Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/C9836F3A314C11EEB33F3686C4F9AE02.roa
File:                     C9836F3A314C11EEB33F3686C4F9AE02.roa (raw, json)
Hash identifier:          Nm3Cq0H330hcq1ka7PepkHLo38lsxcixtabz9iT0KA4=
Subject key identifier:   35:F9:D9:5D:4E:9D:4F:9E:B5:B1:BB:19:F7:6B:3C:A8:D8:DA:C8:75
Certificate issuer:       /CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
Certificate serial:       B9
Authority key identifier: 80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/C9836F3A314C11EEB33F3686C4F9AE02.roa
Signing time:             Wed 03 Jul 2024 06:07:19 +0000
ROA not before:           Wed 03 Jul 2024 06:07:19 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     142111
IP address blocks:        103.158.74.0/23 maxlen: 24
                          2401:1da0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl
                          rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:24:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
        Validity
            Not Before: Jul  3 06:07:19 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=6684ea97-77f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e6:3c:ae:66:09:08:74:cd:44:6f:cc:8a:3a:
                    f5:29:77:1c:b3:02:97:d7:b7:49:17:b6:a3:43:7b:
                    60:e9:fd:e3:6b:a0:82:01:40:07:5f:65:fe:c0:f3:
                    44:db:fc:bc:6b:45:16:18:29:2e:ef:41:4b:85:e7:
                    a8:e3:c4:79:b3:1f:39:96:85:97:b8:e5:a7:dd:e2:
                    b5:78:9f:4e:32:eb:c2:f9:57:f5:29:02:6a:f9:8f:
                    fb:d5:a8:d6:23:d2:e0:6c:40:0e:92:f9:2d:47:86:
                    27:71:76:f3:8c:ef:c0:62:55:1b:83:b2:ca:7f:13:
                    55:6e:40:43:2b:00:83:55:ce:22:d6:fa:b2:ae:e0:
                    5a:d9:00:93:6e:f3:9d:ae:95:50:3d:1e:b3:dc:57:
                    68:bb:c3:e8:f2:f9:1b:6c:7e:50:0c:94:20:88:30:
                    de:6e:26:49:7c:b3:a7:fb:14:57:03:e4:92:4a:c3:
                    a6:88:c3:27:0e:eb:bb:90:90:3d:03:46:54:3b:d4:
                    02:c1:94:92:0c:e5:ab:76:1a:02:0c:6f:24:02:f6:
                    df:84:1d:0c:0c:b4:8e:e9:9c:c6:64:83:24:a3:c3:
                    98:03:52:c2:90:40:d4:e2:25:2e:5b:5c:0f:c2:04:
                    06:64:f1:71:92:da:2f:af:0a:db:1a:c1:f0:31:05:
                    a8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F9:D9:5D:4E:9D:4F:9E:B5:B1:BB:19:F7:6B:3C:A8:D8:DA:C8:75
            X509v3 Authority Key Identifier:
                keyid:80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/C9836F3A314C11EEB33F3686C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.74.0/23
                IPv6:
                  2401:1da0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:39:b4:de:fa:da:ab:7c:e5:88:c5:fa:53:a6:1f:f1:ec:5e:
         a7:30:e4:f6:76:2c:1e:16:25:71:ea:6f:e9:04:14:72:96:5c:
         a6:22:9b:c3:cb:67:1b:14:db:5d:93:94:bc:19:9b:87:8a:31:
         ef:aa:d1:47:14:e4:67:84:ea:bc:d0:3a:07:1b:8c:f5:a2:30:
         47:2d:9c:2c:c8:9c:19:55:a1:e8:47:11:01:0a:55:1c:e8:01:
         a0:57:60:c5:b9:f2:d1:ea:da:84:9f:e4:66:3d:e4:fa:78:a9:
         27:66:5d:79:be:9f:66:d6:a7:d6:bb:47:f9:85:fa:da:ca:39:
         75:2c:1c:3f:5b:ce:2e:bb:4d:fd:eb:8f:43:aa:fa:1a:af:da:
         99:fe:8f:fd:9a:c5:87:3c:bc:39:c7:67:3d:6f:bf:19:a6:ca:
         99:ad:b7:13:4f:42:51:5c:b6:44:41:48:3f:7b:ba:9d:f4:e1:
         29:3a:b3:04:87:b6:f3:a2:a4:ac:f8:c4:77:a4:ae:3a:99:df:
         4d:a3:b5:c3:ba:86:cd:73:c1:af:c3:60:aa:6f:6c:77:b9:d4:
         ff:31:02:59:c1:57:c7:1d:13:6e:f2:c0:e1:3a:97:9c:30:96:
         31:12:c4:e0:1d:c0:a4:88:7c:a0:7c:bb:7e:d8:05:fd:a7:d4:
         3b:4c:33:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:54 2024 by rpki-client on console-fra.rpki-client.org