Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/A5E434A26B8811EF90268581C4F9AE02.roa
File:                     A5E434A26B8811EF90268581C4F9AE02.roa (raw, json)
Hash identifier:          VlHs5GiCRfl3b9kEEV9IoI9ypJAdDDuIHrwcBXz48T4=
Subject key identifier:   E6:7C:AF:5C:DD:9C:FD:36:7F:DB:2B:4A:76:99:C2:95:14:48:88:AE
Certificate issuer:       /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Certificate serial:       CA
Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/A5E434A26B8811EF90268581C4F9AE02.roa
Signing time:             Thu 05 Sep 2024 13:13:32 +0000
ROA not before:           Thu 05 Sep 2024 13:13:32 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     142638
IP address blocks:        103.171.142.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
                          rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
        Validity
            Not Before: Sep  5 13:13:32 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66d9ae7b-3cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4b:7e:9c:61:83:c8:51:2b:b1:af:e3:5e:48:
                    f4:65:62:1e:7c:0d:c3:ee:90:16:bc:3e:e1:1b:b0:
                    87:8b:b7:bd:7f:ca:9f:df:44:e2:3c:71:9f:85:a8:
                    d0:13:50:6c:52:48:1e:0c:d0:71:86:4e:4a:9b:a4:
                    a4:0a:12:e0:8c:40:18:af:1a:bd:cb:1f:8a:b2:f5:
                    b3:8b:f6:53:de:19:b4:ff:20:3e:1f:29:6d:08:c4:
                    65:3a:30:2e:04:24:52:a6:b1:d3:02:be:cd:a2:ed:
                    a8:55:b1:82:44:a6:f5:ac:cb:81:af:7e:2c:8e:17:
                    9f:5b:fd:f9:be:d8:b1:56:29:58:1f:a0:c0:0a:29:
                    10:a6:af:c1:21:af:d3:e8:32:85:6d:8f:e9:1b:dd:
                    2b:2a:cb:c9:85:5a:1a:72:53:d9:19:6f:b7:b1:f3:
                    61:67:f4:84:28:9c:e9:da:ca:cf:6b:c1:b9:a9:59:
                    fc:13:ea:53:15:e5:65:a5:c5:b6:2d:ac:b1:f6:1c:
                    f4:c1:31:1f:e6:f5:e4:5c:e6:0a:5a:51:c8:f5:00:
                    1b:47:eb:63:67:dd:39:63:78:5a:b4:e6:d2:ba:2c:
                    8f:23:71:cc:ce:68:08:58:04:9c:65:06:e7:ef:b9:
                    c2:4d:4a:a2:5c:70:e7:34:f2:10:0f:f1:f6:53:cb:
                    b8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7C:AF:5C:DD:9C:FD:36:7F:DB:2B:4A:76:99:C2:95:14:48:88:AE
            X509v3 Authority Key Identifier:
                keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/A5E434A26B8811EF90268581C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:e6:2b:63:dd:1a:e7:a7:6e:bc:b3:02:0c:33:43:07:a8:ac:
         03:7b:53:b1:80:07:a4:6d:2c:20:24:c5:24:e5:b1:43:0d:8b:
         5f:11:40:c6:fa:c0:69:59:63:c0:eb:48:5a:91:64:b3:ee:6d:
         10:e8:9f:37:3e:de:e1:e3:b0:71:7a:46:fb:a5:15:41:7e:18:
         21:92:d4:6d:a7:0a:27:a1:76:65:6f:06:dc:3c:7b:5e:22:38:
         87:31:95:26:6e:4d:d3:27:f1:56:24:6e:37:20:83:6a:1c:9f:
         1d:00:ca:60:c4:0a:89:20:be:ab:c3:4e:1b:13:80:e9:ac:0a:
         27:8e:ee:4b:0a:29:65:9a:eb:2f:91:e5:8d:9e:2f:2b:38:0f:
         99:fa:6b:00:07:2a:4f:c7:26:b7:a8:af:6d:16:b1:73:b9:b7:
         3c:01:d8:2c:c2:b1:69:68:57:e3:dd:c7:9f:bc:3b:d7:10:23:
         19:e3:0e:91:bb:d8:43:9b:77:f3:96:85:86:6b:af:bb:06:5a:
         91:26:28:f4:d5:cd:8c:3e:26:57:04:a2:0a:3c:97:39:a5:e4:
         a1:a7:dc:a8:e9:1c:dc:d1:8f:fd:61:66:4f:04:08:e8:a2:03:
         f3:0f:c5:54:51:73:9a:19:b7:52:c4:5f:1c:ef:60:cf:dc:42:
         c3:76:c8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:21:19 2024 by rpki-client on console-fra.rpki-client.org