Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135EE5/87ED5A2E403E11EBAF4A465EC4F9AE02/A1C3E87AA5B011EE80D06016C4F9AE02.roa
File:                     A1C3E87AA5B011EE80D06016C4F9AE02.roa (raw, json)
Hash identifier:          +E2zQ1+mW3QLXR08Z87JxwiqxKKJIZm7DWo08/aWfmY=
Subject key identifier:   0E:97:75:37:44:13:F9:A9:F0:8D:AD:29:F8:99:66:BC:F3:21:18:39
Certificate issuer:       /CN=A9135EE5/serialNumber=ED6CEA6A6D2B042145FE12D32843EDFE67E8A27A
Certificate serial:       0617
Authority key identifier: ED:6C:EA:6A:6D:2B:04:21:45:FE:12:D3:28:43:ED:FE:67:E8:A2:7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Wzqam0rBCFF_hLTKEPt_mfoono.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135EE5/87ED5A2E403E11EBAF4A465EC4F9AE02/A1C3E87AA5B011EE80D06016C4F9AE02.roa
Signing time:             Fri 12 Jan 2024 23:31:17 +0000
ROA not before:           Fri 12 Jan 2024 23:31:17 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     134204
IP address blocks:        103.159.254.0/24 maxlen: 24
                          103.159.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135EE5/87ED5A2E403E11EBAF4A465EC4F9AE02/7Wzqam0rBCFF_hLTKEPt_mfoono.crl
                          rsync://rpki.apnic.net/member_repository/A9135EE5/87ED5A2E403E11EBAF4A465EC4F9AE02/7Wzqam0rBCFF_hLTKEPt_mfoono.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Wzqam0rBCFF_hLTKEPt_mfoono.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1559 (0x617)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135EE5/serialNumber=ED6CEA6A6D2B042145FE12D32843EDFE67E8A27A
        Validity
            Not Before: Jan 12 23:31:17 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65a1cbc5-9e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:64:6d:5f:71:07:06:2a:f3:f1:62:3f:77:24:
                    63:5f:94:ed:7d:73:34:2b:f9:ae:4f:ad:f3:e6:1e:
                    e9:06:5b:e9:8e:54:17:7b:30:ff:df:40:a0:3c:f1:
                    0f:0f:32:ea:be:09:ba:65:f4:87:95:5d:33:6d:3d:
                    9d:0d:14:06:af:33:5b:77:a3:69:3f:db:e1:34:1d:
                    a5:e1:1e:f2:4a:04:72:e2:9e:42:91:11:bf:c6:a6:
                    80:24:81:9c:94:da:20:f5:70:16:30:55:53:26:7e:
                    3e:bb:0d:60:b0:77:a5:ee:f1:75:0d:8a:a8:9f:2e:
                    d1:61:41:23:19:bd:4a:ae:cd:d9:5b:8f:28:de:63:
                    46:86:50:e8:36:83:9f:08:d5:d6:00:4d:3f:02:9d:
                    3b:f9:8e:6e:93:71:a0:1b:83:fc:41:06:ec:e5:8c:
                    e7:a5:d6:9f:b2:03:a9:25:05:81:6a:db:5a:db:d8:
                    6f:47:61:57:01:8b:a0:15:a8:05:02:86:93:44:73:
                    a3:e2:f9:55:3f:68:7c:8a:cb:d0:5b:ba:3d:41:c5:
                    76:57:bb:d3:68:f7:f6:fe:97:a3:40:b8:4c:65:bf:
                    6a:80:79:29:b7:db:a7:21:41:1f:96:e1:ae:33:57:
                    56:b8:35:57:f4:90:74:cd:24:22:e6:2a:ad:fc:76:
                    ee:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:97:75:37:44:13:F9:A9:F0:8D:AD:29:F8:99:66:BC:F3:21:18:39
            X509v3 Authority Key Identifier:
                keyid:ED:6C:EA:6A:6D:2B:04:21:45:FE:12:D3:28:43:ED:FE:67:E8:A2:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135EE5/87ED5A2E403E11EBAF4A465EC4F9AE02/7Wzqam0rBCFF_hLTKEPt_mfoono.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Wzqam0rBCFF_hLTKEPt_mfoono.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135EE5/87ED5A2E403E11EBAF4A465EC4F9AE02/A1C3E87AA5B011EE80D06016C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:0c:00:7d:b6:21:b4:23:10:21:2a:9d:2d:60:73:59:4a:13:
         50:00:e1:84:b4:53:be:96:6c:d1:7a:32:1b:28:d7:a9:c9:4e:
         6d:f6:da:32:32:fa:4b:b8:b2:03:07:5e:43:8d:e9:48:de:db:
         54:5e:09:cb:08:f0:22:21:00:04:0f:b4:bc:20:b1:4e:1e:06:
         57:82:a2:6d:f3:cd:b7:57:12:a6:c5:74:c4:f1:ba:8a:6f:d2:
         5e:36:c5:54:93:95:2d:d6:21:87:79:af:1b:11:1c:3e:88:b9:
         3f:9c:88:24:78:36:ec:f7:e4:56:d1:27:69:b5:80:85:12:5d:
         df:25:8b:4e:be:75:a7:29:8e:eb:80:75:d9:6d:a0:71:ed:a5:
         b9:82:39:37:51:b1:08:cc:73:00:01:8d:dc:58:90:ec:df:4b:
         e6:02:ae:06:44:34:68:e2:c1:04:40:41:ad:0e:67:75:88:a7:
         59:03:6d:6d:02:c1:ca:6b:bb:c4:b7:89:03:65:3a:50:8d:a9:
         ac:1e:89:62:40:cc:cf:7e:42:67:18:47:27:ab:7e:ac:9c:bd:
         2c:cb:09:3f:76:6d:05:94:1c:cb:15:c9:b2:5e:b5:33:54:06:
         dc:f9:ea:1a:36:86:69:b6:7d:a9:89:81:c9:5f:cb:18:0d:a5:
         a0:82:4f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:06 2024 by rpki-client on console-fra.rpki-client.org