
                    ed:88:18:2d:df:b2:41:61:47:5b:32:80:d9:2a:10:
                    3a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4A:0A:41:AD:25:D4:3A:2A:DE:96:2D:D6:CB:3F:C9:A3:2B:97:54
            X509v3 Authority Key Identifier:
                keyid:A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/2C9AACDAB2FC11ECA5096770C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.176.0/22
                IPv6:
                  2403:cec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:d0:68:d3:b2:5f:a5:9c:51:66:64:9f:bc:12:87:01:9b:23:
         49:73:7d:18:21:d7:6c:93:ef:b8:83:36:62:65:93:ab:0a:f2:
         71:52:92:be:7e:88:72:9e:25:04:71:67:b5:84:2b:38:8b:3b:
         1d:1a:a7:8d:32:55:5d:3a:c3:26:3e:09:12:54:ed:b5:1c:43:
         51:3f:8b:b8:de:48:c9:68:72:ba:a9:80:63:bd:b8:8f:5f:63:
         68:84:b0:20:30:5b:b9:10:30:a2:d0:07:7a:10:db:9f:61:e0:
         63:3c:17:0e:89:c2:cc:cc:fe:a5:79:f1:49:d2:09:4e:cc:a8:
         8f:89:84:fd:c0:66:19:56:25:64:f0:03:fb:55:03:f6:26:7f:
         6a:c5:44:cf:03:65:e8:76:ef:a2:3e:0f:34:a0:b2:76:f0:4c:
         12:91:a1:2f:7a:bf:0d:e6:d8:1f:cd:64:39:b2:85:a2:82:78:
         cf:52:41:6e:25:04:f6:98:83:4e:c7:24:8c:af:81:33:f4:2a:
         f1:1f:b9:e1:96:9a:23:7c:25:a8:cd:24:63:0d:67:a8:7f:53:
         30:85:c7:ff:d0:85:8c:b7:9a:90:55:bb:e9:8b:86:76:30:ab:
         64:c3:61:3e:3c:14:ca:6d:92:9f:9b:1f:c5:1e:95:11:92:e3:
         e9:e2:24:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 05:48:45 2024 by rpki-client on console-fra.rpki-client.org