Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/5277F6368D2411EC816B4C70C4F9AE02.roa
File:                     5277F6368D2411EC816B4C70C4F9AE02.roa (raw, json)
Hash identifier:          FTimyw/5VCeKevG6KYvQHGRaEHwwVHJJgIXnVyCHGyw=
Subject key identifier:   33:40:81:4F:AD:9E:64:2F:4C:3B:AC:61:5F:04:58:63:6E:58:31:DB
Certificate issuer:       /CN=A9119A40/serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4
Certificate serial:       0298
Authority key identifier: BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/5277F6368D2411EC816B4C70C4F9AE02.roa
Signing time:             Tue 26 Sep 2023 18:56:50 +0000
ROA not before:           Tue 26 Sep 2023 18:56:50 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     63996
IP address blocks:        103.129.238.0/24 maxlen: 24
                          103.129.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl
                          rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 19:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 664 (0x298)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119A40/serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4
        Validity
            Not Before: Sep 26 18:56:50 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=65132971-ca33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5e:f2:35:d4:7a:ba:4e:e2:68:21:70:c3:d3:
                    03:96:c8:8c:37:8f:4d:8c:14:e2:88:ee:9c:51:51:
                    04:9f:55:ee:44:82:5f:80:89:d8:e1:fa:2a:05:2a:
                    23:25:27:5b:62:39:32:3c:ab:3d:2f:8a:6b:7a:78:
                    ee:41:d5:8c:25:25:4a:0f:a0:27:99:25:d1:b7:29:
                    17:7a:b1:70:1f:67:eb:26:af:28:ba:3d:ec:61:d2:
                    c7:ae:78:ba:b2:ff:c1:14:84:db:93:83:2a:55:68:
                    e7:b2:d1:f6:ba:93:6e:17:fc:42:bb:01:6c:0d:d0:
                    80:30:9e:c7:f6:0e:2b:92:08:6b:6a:5d:3c:2c:22:
                    2c:2e:50:dc:4b:06:da:7c:80:64:a0:89:ca:ed:3b:
                    c4:fd:4f:c3:36:33:20:16:76:5d:ff:23:66:5b:d0:
                    a1:10:e8:21:9e:be:33:89:46:17:2c:cd:5d:1d:82:
                    48:1d:a5:6c:8b:67:d3:e4:4d:2b:c7:84:da:5c:48:
                    87:b0:b4:97:89:69:b8:a6:ce:a7:73:26:d7:41:3d:
                    5d:bb:34:c8:bd:c2:0f:ee:c1:cd:c2:63:d6:4b:39:
                    7d:45:e6:2b:f2:a3:6e:37:dd:81:35:5d:28:bf:39:
                    15:f1:3f:3d:5c:48:ca:68:a7:c5:6e:a2:2e:35:c6:
                    d7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:40:81:4F:AD:9E:64:2F:4C:3B:AC:61:5F:04:58:63:6E:58:31:DB
            X509v3 Authority Key Identifier:
                keyid:BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/5277F6368D2411EC816B4C70C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:50:f1:c5:b4:c8:59:d8:e5:57:4f:13:93:a1:92:d1:9d:76:
         24:5b:2b:e7:84:af:33:7d:33:e2:9d:02:c0:58:de:46:69:8a:
         4c:a1:5b:61:41:b4:f0:55:01:81:f1:21:b9:5d:8d:f1:e0:61:
         38:37:00:69:2e:94:1b:6d:ee:04:ea:89:61:43:ed:66:65:4e:
         87:06:0a:7b:55:6b:be:2d:00:66:bd:51:e5:11:13:64:a6:1a:
         48:70:c5:79:c5:70:1f:65:ab:29:aa:e4:b8:02:63:4a:d6:13:
         09:35:e5:79:74:e3:87:ac:ba:1b:87:d8:af:d5:84:68:27:95:
         37:bf:91:04:d7:95:8b:db:ff:30:bd:e7:68:6f:2c:e5:0f:d6:
         0b:64:8a:0f:a3:4e:ac:a2:84:af:7c:7d:18:0d:b8:ee:dc:f0:
         83:87:a9:d6:8b:96:5d:a1:b4:23:7d:40:ad:8e:43:c1:eb:16:
         e2:07:9a:b3:f2:26:7d:c3:4f:6d:c8:6e:69:01:2e:94:49:91:
         ea:8a:2d:55:2b:24:6b:33:77:57:09:95:23:71:14:24:93:1c:
         af:4a:18:14:6b:87:d0:44:45:03:e0:60:74:6b:79:f5:a5:2a:
         aa:0b:d4:1d:3c:68:d1:e4:b2:77:f3:fe:83:c7:c7:d9:a4:a7:
         c1:72:37:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 21:48:27 2024 by rpki-client on console-ams.rpki-client.org