Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/E0A2D2B040C811EE90859140C4F9AE02.roa
File:                     E0A2D2B040C811EE90859140C4F9AE02.roa (raw, json)
Hash identifier:          SzaVt51qpMlgOXonKR5CNB88VlUM6jEUlR77/PeLcks=
Subject key identifier:   86:51:2B:7E:A7:2F:04:7A:D7:69:4B:50:AA:D0:D1:2D:9A:99:1D:F7
Certificate issuer:       /CN=A9129797/serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43
Certificate serial:       1017
Authority key identifier: 70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/E0A2D2B040C811EE90859140C4F9AE02.roa
Signing time:             Fri 02 Feb 2024 18:06:31 +0000
ROA not before:           Fri 02 Feb 2024 18:06:31 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     135628
IP address blocks:        103.132.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl
                          rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4119 (0x1017)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129797/serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43
        Validity
            Not Before: Feb  2 18:06:31 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65bd2f27-61cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:46:2d:74:6c:27:06:fa:5c:86:69:61:41:18:
                    eb:0f:f2:4e:e8:67:de:1c:e5:3b:d4:03:c0:28:5c:
                    a1:15:a3:ac:9c:6e:8e:1d:8d:43:21:c5:49:0f:6a:
                    17:f6:d3:9d:e4:85:77:5f:82:30:ec:c2:8e:32:bc:
                    51:1f:39:0b:5c:71:41:da:77:67:8a:f2:3b:be:4e:
                    5c:8f:34:cd:8d:52:70:e8:fc:38:37:d8:6c:b3:1f:
                    c9:2c:b6:04:e7:79:6e:25:cc:82:4d:71:bf:97:c5:
                    02:4d:a5:fe:88:4a:55:82:7c:25:fc:ba:54:c7:c0:
                    e0:57:b9:05:da:ed:44:04:c5:f7:46:d7:79:6d:53:
                    04:35:9a:c2:94:67:aa:c1:4c:a0:a4:df:31:60:3e:
                    81:e1:f7:48:eb:77:42:33:f5:18:4b:e7:ef:74:e1:
                    3e:7a:35:b5:5e:a2:04:65:e2:81:25:1c:44:7b:ea:
                    cf:0f:e8:53:4d:be:a1:e6:ec:60:8c:da:90:24:5c:
                    b9:ca:9e:19:31:88:ab:81:9d:17:1a:35:c0:3e:a0:
                    f6:1a:ac:43:3e:13:32:10:fa:15:70:78:07:43:69:
                    64:98:64:1c:ac:de:c8:07:39:1f:8a:3e:a1:91:ad:
                    66:3d:ed:e6:7f:05:ab:67:66:51:0c:2b:ba:26:fc:
                    16:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:51:2B:7E:A7:2F:04:7A:D7:69:4B:50:AA:D0:D1:2D:9A:99:1D:F7
            X509v3 Authority Key Identifier:
                keyid:70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/E0A2D2B040C811EE90859140C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:c8:da:b4:9a:ca:d7:86:77:c2:dd:90:8d:1c:bc:d4:cb:3f:
         8e:e6:8d:aa:aa:e1:bb:db:2b:52:7c:c2:2f:32:d0:f2:55:39:
         83:c8:f7:49:22:25:9c:81:5a:62:e8:29:b2:ca:73:76:b3:d3:
         c9:35:81:7a:a8:25:0e:d2:7e:85:06:0d:f5:89:a9:8f:1e:4e:
         6b:aa:64:68:9f:a8:29:cd:9c:18:08:57:f2:00:0e:1a:dd:4d:
         62:9d:97:a3:c8:8c:05:9a:95:94:c4:ca:f1:54:75:94:27:b7:
         d0:53:9d:26:aa:39:df:f6:a4:1c:50:14:20:bd:51:47:40:e3:
         e9:29:c3:e8:5c:45:56:f0:40:d1:ff:c7:cb:91:30:f6:1b:70:
         f7:8a:53:22:48:0c:02:cb:da:51:2f:0a:a8:b9:cb:6f:b4:3f:
         94:d6:ed:8b:b4:ee:b0:fc:23:3f:bc:3e:ab:ea:0a:c3:dd:57:
         f2:37:a3:fa:5a:bb:fc:15:ed:38:74:c1:ba:4d:60:cd:21:b3:
         af:97:93:4e:66:61:4d:da:41:19:4d:7c:d7:68:ee:9c:e2:43:
         05:8d:bb:70:6b:13:83:3b:c8:63:d7:07:f9:cd:27:71:f9:0b:
         ab:e5:34:f3:63:32:c6:cd:c6:69:13:66:16:0a:a3:8a:49:62:
         63:10:f0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:49:58 2024 by rpki-client on console-ams.rpki-client.org