Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/86BADBF8013511EE81A9F21FC4F9AE02.roa
File:                     86BADBF8013511EE81A9F21FC4F9AE02.roa (raw, json)
Hash identifier:          0CFQQuPkMniES7kUDG2th2dFf+/z6LBmnQCmAMjCLSo=
Subject key identifier:   0E:E4:E6:4E:C0:39:60:21:74:9F:48:E2:7F:6C:08:3D:B0:0C:9F:28
Certificate issuer:       /CN=A9124731/serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077
Certificate serial:       0369
Authority key identifier: 80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/86BADBF8013511EE81A9F21FC4F9AE02.roa
Signing time:             Thu 07 Mar 2024 02:24:54 +0000
ROA not before:           Thu 07 Mar 2024 02:24:54 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     142127
IP address blocks:        103.162.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.crl
                          rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 03:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 873 (0x369)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124731/serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077
        Validity
            Not Before: Mar  7 02:24:54 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65e92576-5dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:69:f5:32:92:5e:83:1c:7b:c6:39:f6:bf:1d:
                    33:6e:a9:4a:a1:0a:ee:10:1e:fb:16:d3:a6:fa:6d:
                    c6:53:d8:43:d0:dc:78:b4:1a:94:6a:58:3b:5f:22:
                    28:48:91:aa:87:0c:cc:32:83:2e:3a:5b:b8:6f:c4:
                    c7:b7:15:3d:80:6c:60:a3:4c:04:8c:8f:6f:b2:f0:
                    b0:75:fd:fb:6c:08:82:03:d1:90:41:8d:03:03:2e:
                    a7:82:fa:06:f9:54:67:cc:e0:50:16:e9:43:c1:e8:
                    70:0f:57:89:24:df:20:6a:52:a8:12:60:ae:45:16:
                    c5:9c:67:72:ce:c6:07:85:ac:ba:b0:4f:82:a2:94:
                    6d:3e:91:c6:9d:f4:9b:27:ad:89:8c:b2:74:72:ce:
                    e2:0a:2f:8e:b6:77:9c:83:1d:a8:09:a1:ac:d4:ab:
                    02:9d:21:5f:04:4d:38:88:d6:80:68:07:66:21:a8:
                    93:e7:f6:97:7f:dc:fe:50:44:46:47:3b:73:84:29:
                    da:b9:cd:c1:86:40:d4:81:b9:df:52:4f:5c:08:cc:
                    36:4f:39:e3:92:59:ec:4c:51:7a:8a:6e:f8:de:d1:
                    25:85:31:88:40:53:96:98:fa:63:02:e9:a1:52:f2:
                    1d:f3:ee:fb:30:99:f1:ab:09:30:39:ab:46:6c:e5:
                    3e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E4:E6:4E:C0:39:60:21:74:9F:48:E2:7F:6C:08:3D:B0:0C:9F:28
            X509v3 Authority Key Identifier:
                keyid:80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/86BADBF8013511EE81A9F21FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:2d:09:04:3f:ce:64:fd:8a:fb:e4:9f:6b:03:af:a4:85:ed:
         a4:0b:a7:bb:3c:34:b6:1e:da:59:be:da:0e:37:a5:72:c4:a0:
         2d:71:0c:2f:d9:4f:ab:da:4f:aa:04:ca:9a:ca:3b:89:b2:9b:
         55:4a:60:e4:4c:60:80:4b:17:fc:19:cc:4b:f7:01:b6:b7:75:
         e7:81:d9:36:01:73:a1:4d:ce:28:7c:3c:03:bf:f0:a6:87:23:
         89:33:81:32:26:ec:f8:46:6a:8b:10:6b:69:0f:6a:1e:e3:c9:
         a0:24:78:c4:4f:3a:65:a0:34:6c:9d:33:ea:30:95:3c:1e:28:
         b5:7a:17:da:ad:d9:d4:96:1a:d1:94:f8:92:5a:81:e5:f1:d7:
         06:2b:db:fa:b9:15:14:83:f9:59:61:5b:63:f0:51:b6:05:95:
         95:c1:10:17:51:58:20:ee:e2:bd:1b:16:62:97:d5:b5:45:7f:
         aa:4a:c4:23:97:64:c5:64:3f:57:e0:bc:fe:e8:45:61:e7:14:
         ed:67:4f:ce:d2:51:e2:47:ec:30:8d:e2:10:93:b6:83:3e:86:
         93:54:9b:2f:92:b4:d1:86:13:7f:96:1e:8a:f5:51:da:73:ee:
         62:59:b4:37:1f:cb:c4:db:c2:d4:08:81:df:91:6f:c1:d8:a7:
         9d:9d:a4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 04:49:20 2024 by rpki-client on console-ams.rpki-client.org