Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/9A79B41A633811EE9D258E2EC4F9AE02.roa
File:                     9A79B41A633811EE9D258E2EC4F9AE02.roa (raw, json)
Hash identifier:          EmSV8kHToKhWJ9CR6rbCFvygKszMmadox1nXYJW0Lfc=
Subject key identifier:   85:4E:21:DE:49:6D:B7:D5:C9:59:AD:DE:BF:15:67:AD:10:6C:48:D5
Certificate issuer:       /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Certificate serial:       0168
Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/9A79B41A633811EE9D258E2EC4F9AE02.roa
Signing time:             Sun 29 Sep 2024 03:17:24 +0000
ROA not before:           Sun 29 Sep 2024 03:17:24 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     399471
IP address blocks:        103.71.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl
                          rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:40:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
        Validity
            Not Before: Sep 29 03:17:24 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66f8c6c3-41cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:64:49:79:e7:60:ee:57:94:89:eb:4e:2d:a7:
                    cc:78:49:81:2e:ac:2d:e7:d6:f8:c1:df:87:1f:84:
                    ee:22:a7:71:d3:55:b7:0a:db:13:45:88:75:1f:db:
                    da:c9:94:aa:44:1b:c2:c9:6c:d5:23:31:21:15:85:
                    fc:f9:f0:bd:36:7d:cf:45:6a:70:d3:4d:54:c7:2f:
                    fa:8c:d9:95:33:29:5f:b3:90:2e:cc:8b:8d:82:3a:
                    59:d3:8e:5a:68:bd:7b:4c:23:cf:ee:f9:73:23:87:
                    57:86:26:da:df:6b:7c:82:33:7b:4f:ca:13:38:80:
                    63:0d:e8:b9:5c:9c:06:66:74:34:ef:24:57:9e:8a:
                    f7:7f:5d:85:d4:63:ee:0c:f1:ca:78:42:b0:de:82:
                    bc:3e:d6:fc:61:7b:89:30:45:7f:aa:09:79:71:ff:
                    12:9c:91:bf:d7:22:21:9d:1e:b8:73:1f:e5:20:fe:
                    97:d0:52:30:f9:7d:b8:7f:59:0a:2f:27:2c:e7:71:
                    51:a1:2b:e7:f1:ac:31:17:dc:c4:82:00:53:b4:e0:
                    41:95:13:7d:bf:77:67:ab:03:44:80:24:68:55:61:
                    d9:37:71:57:c8:22:34:74:cb:7d:f5:7d:51:86:92:
                    75:98:c3:5f:84:2e:95:09:84:12:3e:19:55:8a:23:
                    08:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4E:21:DE:49:6D:B7:D5:C9:59:AD:DE:BF:15:67:AD:10:6C:48:D5
            X509v3 Authority Key Identifier:
                keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/9A79B41A633811EE9D258E2EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:45:02:9b:ec:6f:c1:1f:80:ec:63:70:ed:95:44:57:10:dd:
         18:ed:cb:91:0f:c8:e9:b8:a5:77:56:50:f7:13:ab:9e:58:3d:
         a8:1c:92:df:7e:be:9c:c0:32:ef:71:3d:eb:93:3d:00:d4:97:
         21:90:61:95:d7:51:10:bb:e4:62:5e:a5:9e:e8:a9:30:ba:38:
         c2:29:dd:34:c7:2e:fe:e7:44:92:6b:65:73:08:c9:ff:fd:e0:
         39:01:ac:c2:53:f4:16:3f:56:5a:25:3d:56:61:83:22:77:25:
         4d:51:6e:79:05:03:f0:32:1a:03:f0:e6:da:81:f5:78:fc:33:
         8c:8a:66:72:de:e8:d0:e0:e3:9f:04:30:15:0c:91:27:a0:c7:
         9b:49:3f:58:64:27:21:16:b5:14:03:ae:0d:27:21:54:01:01:
         9f:ba:03:8b:7b:c8:48:57:af:17:a9:08:65:93:72:31:b3:2c:
         cc:e6:40:dd:ef:85:a8:02:b6:34:a1:b6:50:77:e7:70:68:3c:
         fe:45:29:4c:2f:d3:28:14:e3:9b:f1:c0:59:7e:49:22:a5:37:
         89:7d:d0:7c:8e:66:97:41:08:ed:ec:87:b4:48:fc:9d:21:5c:
         b1:4c:12:bf:cd:15:64:3a:8f:c4:59:88:5d:17:b3:6d:5d:9b:
         7f:2d:99:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:53 2024 by rpki-client on console-fra.rpki-client.org