Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/9A79B41A633811EE9D258E2EC4F9AE02.roa
File:                     9A79B41A633811EE9D258E2EC4F9AE02.roa (raw, json)
Hash identifier:          uOAiYpwbbvL4fZznGzXOIEEK20Lqgdb1amlkQot8pvE=
Subject key identifier:   F6:A9:39:3B:D6:50:A5:DA:26:59:89:D9:E5:96:DB:19:BD:A2:E9:C4
Certificate issuer:       /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Certificate serial:       8F
Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/9A79B41A633811EE9D258E2EC4F9AE02.roa
Signing time:             Thu 05 Oct 2023 04:35:26 +0000
ROA not before:           Thu 05 Oct 2023 04:35:26 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     399471
IP address blocks:        103.71.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl
                          rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 06:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
        Validity
            Not Before: Oct  5 04:35:26 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=651e3d0d-650f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:43:09:c8:f0:24:4c:b6:68:0a:d0:f9:2a:5d:
                    4c:a7:8c:97:a7:ff:3f:78:06:03:7e:3a:5e:4b:11:
                    8a:80:f1:1e:12:f5:af:4b:f2:d0:7a:3c:84:56:67:
                    15:17:7a:ba:08:f6:20:cc:b5:90:68:8e:c2:86:1a:
                    7a:9e:a8:57:2d:5d:68:fc:02:be:0d:2d:ef:d8:4b:
                    3b:d8:fa:d7:e7:ea:0a:d1:1b:d7:c0:ed:0d:2f:38:
                    e1:65:0e:5e:78:e1:b1:49:8d:4e:3e:cc:42:a6:dc:
                    29:cb:ae:42:fc:47:2d:24:a9:cd:97:b9:b7:a0:e4:
                    b7:b7:0f:c6:05:05:0c:84:5e:82:cb:b7:92:c0:53:
                    c8:bc:46:07:05:e7:5f:9b:f2:03:e2:0e:2e:d2:ae:
                    63:83:04:7b:14:04:0b:16:56:49:fd:33:fb:81:9b:
                    fd:35:64:98:25:11:82:71:96:2e:09:73:32:a3:f1:
                    49:34:2d:a2:eb:15:7e:18:44:16:02:5c:7d:00:63:
                    b5:f7:de:15:03:59:cb:ae:7b:55:99:f0:71:8a:d2:
                    a5:05:d6:d8:a0:90:33:ca:66:90:dc:2b:bd:60:b4:
                    59:64:46:f8:10:04:9e:a3:fb:a9:d0:5b:7b:02:7a:
                    15:af:20:2d:cf:79:cc:af:be:fc:31:37:7a:bd:9c:
                    3e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A9:39:3B:D6:50:A5:DA:26:59:89:D9:E5:96:DB:19:BD:A2:E9:C4
            X509v3 Authority Key Identifier:
                keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/9A79B41A633811EE9D258E2EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:94:8f:6b:25:9b:71:1a:a2:89:9d:30:91:f8:50:89:74:54:
         e5:eb:d3:a7:6a:fd:75:4f:3e:bb:d5:b0:5f:20:9f:2e:da:7b:
         4c:c4:f3:5b:49:1e:3b:e2:4d:bd:00:84:e5:96:43:c1:f6:7f:
         c1:eb:0b:c7:06:79:c3:e9:9f:24:12:42:62:64:0b:7c:3e:9e:
         2e:4c:8d:e8:69:b7:f7:e8:cc:b3:d4:f3:43:f3:b7:44:87:b0:
         b9:3b:44:86:6d:e9:ab:a9:7c:0d:e2:b0:6f:a9:bc:9e:81:b8:
         f1:17:24:43:92:e2:2a:b9:d3:92:f9:f9:f9:9f:64:51:ab:db:
         a3:75:88:d8:d5:86:de:f3:bc:ef:06:7a:9f:af:45:d4:56:b8:
         f7:d4:44:22:41:8b:c7:52:19:28:d4:ec:30:37:7e:b4:88:c1:
         67:a0:2c:fa:5f:2f:ba:e0:af:0e:65:7b:91:19:09:12:1a:02:
         d1:87:95:7a:66:ad:15:77:bc:c7:07:c5:5b:0d:7d:06:25:1a:
         ea:94:83:39:ab:72:5e:a5:1b:84:6d:ed:31:db:03:5c:a4:8a:
         3d:22:95:01:76:c7:de:23:fe:cb:f1:94:58:79:b0:05:b5:ab:
         a9:92:96:4d:91:06:31:05:26:fd:ab:c6:8d:b5:0a:07:2d:59:
         1e:dc:c1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 08:38:57 2024 by rpki-client on console-fra.rpki-client.org