Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/197CE9C2C0C111EE84A55128C4F9AE02.roa
File:                     197CE9C2C0C111EE84A55128C4F9AE02.roa (raw, json)
Hash identifier:          vtgz51LBnXCjasbYYNdcwEbODswLBdHKmcuBHw2i27Q=
Subject key identifier:   8E:39:D8:F8:A3:C1:99:3A:C3:4C:7D:BC:40:0A:6D:AA:81:1F:79:DB
Certificate issuer:       /CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5
Certificate serial:       01A6
Authority key identifier: 76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/197CE9C2C0C111EE84A55128C4F9AE02.roa
Signing time:             Tue 19 Nov 2024 02:05:43 +0000
ROA not before:           Tue 19 Nov 2024 02:05:43 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     140077
IP address blocks:        103.24.16.0/24 maxlen: 24
                          103.24.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl
                          rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Dec 2024 02:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 422 (0x1a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5
        Validity
            Not Before: Nov 19 02:05:43 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=673bf277-7a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0c:d0:01:fc:d7:96:9f:3e:85:1a:8f:fa:7e:
                    c6:6f:f6:e6:35:61:32:cb:d1:1f:db:50:f9:de:55:
                    1d:1d:d4:2c:69:53:cd:1f:5e:34:38:90:57:f4:f1:
                    85:f0:8b:4b:f4:20:83:89:75:56:8a:ae:fd:72:ad:
                    ed:5a:30:0e:34:cc:07:e3:a3:04:a3:8b:32:e6:6b:
                    7a:5a:c2:91:4c:98:93:cb:e6:8f:7f:e6:9e:75:3a:
                    2b:53:0c:08:a0:bc:78:ea:bd:9a:ce:66:5f:75:b1:
                    c4:2a:44:d1:1b:02:fb:9c:51:db:57:89:ce:ae:b8:
                    96:7a:f6:10:ae:08:d1:9f:b7:78:09:e4:33:ed:bb:
                    1a:7e:ec:10:ec:7f:f7:7a:02:e6:97:29:d3:f9:53:
                    d3:f7:b9:5b:a2:22:8a:d4:75:bc:a4:2b:45:b1:aa:
                    95:5e:a5:bf:76:1b:85:b5:6a:9a:0f:d9:db:c7:59:
                    49:bd:3f:b6:09:0b:2c:c4:99:f6:a8:3c:58:e5:90:
                    be:46:d2:ab:5c:68:ea:20:21:a1:3a:30:44:78:b0:
                    a1:69:22:2c:2a:2b:08:2a:8a:2f:ea:c8:b2:2b:ec:
                    ef:e7:a6:2e:ec:29:69:ca:1c:91:97:02:81:e0:f9:
                    09:89:80:6d:22:5d:da:2d:33:9c:f1:d4:8b:0e:17:
                    d1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:39:D8:F8:A3:C1:99:3A:C3:4C:7D:BC:40:0A:6D:AA:81:1F:79:DB
            X509v3 Authority Key Identifier:
                keyid:76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/197CE9C2C0C111EE84A55128C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:42:a2:4b:33:6e:a1:10:17:85:53:03:aa:4d:2d:e2:9e:b5:
         3b:c8:8d:3b:c0:1a:93:a5:42:b7:88:4f:82:5c:45:c5:35:b5:
         3d:d4:d2:5e:ba:2c:5e:9f:8a:a0:8b:da:a3:9e:08:4c:49:65:
         c4:d1:31:7d:ae:8f:5b:f6:54:b7:13:84:6f:43:34:14:a4:0b:
         ce:61:61:6e:4f:d9:35:71:d0:5d:6b:11:a2:f4:f4:3e:48:4a:
         81:f0:69:f3:a5:f8:dc:49:cb:71:22:5f:9f:a3:fb:a7:f4:c0:
         ba:7a:c9:d6:63:4f:2d:1d:60:30:b5:06:ee:37:6a:0d:61:cc:
         f1:48:7d:47:50:4c:60:52:35:45:35:07:67:36:1e:4e:8f:fc:
         fa:0d:f8:0e:c3:5d:e9:44:46:fb:58:c9:b0:7a:58:50:5e:0b:
         79:0a:5d:83:c8:cd:b2:b0:9c:4a:b3:05:14:61:45:0f:72:9d:
         2a:74:6b:aa:c0:a0:7e:ca:8d:b0:c3:75:73:41:79:c5:cc:20:
         29:42:90:54:ab:71:5d:a9:98:07:e0:83:b6:ed:80:18:73:ff:
         1b:3e:61:b0:75:f3:59:0c:86:3f:ff:54:8b:37:d0:a8:6b:a7:
         3e:35:70:28:29:3e:e4:eb:2f:01:96:bf:b2:6b:5c:fc:fe:62:
         95:c1:ad:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 04:06:50 2024 by rpki-client on console-ams.rpki-client.org