Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/C19EC984774811EFB2DF8983C4F9AE02.roa
File:                     C19EC984774811EFB2DF8983C4F9AE02.roa (raw, json)
Hash identifier:          c/pAynOTfJnEgUvwSHA5IHqTz1bA0PIkbnuNkyI5d1A=
Subject key identifier:   AB:96:80:EA:0C:19:BA:A1:4D:8B:FD:48:61:54:85:36:70:5B:BB:4B
Certificate issuer:       /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Certificate serial:       1315
Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/C19EC984774811EFB2DF8983C4F9AE02.roa
Signing time:             Fri 20 Sep 2024 12:06:24 +0000
ROA not before:           Fri 20 Sep 2024 12:06:24 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     152700
IP address blocks:        103.116.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl
                          rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 17:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4885 (0x1315)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
        Validity
            Not Before: Sep 20 12:06:24 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66ed6540-6e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9a:62:b4:b8:a2:00:f0:96:f1:e8:87:f3:1d:
                    87:c2:90:ef:0f:07:76:49:ec:70:f4:55:07:79:8a:
                    89:dd:fa:8c:3f:c1:22:4d:ab:72:d0:77:04:0b:bd:
                    87:5d:11:d0:be:09:1f:1b:df:30:a8:3c:81:c4:6a:
                    0d:1e:e0:db:aa:ed:57:49:40:2d:a7:76:7c:37:45:
                    92:10:4e:43:4b:af:e8:94:bf:0b:37:48:89:f5:56:
                    e8:b6:70:ad:8a:46:5c:18:ec:a2:ef:4d:21:85:aa:
                    0a:a3:e9:45:82:b4:16:7e:f7:b7:d7:c4:a4:c2:7e:
                    a6:84:3d:33:c4:65:fc:29:02:08:0e:23:33:e3:14:
                    fb:96:bb:6f:11:f6:e9:ed:3f:90:f1:ac:a5:a7:2b:
                    41:6c:2c:ce:0e:59:be:6f:dd:00:ca:b2:98:ec:61:
                    80:8e:98:6d:86:5c:d9:d9:a4:15:6a:76:06:6e:64:
                    90:9f:b7:11:44:a6:69:6e:51:dc:b9:01:a3:ec:67:
                    44:50:05:a1:cd:e6:f0:8d:9e:ce:fd:aa:f1:e9:5e:
                    64:69:6b:48:0f:e9:83:a4:73:2f:7a:a8:d3:38:8d:
                    e5:3f:a6:a5:13:16:c0:75:f8:89:05:02:03:c0:73:
                    97:26:9a:e2:36:3c:95:ea:f4:24:f7:e7:53:be:33:
                    b6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:96:80:EA:0C:19:BA:A1:4D:8B:FD:48:61:54:85:36:70:5B:BB:4B
            X509v3 Authority Key Identifier:
                keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/C19EC984774811EFB2DF8983C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:b1:d0:b3:28:71:d6:9d:67:af:e1:3e:fb:fc:02:d0:a7:20:
         26:6e:02:a8:6c:eb:b7:65:82:b4:36:99:9d:5e:3e:33:b1:11:
         70:e8:8e:4c:49:e1:e2:da:33:66:ed:83:59:be:7b:17:d9:73:
         17:9f:82:be:f6:13:4e:b0:ca:89:bf:f2:ed:9f:2b:86:ea:15:
         cb:76:42:40:27:e6:62:1a:b6:b5:0a:8a:09:c2:a6:f2:81:9c:
         ce:0e:5b:da:19:0f:59:3e:44:55:6d:84:80:d3:89:7b:a0:82:
         1c:be:b8:21:7a:70:3b:18:3f:5a:73:63:7a:7c:a8:46:c6:80:
         32:21:50:e8:20:9b:45:75:79:8f:ec:c0:e5:6e:17:c1:3d:d9:
         0f:29:a6:10:82:cb:62:76:df:18:04:3f:2e:cb:8c:9f:b1:f0:
         e6:b6:8d:b7:fe:5f:bb:cb:c0:f1:1d:76:9a:95:f2:87:68:67:
         c6:de:a3:12:52:42:b6:b5:f9:68:60:a3:c3:b4:67:11:e3:42:
         81:f6:4e:70:d6:8c:a7:71:0b:b3:82:3c:26:d8:54:5d:05:6a:
         cc:25:3f:95:e5:0d:3f:ee:d1:48:6f:5c:d3:f3:9f:e9:d2:9b:
         16:fc:1b:ff:13:6a:a1:5a:a5:67:0e:dc:80:85:dc:60:07:36:
         18:45:7b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:05:12 2024 by rpki-client on console-ams.rpki-client.org