Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/0A9169068B7811EFB0820F7AC4F9AE02.roa
File:                     0A9169068B7811EFB0820F7AC4F9AE02.roa (raw, json)
Hash identifier:          /SXFwGTFcVblPdH41RPSnoPcqDA5yZHaHKUnqvrV30Y=
Subject key identifier:   6D:03:1F:22:F6:23:63:16:2A:63:3C:29:96:D3:D7:41:78:87:0C:2B
Certificate issuer:       /CN=A9132FA5/serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7
Certificate serial:       0A42
Authority key identifier: 8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/0A9169068B7811EFB0820F7AC4F9AE02.roa
Signing time:             Wed 16 Oct 2024 04:35:16 +0000
ROA not before:           Wed 16 Oct 2024 04:35:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     148968
IP address blocks:        103.87.210.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl
                          rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 17:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2626 (0xa42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132FA5/serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7
        Validity
            Not Before: Oct 16 04:35:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=670f4284-6c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d1:42:10:de:2b:13:81:4b:d8:15:bc:e7:e5:
                    82:00:ba:2c:6e:9f:4e:83:86:5f:54:de:a8:c8:5a:
                    0e:8d:88:b9:ff:94:0d:bc:8a:4b:c8:45:39:1d:a9:
                    a9:46:bb:18:5f:49:d2:27:e7:d4:db:61:d4:3d:3d:
                    bd:a9:a3:43:6d:0b:ce:59:b4:66:ff:5b:18:4c:87:
                    3b:97:64:c7:c2:5c:21:2e:cc:d8:9f:34:db:2d:33:
                    d8:65:c4:bc:3c:81:cf:fb:22:89:ce:fd:41:c5:91:
                    37:44:f7:ee:96:ba:ac:08:89:58:d6:5d:da:5d:41:
                    21:cd:00:6d:d0:40:19:6b:08:40:9f:1a:51:e3:9b:
                    7c:ff:3c:a1:91:48:9f:d5:c5:fb:49:9b:cb:e2:c9:
                    c1:96:3e:c6:da:51:21:f3:f9:b8:d8:db:92:80:60:
                    1a:45:43:84:ae:df:41:f9:6c:38:ab:6a:ac:18:b4:
                    da:ca:d6:94:89:d5:82:85:6e:1d:6b:4c:d4:77:58:
                    d9:a0:ff:73:72:c1:ca:1a:ad:70:e0:d6:e6:0a:7c:
                    d0:17:2a:f1:18:09:4c:69:02:4f:02:77:63:14:e5:
                    6d:80:f4:3d:80:47:6d:b6:98:2f:09:69:dc:d0:73:
                    c7:7e:c9:98:1a:67:a2:7d:1d:e6:0d:04:f9:cf:57:
                    b9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:03:1F:22:F6:23:63:16:2A:63:3C:29:96:D3:D7:41:78:87:0C:2B
            X509v3 Authority Key Identifier:
                keyid:8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/0A9169068B7811EFB0820F7AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:37:e4:b0:29:32:64:72:ab:4a:89:bf:f3:9f:5c:b6:69:3c:
         ed:2b:d9:f3:8c:f8:fc:1e:c1:30:2e:84:50:0d:02:4d:45:94:
         f2:0e:b5:a9:13:b8:16:75:a7:a1:7d:b1:05:d3:22:7a:72:17:
         a9:e3:d5:ad:64:3d:34:f0:89:19:63:ae:3d:b2:70:d6:4d:af:
         e3:60:79:36:12:d6:9a:67:64:02:42:9a:99:ca:04:b4:6d:db:
         40:29:31:b9:4c:f8:2f:9a:7c:c5:75:56:c8:eb:68:7f:bb:7a:
         f9:02:86:e2:1c:11:28:ab:a9:b9:37:9d:8e:56:06:ce:30:8b:
         0f:c1:3d:ec:f0:4a:70:ce:df:33:e7:76:9d:d3:72:3e:e0:41:
         7f:5b:34:69:15:75:c0:c9:a0:6c:dc:28:cb:a2:78:3a:cc:b3:
         b9:4a:5c:fe:c7:06:52:12:d2:a9:98:f9:aa:5b:e7:50:b0:ac:
         1a:5b:82:a7:48:77:da:c4:dc:1f:21:51:00:de:fa:3a:47:aa:
         62:26:2d:41:6e:bf:5a:0e:94:ee:dc:d3:fd:aa:87:79:03:b5:
         0e:6c:43:5d:c0:fe:99:97:ec:5f:23:d8:89:0b:f5:b8:36:48:
         97:7e:f0:d3:a1:bb:82:3b:01:1e:10:b6:07:1e:92:1f:6c:28:
         39:a6:4d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:45:01 2024 by rpki-client on console-ams.rpki-client.org