Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/2FCAEB4AE15311EEBE7C925BC4F9AE02.roa
File:                     2FCAEB4AE15311EEBE7C925BC4F9AE02.roa (raw, json)
Hash identifier:          vRf1NZykh+ineSOtW66kwwiiGz6ZiMQZ7UaMTI/4uZQ=
Subject key identifier:   C4:9A:F2:70:76:1D:A0:DC:F7:47:4C:05:40:7C:63:48:93:26:6A:8F
Certificate issuer:       /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial:       0634
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/2FCAEB4AE15311EEBE7C925BC4F9AE02.roa
Signing time:             Tue 03 Sep 2024 01:14:19 +0000
ROA not before:           Tue 03 Sep 2024 01:14:19 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     5068
IP address blocks:        103.231.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
                          rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1588 (0x634)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
        Validity
            Not Before: Sep  3 01:14:19 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66d662eb-4b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ba:9a:c8:b1:b1:50:b2:3e:c0:1b:38:aa:c6:
                    fd:09:2e:aa:96:45:5c:11:ca:9c:e8:cc:84:3d:46:
                    27:27:6d:48:44:32:de:17:51:cc:72:93:f8:07:d8:
                    28:9e:e8:8c:43:3a:b4:92:14:e8:d8:43:8c:40:2f:
                    3b:6b:ae:86:7c:8b:5a:ad:4d:ff:7d:59:2b:48:d1:
                    c6:5f:99:0a:15:b4:42:03:b0:f2:d8:80:e1:3f:4e:
                    8b:2b:b8:1e:9b:f3:be:a5:de:32:65:c8:26:30:0f:
                    04:52:99:ac:fb:65:8f:63:27:a9:b9:11:1f:85:ce:
                    c4:17:fd:2e:37:c0:90:71:a0:3b:88:29:42:8f:01:
                    1d:04:68:ef:13:40:0a:d9:c7:02:fa:cc:e3:d2:20:
                    fe:b4:fe:14:86:15:39:57:09:29:5b:d2:a2:9a:6c:
                    28:a1:89:c4:71:ba:fe:d9:a5:4a:eb:35:92:1e:74:
                    15:e9:9d:d3:dc:84:84:7c:12:03:a7:55:95:b4:74:
                    08:d6:86:6d:53:1d:7b:94:94:50:65:7f:e5:2c:ec:
                    cb:a7:61:5c:bb:1c:07:85:a5:cc:35:f8:0b:2b:57:
                    23:54:d9:92:ce:53:1b:fb:79:b6:ea:61:81:60:fb:
                    d4:46:43:b4:7e:63:b5:36:2c:ce:9d:2e:67:db:33:
                    15:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:9A:F2:70:76:1D:A0:DC:F7:47:4C:05:40:7C:63:48:93:26:6A:8F
            X509v3 Authority Key Identifier:
                keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/2FCAEB4AE15311EEBE7C925BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:6d:a9:5b:a1:39:ac:3a:7e:17:ad:01:12:8f:16:49:7c:74:
         34:50:51:2d:c0:b5:e8:30:37:32:c1:d2:66:38:5b:3c:a0:0b:
         24:10:2c:ab:2a:e1:1c:47:4d:b5:f0:2b:04:d0:f8:69:81:55:
         56:d8:b6:1f:2d:e4:37:43:d9:07:1e:e4:f1:85:32:6d:3c:90:
         00:d5:5d:53:16:41:a8:06:cd:f0:58:b6:8a:b0:8f:a4:a4:af:
         e7:05:58:75:e9:41:c4:a5:27:7b:ae:25:bd:79:e7:b1:ec:d0:
         17:71:a5:c2:84:db:98:c1:99:0a:ec:79:35:86:ba:47:66:c1:
         3e:18:57:d3:8d:c1:d4:a0:97:4c:8a:8f:04:22:5c:b1:96:94:
         e5:81:9e:61:ca:69:c9:ac:3a:40:4e:2a:a6:11:cb:68:7f:26:
         60:53:07:12:73:3b:21:92:e7:94:40:a4:d7:d3:b8:f0:82:b2:
         03:5a:6c:a5:a7:9e:0f:cb:de:0c:20:97:4f:4f:35:fd:1b:98:
         59:d3:5d:03:da:65:ca:68:a8:1e:2d:c3:95:9d:78:50:d0:40:
         f1:32:ba:82:7f:b0:3e:7d:cd:52:4a:78:70:42:b0:0d:a9:c3:
         46:83:b1:3e:93:f5:35:dc:b3:0f:ff:f8:62:5d:07:92:b6:91:
         b2:49:66:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:56 2024 by rpki-client on console-ams.rpki-client.org