Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C10/D9A9F9B0890D11EEB06A0C56C4F9AE02/5D1B0906890E11EE90BBB457C4F9AE02.roa
File:                     5D1B0906890E11EE90BBB457C4F9AE02.roa (raw, json)
Hash identifier:          Z8tuadkcRnENS7+vdGGnSHNt+AWHMU724rfNqNBJtFw=
Subject key identifier:   FA:CB:EF:6E:16:EA:5B:AE:D0:6B:2F:74:1A:52:B4:A5:A1:06:69:51
Certificate issuer:       /CN=A9127C10/serialNumber=7998F5E70816B68D7DF5ECF6772E7B5CA23ADF83
Certificate serial:       6B
Authority key identifier: 79:98:F5:E7:08:16:B6:8D:7D:F5:EC:F6:77:2E:7B:5C:A2:3A:DF:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eZj15wgWto199ez2dy57XKI634M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127C10/D9A9F9B0890D11EEB06A0C56C4F9AE02/5D1B0906890E11EE90BBB457C4F9AE02.roa
Signing time:             Wed 05 Jun 2024 08:28:03 +0000
ROA not before:           Wed 05 Jun 2024 08:28:03 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     141994
IP address blocks:        103.226.24.0/23 maxlen: 24
                          2401:ca0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127C10/D9A9F9B0890D11EEB06A0C56C4F9AE02/eZj15wgWto199ez2dy57XKI634M.crl
                          rsync://rpki.apnic.net/member_repository/A9127C10/D9A9F9B0890D11EEB06A0C56C4F9AE02/eZj15wgWto199ez2dy57XKI634M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eZj15wgWto199ez2dy57XKI634M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127C10/serialNumber=7998F5E70816B68D7DF5ECF6772E7B5CA23ADF83
        Validity
            Not Before: Jun  5 08:28:03 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66602193-c509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:28:c2:51:a8:64:3e:87:cd:55:07:cc:78:30:
                    0a:e1:fe:f5:a9:6c:e7:cc:a9:8a:4d:7f:e2:4e:f7:
                    0e:a3:ae:c1:5b:4a:61:a4:69:e8:85:4c:b2:05:ce:
                    da:ad:8f:0c:92:26:3e:01:b0:ce:f1:42:2e:68:8e:
                    6f:89:ba:14:f5:4d:5b:e0:ef:43:cd:d0:bd:f4:14:
                    63:9a:3f:c4:27:67:70:0b:74:b8:6e:87:38:ea:f3:
                    bc:b2:67:01:83:7c:00:46:bc:65:0b:21:db:27:2f:
                    20:68:06:e6:0a:7c:1b:88:67:d3:97:82:41:2c:5a:
                    3f:ee:95:67:ad:85:cd:c9:43:4a:b0:f9:a0:d1:f0:
                    e0:a9:d9:e7:12:74:d3:6d:3b:d1:85:e6:96:fb:07:
                    77:a3:44:ba:04:58:7a:4c:8b:05:9b:6c:cc:7b:11:
                    77:55:9e:4b:55:96:b2:c6:15:87:65:3d:96:bd:56:
                    9c:78:3b:85:f7:58:48:d1:f8:71:b7:21:62:ef:47:
                    67:ed:38:b6:5f:fc:96:e9:fb:ef:7d:44:1a:a4:98:
                    0f:bc:f2:1d:5f:1c:f9:64:b3:4d:ab:ef:f3:25:c0:
                    eb:ad:ee:2f:f1:74:04:af:0c:57:7f:d4:a9:4d:4e:
                    44:6d:55:7b:cb:dd:e3:8c:74:1a:59:ed:3e:3a:a9:
                    c3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CB:EF:6E:16:EA:5B:AE:D0:6B:2F:74:1A:52:B4:A5:A1:06:69:51
            X509v3 Authority Key Identifier:
                keyid:79:98:F5:E7:08:16:B6:8D:7D:F5:EC:F6:77:2E:7B:5C:A2:3A:DF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127C10/D9A9F9B0890D11EEB06A0C56C4F9AE02/eZj15wgWto199ez2dy57XKI634M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eZj15wgWto199ez2dy57XKI634M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C10/D9A9F9B0890D11EEB06A0C56C4F9AE02/5D1B0906890E11EE90BBB457C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.226.24.0/23
                IPv6:
                  2401:ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:27:9c:6f:84:6f:e3:e1:77:ea:0f:9b:17:37:96:64:5d:b5:
         a0:87:7f:87:01:ce:2d:64:a3:91:42:9a:b9:ac:81:b6:20:0e:
         77:1e:0f:38:38:59:57:e8:97:df:9e:84:35:e1:d6:97:11:44:
         4a:70:be:9a:74:9d:83:f2:5e:a3:42:90:7e:9b:8e:b2:9c:ff:
         d3:be:fb:a1:09:a9:20:39:b2:dc:16:74:49:61:e5:b2:9d:cd:
         6c:40:32:6b:0e:b1:58:53:4c:dd:be:aa:9f:32:b1:57:40:63:
         63:ba:82:a2:a2:22:c5:68:b0:81:db:86:c6:ce:53:9c:83:a0:
         a3:7e:d5:d2:2a:80:1d:dc:2e:d3:4e:85:a6:eb:8e:b5:15:40:
         e3:42:9b:fe:63:14:fb:07:0c:43:7a:c1:ed:a3:d9:16:bf:0e:
         17:ed:8f:a9:23:1c:ce:84:1b:f5:c5:a7:aa:b6:7a:44:6e:f9:
         8e:72:9d:57:1e:9c:cb:a7:9b:47:54:52:92:33:2d:4b:b3:b8:
         20:a6:2a:14:00:46:65:95:c1:15:c0:61:02:49:b8:45:6f:aa:
         ef:29:f2:d2:83:25:e3:a3:52:60:02:bd:27:56:fa:5d:9f:b1:
         f4:43:64:bf:9b:22:6a:89:11:83:aa:79:39:12:73:84:76:c0:
         86:62:64:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:45 2024 by rpki-client on console-fra.rpki-client.org