Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/6ABFFBC6F53811EDBAE7E351C4F9AE02.roa
File:                     6ABFFBC6F53811EDBAE7E351C4F9AE02.roa (raw, json)
Hash identifier:          1V6DG3RruUSFEextYdbAlCAJvZIY1kI2fi13FOKdYSQ=
Subject key identifier:   E9:28:73:66:39:1E:1E:F9:75:E9:CC:29:64:53:E4:B6:C0:D6:05:38
Certificate issuer:       /CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986
Certificate serial:       0126
Authority key identifier: 66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/6ABFFBC6F53811EDBAE7E351C4F9AE02.roa
Signing time:             Sat 05 Oct 2024 04:07:43 +0000
ROA not before:           Sat 05 Oct 2024 04:07:43 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     132859
IP address blocks:        103.25.115.0/24 maxlen: 24
                          103.74.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl
                          rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986
        Validity
            Not Before: Oct  5 04:07:43 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6700bb8f-8ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e5:a7:e0:5c:8e:e9:50:6b:34:a3:ef:cf:1c:
                    77:bc:bb:c0:73:c3:10:ab:64:ae:88:47:b6:58:82:
                    e1:33:95:25:f4:97:61:0a:8b:cf:75:c6:84:5a:8a:
                    15:9e:22:e7:3e:3b:ef:80:e8:6c:1f:d1:2d:25:69:
                    6f:89:d4:ac:e1:b1:c1:fe:a6:fb:f1:91:f8:c6:90:
                    71:b0:4d:9c:63:5e:08:bf:91:0f:83:64:1d:f5:88:
                    20:1a:f4:07:a7:27:96:d9:70:7b:9f:c7:64:69:29:
                    83:1e:d5:e0:e6:d1:a5:b3:fb:57:e9:83:fb:e7:db:
                    73:5b:9a:77:09:74:65:f2:5d:6f:df:db:c8:69:6b:
                    53:44:38:63:cf:44:bc:79:45:af:b6:69:1d:46:e0:
                    ab:ba:9e:67:9c:58:c7:e5:15:e1:1e:16:38:73:31:
                    14:91:5c:07:67:dd:4f:5c:7b:a3:eb:5e:1e:c0:85:
                    dc:ad:12:10:18:77:98:69:f1:6a:9b:51:9e:3b:4a:
                    49:0d:14:44:4a:4e:fb:e0:d0:4d:c1:c0:0b:ec:09:
                    9b:c5:e4:90:4c:54:fb:5b:b4:be:a2:83:a2:60:50:
                    9d:b0:a2:df:ce:d9:ad:f6:41:df:64:31:cc:c5:ec:
                    82:88:bd:80:4c:6e:b2:67:dd:ac:26:f5:c2:e9:84:
                    1e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:28:73:66:39:1E:1E:F9:75:E9:CC:29:64:53:E4:B6:C0:D6:05:38
            X509v3 Authority Key Identifier:
                keyid:66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/6ABFFBC6F53811EDBAE7E351C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.25.115.0/24
                  103.74.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:43:ef:f7:96:d1:0e:50:52:14:d3:9a:2e:be:98:50:b2:42:
         94:f4:7d:c0:a4:8a:29:9d:dd:11:d2:b5:e2:50:89:ce:af:13:
         9f:a8:df:5f:ca:55:cc:b6:b8:25:22:8b:6c:8c:cd:cf:69:11:
         75:f8:9b:a3:9c:f8:35:ec:26:53:43:ac:c2:fd:11:87:22:20:
         c5:d0:64:75:45:f7:d1:5a:b3:7a:14:67:99:6d:ef:bc:76:b5:
         fc:4b:91:70:5e:d2:9e:09:38:81:88:0d:4b:59:ce:f4:0d:4c:
         5d:7b:81:5b:f3:b6:bb:e8:60:d4:6a:a3:09:12:74:23:7e:62:
         0e:b4:0f:05:36:cd:b0:05:93:3d:a9:57:11:f7:a5:8b:c5:a8:
         98:c4:0f:6d:5c:db:ea:57:9f:aa:31:81:5e:6a:f4:3a:98:a6:
         6c:1e:0e:75:01:23:63:44:2b:74:f0:b0:0a:9c:89:a6:f2:7b:
         2d:9b:d6:1e:8d:1f:88:c5:fb:16:fc:3d:ff:cd:a7:0d:78:67:
         92:a7:14:a8:28:e7:fc:b9:b9:50:8c:7d:9a:15:84:ee:47:50:
         26:43:bd:82:b2:7b:0f:a7:68:64:6e:80:ca:94:09:2d:55:ba:
         b6:00:72:a7:5b:d4:bb:4b:6e:3d:db:00:4d:7e:03:76:12:79:
         89:67:a0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:35 2024 by rpki-client on console-ams.rpki-client.org