Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/CBCD14C8471B11EEABCACF68C4F9AE02.roa
File:                     CBCD14C8471B11EEABCACF68C4F9AE02.roa (raw, json)
Hash identifier:          UQXQ0zih1R4yEWTzxa6D1G/eVXXNcEV+g1pp2duHg7A=
Subject key identifier:   FE:0A:FA:DB:BE:0D:A1:93:81:00:73:DB:A7:B1:9C:A5:A9:C6:4B:97
Certificate issuer:       /CN=A9117373/serialNumber=61841D1EDABF9FF0F6018C611017AF719627A24D
Certificate serial:       04BE
Authority key identifier: 61:84:1D:1E:DA:BF:9F:F0:F6:01:8C:61:10:17:AF:71:96:27:A2:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYQdHtq_n_D2AYxhEBevcZYnok0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/CBCD14C8471B11EEABCACF68C4F9AE02.roa
Signing time:             Tue 12 Nov 2024 23:32:47 +0000
ROA not before:           Tue 12 Nov 2024 23:32:47 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     54339
IP address blocks:        103.101.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.crl
                          rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYQdHtq_n_D2AYxhEBevcZYnok0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1214 (0x4be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117373/serialNumber=61841D1EDABF9FF0F6018C611017AF719627A24D
        Validity
            Not Before: Nov 12 23:32:47 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6733e59e-c390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7f:c1:aa:4e:46:39:a4:90:4f:54:26:07:30:
                    28:7b:46:f0:6c:83:09:5c:45:e1:ca:97:b2:86:83:
                    50:60:a1:3f:a0:de:fa:8f:76:80:ff:e1:1c:1b:88:
                    ce:01:3b:64:fa:5a:39:50:af:22:f1:2a:08:b0:a9:
                    dd:9f:e8:ce:93:6c:10:f6:b8:d3:e9:18:28:05:6b:
                    a0:e3:04:5f:47:71:45:63:db:ae:97:05:7a:b7:a6:
                    af:09:09:e8:4e:17:37:9c:00:5a:35:78:ae:cd:ec:
                    96:b0:69:6a:80:b2:c2:51:6a:25:a8:3a:8b:66:a5:
                    1d:2c:75:ee:89:1f:7c:0e:3a:7e:95:b9:f6:5d:53:
                    56:36:d4:34:85:a5:b6:56:9f:fc:4e:9d:1b:f7:10:
                    15:b7:3f:e2:e0:fa:31:c5:86:b5:19:c4:c0:c1:9b:
                    02:36:2d:92:0d:ab:a2:3b:48:3c:e3:b2:bf:52:50:
                    a8:d4:09:13:ca:04:67:96:b8:1f:54:11:50:6e:a9:
                    2b:ff:94:6c:8c:d2:67:81:80:16:7b:e2:68:62:2c:
                    83:a9:3e:d6:4f:df:2c:52:81:77:8d:44:6f:34:2b:
                    04:a6:e6:91:eb:26:fd:47:2a:a4:6b:5f:58:16:40:
                    59:5e:e9:ee:4f:ef:dd:3f:59:34:91:a5:aa:e6:ce:
                    1a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:0A:FA:DB:BE:0D:A1:93:81:00:73:DB:A7:B1:9C:A5:A9:C6:4B:97
            X509v3 Authority Key Identifier:
                keyid:61:84:1D:1E:DA:BF:9F:F0:F6:01:8C:61:10:17:AF:71:96:27:A2:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYQdHtq_n_D2AYxhEBevcZYnok0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/CBCD14C8471B11EEABCACF68C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:44:31:9a:4d:14:46:7d:98:97:95:ad:63:e6:f9:e3:4a:36:
         e5:61:36:d7:04:24:5c:0b:79:a3:5e:f5:ea:e5:7b:81:32:1d:
         1d:48:51:7c:2d:c1:e3:52:bc:49:95:57:52:73:67:5b:88:74:
         5d:e9:25:ed:53:cb:64:64:19:9d:4a:28:00:e6:aa:44:ea:3c:
         51:a9:65:d0:0c:59:bd:d5:b2:ef:e5:f1:86:0f:98:6c:83:5d:
         59:87:45:4d:27:7f:2c:83:b7:6f:e9:4c:22:86:5d:9c:30:61:
         ff:fa:ea:c3:d0:3d:89:34:ab:93:d5:8e:a1:9a:48:dd:36:4d:
         d7:09:c2:d7:3a:92:bd:7d:97:a8:17:24:82:53:a4:44:9a:1c:
         b8:d6:0a:35:ca:4b:f2:7a:97:31:07:ef:30:e6:6c:58:1f:8b:
         e7:a2:16:22:cf:ae:b6:07:7b:b7:13:dd:6d:2f:c6:82:92:c0:
         d9:c9:7f:9a:52:6a:96:43:c1:a1:dd:15:b5:b0:0b:6c:2a:c5:
         1c:70:de:71:3f:66:42:f0:7c:ff:dd:87:1d:e1:92:1c:20:5e:
         f0:3d:58:c3:a9:d6:82:bb:d6:d0:82:2c:55:f3:5a:df:ce:ac:
         24:32:b3:cb:bc:c3:75:22:50:17:b4:c1:92:3a:b1:0e:70:09:
         bb:04:34:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:55 2024 by rpki-client on console-ams.rpki-client.org