Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/279B0372DDF811EAA553705EC4F9AE02.roa
File:                     279B0372DDF811EAA553705EC4F9AE02.roa (raw, json)
Hash identifier:          TFTa+KsxU9noqggPpa6OJcZm71rKvaK50+j5ijCik/o=
Subject key identifier:   9A:34:D3:93:37:97:0B:72:51:B1:FE:85:CA:9F:89:7A:E2:40:7F:D8
Certificate issuer:       /CN=A9131612/serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53
Certificate serial:       0B23
Authority key identifier: E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/279B0372DDF811EAA553705EC4F9AE02.roa
Signing time:             Fri 15 Jul 2022 07:25:39 +0000
ROA not before:           Fri 15 Jul 2022 07:25:39 +0000
ROA not after:            Sat 30 Sep 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        103.24.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl
                          rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Mar 2023 19:19:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2851 (0xb23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131612/serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53
        Validity
            Not Before: Jul 15 07:25:39 2022 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=62d11673-8fd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f7:ef:2b:2c:be:2b:07:b0:c4:45:a4:34:90:
                    93:a9:f7:4d:78:75:61:72:55:5f:37:0f:44:58:37:
                    c6:7b:fa:1d:f4:80:41:39:3b:7c:59:fe:66:9b:98:
                    2b:28:8b:ed:76:7b:fe:1d:2a:5f:dc:c5:3d:3f:9f:
                    02:cf:42:19:27:e3:2e:6a:d2:1e:f6:00:c8:66:9e:
                    c3:a1:da:5a:82:e1:d2:79:bb:46:ed:13:7d:d6:cc:
                    ae:33:56:49:e5:3e:d9:aa:c3:ae:5a:c3:b8:4b:e1:
                    c2:86:c6:b2:5a:a3:51:fb:8c:90:71:8d:77:2c:a8:
                    dd:f0:13:42:ff:ca:c0:0a:51:75:fa:bc:26:8d:8b:
                    e6:4d:86:00:9f:00:cc:a4:14:9d:0c:37:bb:b5:29:
                    00:1b:9f:82:52:d0:e9:91:0c:57:70:bf:d5:b7:69:
                    86:74:0c:74:c8:bd:03:44:9a:fc:b1:d0:ac:aa:52:
                    ab:66:f8:d6:3b:ba:17:08:5f:e2:4b:54:44:7b:a4:
                    00:12:30:69:da:cd:da:69:b4:d4:27:12:04:30:8a:
                    34:a1:4d:59:8e:20:ba:65:3e:c9:e9:e4:21:d2:60:
                    f9:9b:7d:96:87:63:f8:de:c2:23:62:70:72:f6:48:
                    e8:6c:2f:d5:ff:03:c8:de:92:bb:91:cb:a4:5d:b3:
                    68:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9A:34:D3:93:37:97:0B:72:51:B1:FE:85:CA:9F:89:7A:E2:40:7F:D8
            X509v3 Authority Key Identifier: 
                keyid:E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/279B0372DDF811EAA553705EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:4c:24:ef:e3:19:76:6d:9e:cf:c8:76:5f:cd:95:26:95:2b:
         51:28:04:9f:80:2d:95:79:e5:83:bb:f6:49:90:a2:62:2d:b7:
         62:5a:b7:86:ae:00:36:43:bd:a0:66:81:27:1f:53:b4:54:1e:
         74:dd:fc:95:6e:65:e8:af:5d:57:0f:56:62:3a:f2:cf:18:d2:
         cd:a2:00:18:ed:26:a6:d5:fb:d2:c0:ee:57:e0:a4:1f:43:5d:
         68:16:a5:4e:3b:34:7a:e3:48:5e:22:c7:46:45:24:20:54:ba:
         48:dc:84:8f:3a:a5:0b:ba:08:77:33:30:43:98:9d:07:42:cc:
         8e:56:21:42:d8:67:3b:e2:f0:84:5a:b0:e3:36:e0:a1:e9:a8:
         89:12:18:e4:6d:e3:26:12:2b:f6:40:09:eb:07:05:f7:34:02:
         22:05:5f:ea:06:91:fb:51:2f:7a:5e:5a:15:3a:de:0a:84:99:
         58:ea:c2:2e:bf:fc:92:f9:57:6f:c2:5d:65:eb:e6:a8:e4:8e:
         8d:4a:97:07:d4:3a:77:c1:b0:a6:1b:08:b1:25:9c:17:96:61:
         45:7d:6e:81:27:42:13:3f:80:64:1d:e4:9a:25:b0:76:ff:f3:
         3f:7a:40:80:d4:5a:36:f4:60:bc:68:a3:00:88:9e:d1:14:d7:
         b1:6f:2d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 15 11:53:17 2023 by rpki-client on console-fra.rpki-client.org