Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/6FE0D496064A11EDA0A92068C4F9AE02.roa
File:                     6FE0D496064A11EDA0A92068C4F9AE02.roa (raw, json)
Hash identifier:          jVg82OUaVePNyDCOCMIUFjDkj+15X58I4cwm4Uj+6+c=
Subject key identifier:   02:4A:AE:77:D9:8E:91:96:9B:FD:79:5C:29:DD:D3:B0:DA:19:D4:7F
Certificate issuer:       /CN=A9125AE9/serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82
Certificate serial:       01C5
Authority key identifier: 70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/6FE0D496064A11EDA0A92068C4F9AE02.roa
Signing time:             Fri 03 May 2024 04:46:58 +0000
ROA not before:           Fri 03 May 2024 04:46:58 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     132730
IP address blocks:        103.88.155.0/24 maxlen: 24
                          103.88.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl
                          rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125AE9/serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82
        Validity
            Not Before: May  3 04:46:58 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66346c42-9dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:fb:fc:65:7e:e5:a3:24:08:c3:5e:54:82:38:
                    28:7c:18:87:0a:24:c3:36:1d:88:9f:dd:87:49:7f:
                    08:25:07:90:92:67:85:01:82:d6:a0:c9:64:61:80:
                    87:28:d2:89:28:81:1a:4d:89:23:af:90:4f:f1:74:
                    82:5e:2c:d8:0d:ab:ce:fb:45:99:27:95:f1:01:9f:
                    e6:29:8c:5d:b1:ec:e8:93:36:3a:9b:a3:c5:8a:31:
                    af:2c:3e:f5:e8:0d:c2:85:46:2a:a7:50:63:1e:6c:
                    93:e7:ee:64:7b:25:d6:7b:c8:83:db:a7:18:21:d8:
                    a2:95:25:4d:a1:c7:ad:87:cb:1c:27:d9:46:8f:10:
                    8c:f4:55:8c:7a:a7:fb:d0:9e:38:db:1e:17:70:f5:
                    79:26:5b:f2:43:fb:f9:a4:14:2f:b8:31:41:6d:aa:
                    3b:92:9b:95:77:b6:f3:c6:be:11:c2:68:5a:92:ff:
                    27:2b:13:1e:a3:86:16:4c:80:94:8a:34:4e:c1:94:
                    9b:f4:ee:78:4f:7e:51:b8:8a:e3:aa:c8:55:f5:31:
                    c0:9e:d5:a9:b2:2d:62:68:7f:1b:99:f4:5f:b5:56:
                    ca:5d:5e:cc:19:39:71:a1:53:70:33:f4:e6:84:98:
                    ba:17:6c:6b:1f:13:5f:08:6a:f3:16:35:8c:1b:81:
                    19:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4A:AE:77:D9:8E:91:96:9B:FD:79:5C:29:DD:D3:B0:DA:19:D4:7F
            X509v3 Authority Key Identifier:
                keyid:70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/6FE0D496064A11EDA0A92068C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.88.155.0/24
                  103.88.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:8a:1d:da:46:df:c3:ef:98:1a:e0:28:bb:b5:6b:e2:98:16:
         5c:24:ab:6b:83:a4:d3:00:16:2e:37:d7:9b:0f:5e:73:41:3f:
         13:3f:f5:78:b7:2b:0e:a2:28:ce:54:fd:6a:ea:f5:17:bb:5a:
         c0:19:82:8e:92:e3:69:74:58:ea:84:a9:68:a7:6b:b4:90:33:
         62:95:cf:35:a8:fc:3d:9c:33:15:da:01:f2:74:e6:8f:19:96:
         2d:b8:8a:51:d8:ac:64:68:b5:15:c3:11:ac:2c:c6:d4:7c:00:
         dc:4a:f2:31:2b:cc:ce:c4:86:07:d8:c1:bb:36:90:8b:13:5d:
         e5:7d:05:91:ed:40:65:6d:d2:b3:e5:b1:07:34:c2:44:fc:59:
         ab:aa:9a:fb:ee:16:31:55:b1:09:b1:94:99:fb:f3:47:95:4f:
         7e:35:50:b1:54:03:c5:f4:29:b4:3f:cc:60:4b:b2:a5:e6:53:
         ff:51:c7:6c:66:22:34:25:c1:75:11:08:a7:03:da:f7:23:d7:
         16:fa:b0:3d:cd:f0:ac:bc:3c:13:2e:0f:22:3c:4b:82:48:bc:
         f2:93:a5:e4:f7:1a:35:b1:c4:59:46:2d:86:a2:99:84:a0:ce:
         b7:35:34:75:1b:5b:67:ea:c9:a0:68:e4:18:90:12:c6:43:b8:
         ff:e6:06:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:31 2024 by rpki-client on console-fra.rpki-client.org