Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/120AADD0A9F311EE9164C011C4F9AE02.roa
File:                     120AADD0A9F311EE9164C011C4F9AE02.roa (raw, json)
Hash identifier:          HVuTVns1e8wBtoQnqsTE5ZrbPTMWGo3YfzeHEh0BOxo=
Subject key identifier:   FC:39:83:01:07:02:A5:98:78:6E:29:4C:A3:AD:F4:E4:AA:B2:C1:9F
Certificate issuer:       /CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA
Certificate serial:       CA
Authority key identifier: AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/120AADD0A9F311EE9164C011C4F9AE02.roa
Signing time:             Wed 25 Sep 2024 04:19:17 +0000
ROA not before:           Wed 25 Sep 2024 04:19:17 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     399077
IP address blocks:        103.158.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl
                          rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA
        Validity
            Not Before: Sep 25 04:19:17 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66f38f45-4f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:23:df:b7:40:f4:68:bc:d7:bf:a1:4d:dc:2d:
                    cf:cb:3c:49:61:de:8d:74:3b:2e:c4:48:21:4c:d2:
                    01:79:a9:06:28:d7:f7:e9:08:e0:40:89:78:88:bb:
                    68:c7:c4:c4:8d:15:8a:19:7b:3b:42:7e:d9:34:1f:
                    b1:8f:2c:a4:54:ba:7b:50:44:ca:ac:e4:47:a3:76:
                    1f:e3:44:d6:0a:46:77:69:d1:e3:99:d5:f3:6d:a7:
                    c1:a2:36:39:8a:4f:bc:be:a7:89:7e:93:c6:24:1b:
                    10:4b:f9:a4:7d:4e:75:6e:29:f1:54:c2:e3:8d:1d:
                    4c:bf:37:47:c4:70:4b:11:a0:3e:c3:ff:ab:22:a0:
                    7a:ce:51:54:23:60:57:ec:1c:6b:e5:3d:fd:d7:8c:
                    b3:26:96:fe:95:85:94:99:a8:58:0d:a5:24:bd:86:
                    71:b0:7e:d9:55:56:18:9c:ac:63:9d:5a:31:3c:ea:
                    04:f9:50:c7:33:8a:b2:89:ba:a4:b5:b4:90:28:0e:
                    3f:07:d1:44:4d:0c:93:41:31:41:d3:58:2a:71:73:
                    86:cf:17:58:a6:d1:8c:18:73:4c:57:45:67:68:a7:
                    16:d0:11:dd:3a:c1:f9:e7:a4:5b:8f:fb:97:f1:d8:
                    fc:09:c8:c7:d2:14:95:e4:56:49:01:f2:da:95:4f:
                    2f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:39:83:01:07:02:A5:98:78:6E:29:4C:A3:AD:F4:E4:AA:B2:C1:9F
            X509v3 Authority Key Identifier:
                keyid:AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/120AADD0A9F311EE9164C011C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:d4:a3:80:3c:b8:d4:5b:18:f6:b7:b8:22:ca:4b:8a:92:03:
         c9:23:9a:fb:e6:5c:c0:0f:d4:22:ca:88:37:a5:e5:ba:f9:f7:
         a6:ec:f4:34:16:be:ef:56:7d:65:e3:9f:3d:83:6d:d7:7b:10:
         1d:e6:f1:e2:8c:3d:ce:2e:20:a5:50:1b:ed:97:24:05:25:06:
         61:4a:ed:27:0b:78:3f:c5:e1:fc:28:eb:e8:be:ea:4f:7f:53:
         ad:3e:c2:3d:9a:4f:7a:37:30:12:f0:ef:70:14:53:11:c3:37:
         6b:e1:1b:65:ed:5c:b9:37:04:f9:c4:78:3a:d9:98:1e:e7:8a:
         3f:c1:3c:da:48:c8:84:0f:70:87:e1:fd:26:75:60:06:fa:c7:
         54:a5:20:9c:bb:3e:5a:fe:53:bb:1a:b2:ab:cd:14:76:63:f0:
         9d:27:40:26:fa:59:64:43:20:cd:c2:c6:00:4f:f2:f9:b8:35:
         5c:2f:5f:ea:a1:62:95:a0:75:04:44:ea:df:94:62:df:60:cd:
         c2:3e:68:78:60:dc:e6:c9:44:3f:d1:f4:56:4c:0e:32:c0:19:
         ce:ec:d5:89:5f:25:a6:a2:98:95:94:62:3d:8d:07:8d:82:1d:
         b2:91:2b:44:f0:3e:f3:f9:e1:6f:9c:69:d8:7b:6b:00:cc:89:
         8e:be:18:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:03 2024 by rpki-client on console-ams.rpki-client.org