Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/118AB342249511EFBF275B73C4F9AE02.roa
File:                     118AB342249511EFBF275B73C4F9AE02.roa (raw, json)
Hash identifier:          ogfO9JhlXfzcpr7qtI24gUz6+dXsJEF9ymvQGfa18zY=
Subject key identifier:   43:64:BF:3A:CF:82:E3:57:A0:FB:07:34:46:98:4C:80:73:1C:EC:48
Certificate issuer:       /CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986
Certificate serial:       0128
Authority key identifier: 66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/118AB342249511EFBF275B73C4F9AE02.roa
Signing time:             Sat 05 Oct 2024 04:07:45 +0000
ROA not before:           Sat 05 Oct 2024 04:07:45 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     152904
IP address blocks:        103.74.216.0/26 maxlen: 26

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl
                          rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986
        Validity
            Not Before: Oct  5 04:07:45 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6700bb90-8454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:35:57:d3:d6:c4:05:15:30:dc:d4:08:72:4c:
                    e3:54:f4:24:27:ff:12:05:6e:d4:2c:52:33:4b:6d:
                    2f:12:2b:de:46:5e:91:03:86:53:f9:5e:99:21:b6:
                    09:cb:1e:06:bc:3b:0d:03:6f:33:1d:08:6e:07:f8:
                    17:f4:80:02:21:b7:81:64:95:1d:1b:42:2f:13:fb:
                    12:98:57:82:9f:07:5e:de:d1:d0:3c:e0:e8:78:d2:
                    31:d6:ce:4d:6d:02:fd:83:43:ac:7d:18:d9:48:5f:
                    8a:ba:e0:43:36:30:a9:e3:97:1c:98:33:17:2f:b7:
                    03:7e:39:3f:57:5e:69:e2:ae:7b:f1:8f:c4:36:82:
                    d6:37:4e:eb:52:5b:94:0b:cf:55:35:a4:38:bb:de:
                    8f:71:8c:be:26:1b:f0:27:0a:a2:60:0f:54:28:6e:
                    48:9d:ba:88:ab:aa:2c:c4:0d:04:28:33:b8:28:91:
                    72:64:ea:df:a0:a7:0f:b0:5c:b3:85:cc:1f:c2:ba:
                    7a:60:50:7c:4e:b6:ef:a8:84:c1:b9:cb:74:03:dc:
                    30:75:8f:37:7e:33:c6:1d:f0:d4:a5:9d:6b:10:3a:
                    84:86:09:3f:cb:a7:97:f2:1c:fd:66:d0:48:73:b9:
                    04:0b:10:1b:ce:f4:b4:2b:4d:55:85:58:1e:8c:d6:
                    6d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:64:BF:3A:CF:82:E3:57:A0:FB:07:34:46:98:4C:80:73:1C:EC:48
            X509v3 Authority Key Identifier:
                keyid:66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/118AB342249511EFBF275B73C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.216.0/26

    Signature Algorithm: sha256WithRSAEncryption
         06:0c:0b:63:ee:e4:cd:8c:65:4a:8d:9d:1a:b5:15:3b:50:4c:
         b0:65:d8:87:ea:28:f5:f9:55:53:38:65:d2:0f:ed:26:b1:55:
         43:68:39:1f:b4:ee:89:18:07:27:fb:c1:e5:78:02:a2:eb:80:
         f9:ea:f0:56:a6:69:b2:09:ec:42:3d:70:51:a7:e9:e9:d3:dd:
         12:60:58:cf:cc:5d:d1:0c:fd:cf:8e:15:06:74:68:64:cd:22:
         13:d4:f5:87:73:97:28:18:6e:aa:26:4e:01:8b:7d:f1:06:40:
         46:5d:b8:3a:ac:a0:98:f8:c5:a5:1f:be:a4:46:b7:31:ad:48:
         65:56:6b:47:60:73:7e:94:74:cc:1b:3c:e3:88:06:ff:4a:be:
         2f:8b:45:69:4c:ce:41:3b:8f:ed:2d:db:fb:62:51:dd:bc:da:
         ad:4e:41:32:f2:ec:d8:93:80:e6:ac:2c:75:a8:29:cd:11:9d:
         7b:f6:ee:ae:0e:14:ce:84:ca:90:d2:07:9e:b2:f3:73:9b:eb:
         06:81:19:89:8a:ea:0f:01:d0:c1:55:d3:61:95:5a:35:1c:72:
         c0:05:5b:d4:57:66:c9:24:e7:58:69:b6:d9:08:00:40:35:57:
         23:b4:65:13:91:62:04:31:12:86:f0:1d:b8:3b:fe:60:8c:43:
         11:7c:60:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:35 2024 by rpki-client on console-ams.rpki-client.org