Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/B253813E4AB811EF84191732C4F9AE02.roa
File:                     B253813E4AB811EF84191732C4F9AE02.roa (raw, json)
Hash identifier:          HiT1d7Ok7irU6wONbhuRBD137rGB/VptbJDuicgsBA8=
Subject key identifier:   34:FE:A9:F8:58:01:07:35:D8:60:68:00:5A:4E:EE:B8:B4:98:D9:1F
Certificate issuer:       /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Certificate serial:       AF
Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/B253813E4AB811EF84191732C4F9AE02.roa
Signing time:             Thu 25 Jul 2024 19:04:20 +0000
ROA not before:           Thu 25 Jul 2024 19:04:20 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     134734
IP address blocks:        103.171.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
                          rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
        Validity
            Not Before: Jul 25 19:04:20 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66a2a1b4-6e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:69:3f:70:89:cf:9e:3a:ee:9e:90:d8:2c:87:
                    5e:1a:cc:c2:b7:05:57:a2:15:27:f8:2e:e4:88:64:
                    ba:b9:6c:c6:0b:60:1b:9d:53:96:19:39:2b:c2:e3:
                    fa:ab:a0:5e:db:0a:12:8d:63:38:93:ff:da:c3:5e:
                    58:13:aa:c5:c4:8a:f2:85:ac:10:74:8e:8d:8c:fe:
                    87:39:0c:b0:bf:3e:52:9a:90:4b:3e:ad:cd:1f:fd:
                    1f:de:81:58:95:78:d6:4e:76:34:ea:7d:02:8d:3f:
                    9b:a5:00:f7:c0:69:61:06:7d:5f:1c:35:b2:67:da:
                    8e:2a:38:fa:93:4a:20:6e:19:0f:93:b2:cc:c7:1a:
                    56:bc:07:a1:6b:13:f5:8e:bd:09:45:08:05:37:32:
                    28:fc:f7:35:35:e1:6c:e7:8d:b6:2c:4f:07:45:b8:
                    43:00:5d:bc:20:82:69:bc:2b:23:88:1e:61:49:91:
                    5d:10:70:31:72:92:f1:5a:f5:f3:2f:9c:0e:5b:f9:
                    ff:f4:d8:32:c7:d7:b6:29:70:80:5c:3a:b6:57:74:
                    c0:87:e2:6e:05:46:27:09:09:91:81:c4:92:24:d7:
                    3b:c0:e0:eb:68:01:17:66:67:43:60:a5:a6:59:27:
                    f3:69:32:a1:6e:94:a6:ce:53:c8:81:78:59:19:93:
                    35:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FE:A9:F8:58:01:07:35:D8:60:68:00:5A:4E:EE:B8:B4:98:D9:1F
            X509v3 Authority Key Identifier:
                keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/B253813E4AB811EF84191732C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:40:c4:20:75:4a:51:40:d1:f4:3d:a0:63:d7:c3:96:29:cc:
         1a:dd:37:ff:3a:0e:a6:d5:05:19:a3:e5:b8:00:16:12:ff:0f:
         de:92:34:1a:e5:ac:20:e5:26:d6:54:6d:e3:36:f8:e1:d7:1c:
         c5:be:44:72:b1:73:40:83:f6:89:7b:28:bb:5b:5e:83:31:4b:
         a1:57:9e:a1:e0:24:56:af:83:53:28:9e:22:65:d9:40:14:a8:
         97:31:3d:82:fc:06:00:84:f1:5e:1b:f5:67:35:28:aa:0b:a3:
         5f:42:d3:6a:50:eb:04:59:0b:1b:11:b4:b0:70:0e:8b:cf:87:
         8c:2b:7f:09:5a:27:ed:73:8e:53:3b:47:45:7b:a5:51:da:14:
         e4:68:bd:8d:05:38:5f:5a:c5:bc:4f:96:31:eb:72:e8:42:83:
         fb:d9:20:39:cb:ed:7e:89:7c:94:a6:9d:3d:45:d1:53:36:1b:
         02:ee:dd:2c:1d:ff:d4:90:9d:2e:7c:30:40:ad:cb:94:fa:a2:
         af:ec:ce:d4:b1:ee:72:b0:38:3c:f1:82:bf:08:44:b8:39:9a:
         e0:21:92:7b:91:6b:e1:f3:69:48:d2:cf:ed:29:62:cb:2c:ed:
         64:6e:90:5b:74:13:42:6a:1d:26:3b:45:ad:22:ba:4f:32:4f:
         fd:8a:32:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:21:19 2024 by rpki-client on console-fra.rpki-client.org