Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/37FE0B120C0011EAA414FC4AC4F9AE02.roa
File:                     37FE0B120C0011EAA414FC4AC4F9AE02.roa (raw, json)
Hash identifier:          VdMfsAJk3V7QieqJhJSnIh1YzoUvum5VdjclyzxhM5o=
Subject key identifier:   77:D7:96:E3:3A:43:20:AB:2D:C0:71:1B:24:06:BF:E3:B3:BC:69:EF
Certificate issuer:       /CN=A9131ABD/serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD
Certificate serial:       0BB7
Authority key identifier: 2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/37FE0B120C0011EAA414FC4AC4F9AE02.roa
Signing time:             Mon 24 Jun 2024 19:20:44 +0000
ROA not before:           Mon 24 Jun 2024 19:20:44 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     40676
IP address blocks:        103.77.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl
                          rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 18:20:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2999 (0xbb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131ABD/serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD
        Validity
            Not Before: Jun 24 19:20:44 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=6679c70c-9bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:27:ec:64:b1:62:d5:c3:04:3b:07:8b:4c:bc:
                    54:6c:2c:52:2b:fd:88:19:74:93:40:ab:bd:6c:fd:
                    30:3d:7d:b5:1c:4b:7b:c1:bf:e9:ae:44:ea:e3:31:
                    18:8d:0e:f0:19:a4:fd:17:73:96:f4:b7:0a:c4:a2:
                    ab:4b:24:7c:20:83:ed:9d:7f:9e:44:2f:3a:70:c8:
                    f4:22:ed:d9:a7:9a:a8:7c:22:64:4a:44:57:3f:8c:
                    76:99:19:29:c4:ce:ff:b0:38:f9:b8:19:91:01:7a:
                    c3:33:25:fd:d4:3a:77:f9:6d:0a:60:78:8c:5c:21:
                    f8:24:50:8c:28:92:3b:9c:54:73:c5:8e:97:45:40:
                    a0:96:53:b3:45:d2:50:cf:a3:a5:23:ea:10:93:9f:
                    cb:55:e7:9e:bf:fb:72:68:4a:9d:6c:4a:d1:90:56:
                    78:b8:9b:2c:90:33:8f:4c:bb:ac:9d:ef:6d:f3:65:
                    b2:c7:d6:2a:96:f3:6b:d6:a5:04:fe:71:1f:32:01:
                    5f:be:a1:26:3a:5b:31:0f:71:da:e5:43:e5:45:d8:
                    03:38:b8:85:51:b9:f0:5f:d1:d4:ac:a4:df:cd:0a:
                    6b:da:22:b5:b4:4a:1f:6b:33:e2:f9:7a:75:c8:fb:
                    75:ab:31:c4:35:21:02:18:20:5a:4b:b2:62:ef:cd:
                    af:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D7:96:E3:3A:43:20:AB:2D:C0:71:1B:24:06:BF:E3:B3:BC:69:EF
            X509v3 Authority Key Identifier:
                keyid:2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/37FE0B120C0011EAA414FC4AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:92:3c:87:d0:1c:ed:af:e8:ff:e8:92:92:99:36:55:ad:33:
         0c:41:7b:5f:fc:b9:17:78:94:6d:bc:16:42:c6:24:28:ae:d4:
         04:87:23:f1:af:be:66:6f:7d:53:4b:d3:53:f7:58:b0:c2:64:
         54:83:73:0b:7f:41:b6:65:53:f9:48:ef:0d:2a:90:61:7d:55:
         76:ee:51:17:bb:9b:33:b5:2b:ad:80:59:42:e5:74:23:99:8b:
         35:fe:cb:5c:cb:2b:78:1d:94:d1:c6:97:00:95:51:77:1b:5a:
         c8:63:a5:21:e4:2b:2b:92:6c:f5:9b:39:12:ec:82:38:9e:df:
         7f:ef:62:fc:90:56:85:9c:51:ab:b4:01:85:b6:54:59:68:13:
         db:99:92:a2:4c:ca:c2:f8:7f:1e:00:d7:71:fa:e5:be:8f:e4:
         8f:92:fb:fa:ea:30:46:37:82:00:fd:29:60:ec:cf:85:e8:29:
         d9:e8:be:83:05:8d:2e:38:9c:45:55:20:45:32:ec:f2:29:37:
         c8:b7:aa:38:c3:9e:87:84:c5:e4:ca:3a:68:1f:8b:b5:e1:80:
         69:6a:96:6d:17:09:4d:1a:9a:d7:f7:8b:5b:3a:04:32:22:62:
         76:81:8b:1c:14:ca:1e:31:f3:82:0b:4c:a2:e9:9e:06:a7:4a:
         e8:d6:6b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:07:21 2024 by rpki-client on console-fra.rpki-client.org