Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/A1A1946E3E8F11EF90A1D97EC4F9AE02.roa
File:                     A1A1946E3E8F11EF90A1D97EC4F9AE02.roa (raw, json)
Hash identifier:          Nou717qOczurdCcpUzy1PTlPyGqsvyRnk5UeNOA/5Ho=
Subject key identifier:   B9:20:AD:27:FE:67:21:3D:48:52:31:B6:72:38:59:FA:CA:D4:01:AD
Certificate issuer:       /CN=A9134167/serialNumber=55A36DF2484BB465AC33019C070B392745240227
Certificate serial:       02
Authority key identifier: 55:A3:6D:F2:48:4B:B4:65:AC:33:01:9C:07:0B:39:27:45:24:02:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VaNt8khLtGWsMwGcBws5J0UkAic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/A1A1946E3E8F11EF90A1D97EC4F9AE02.roa
Signing time:             Wed 10 Jul 2024 07:40:09 +0000
ROA not before:           Wed 10 Jul 2024 07:40:09 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     132587
IP address blocks:        103.245.74.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.crl
                          rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VaNt8khLtGWsMwGcBws5J0UkAic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Sep 2024 04:46:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134167/serialNumber=55A36DF2484BB465AC33019C070B392745240227
        Validity
            Not Before: Jul 10 07:40:09 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=668e3ad8-0c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8e:3d:e5:d1:a0:87:1c:5e:07:4b:55:41:cb:
                    d7:39:95:09:fb:a9:0d:25:7f:42:c4:9a:75:47:e7:
                    60:16:3b:a7:f6:ef:d0:5c:48:0f:64:22:bc:9c:6b:
                    4a:80:4e:c6:c5:d6:ea:d2:0c:db:ea:ea:cd:0f:bb:
                    a0:98:d6:73:53:58:0a:82:57:ce:e3:22:21:26:ce:
                    77:0b:f2:11:0b:99:73:23:06:6e:8d:01:af:43:5c:
                    c6:af:72:95:05:71:c7:f6:ba:aa:82:86:32:78:ba:
                    11:fb:e8:20:ac:6d:52:e6:e2:fc:8e:22:bf:84:7f:
                    cd:f0:9a:2f:21:b9:16:ff:3b:82:ea:29:f6:19:12:
                    43:de:1c:cf:f2:36:fc:e0:7c:eb:d2:41:aa:d5:da:
                    57:cd:e2:54:34:81:e6:54:28:c2:fa:25:5f:de:f5:
                    bd:38:3d:e0:cc:93:91:c0:60:2d:13:7b:48:3b:e6:
                    c9:1b:2e:e8:8a:74:96:fd:93:5a:15:89:e2:dc:42:
                    2e:0b:a1:ae:97:f3:a0:9b:2c:90:dc:c3:6e:41:e9:
                    ab:6b:09:21:df:c7:38:c1:ec:60:d6:d9:86:5b:58:
                    c4:51:34:aa:96:ff:e8:3d:fb:47:4c:89:98:df:28:
                    57:4a:9e:53:12:9f:f2:49:00:4a:4e:4f:e6:ee:00:
                    56:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:20:AD:27:FE:67:21:3D:48:52:31:B6:72:38:59:FA:CA:D4:01:AD
            X509v3 Authority Key Identifier:
                keyid:55:A3:6D:F2:48:4B:B4:65:AC:33:01:9C:07:0B:39:27:45:24:02:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VaNt8khLtGWsMwGcBws5J0UkAic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/A1A1946E3E8F11EF90A1D97EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:d7:31:d6:58:ca:55:89:22:aa:8f:00:f9:b3:a2:2b:7a:31:
         70:bc:29:86:a6:45:86:db:62:98:73:c0:d8:58:c4:30:79:e7:
         2c:ea:ca:ea:d1:67:49:ea:78:24:ec:e4:6e:02:5a:c7:89:21:
         97:ea:3d:51:e2:1f:f8:77:3a:c2:05:15:98:3f:06:d1:16:b7:
         38:68:67:2f:12:14:01:3a:6c:3b:0e:c6:56:c3:c1:06:ef:8c:
         18:f0:ba:ce:47:fe:8f:0c:70:4e:a5:63:18:72:db:74:1c:3d:
         35:bd:d5:3f:7b:3e:db:87:05:5c:e3:8a:0b:7f:55:ae:84:e9:
         34:a4:0b:d2:c3:44:fb:46:f6:11:fe:2a:6d:c5:0e:18:cb:3a:
         a5:18:3e:be:88:82:19:43:70:c5:58:5d:dc:d7:9b:ba:63:21:
         9c:96:83:d4:60:76:fa:d0:f5:c9:35:86:1f:b0:8d:35:c0:4f:
         17:92:0b:02:03:1c:5e:7a:6a:f5:fe:3b:e1:46:d3:25:1a:ab:
         f5:c4:ba:f4:61:94:d9:17:44:c5:8e:f0:57:1e:ac:39:7a:ac:
         3b:c5:4d:41:20:79:cf:5e:2f:45:0e:a0:9c:cf:e1:67:df:45:
         cc:a6:26:75:c2:1a:3e:6c:4d:18:a9:8e:fe:32:ca:a0:a8:a9:
         6e:78:19:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 07:38:14 2024 by rpki-client on console-fra.rpki-client.org