Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/3F3E4D0426F711EE81AD9A45C4F9AE02.roa
File:                     3F3E4D0426F711EE81AD9A45C4F9AE02.roa (raw, json)
Hash identifier:          uxYOnF3d63rIS8oNPOqAfailLlmmUvubJ8OVRGowk6c=
Subject key identifier:   79:30:35:38:AD:A0:CB:DA:59:EE:5C:EF:4E:D6:55:58:65:FB:F9:1C
Certificate issuer:       /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial:       0639
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/3F3E4D0426F711EE81AD9A45C4F9AE02.roa
Signing time:             Tue 03 Sep 2024 01:14:24 +0000
ROA not before:           Tue 03 Sep 2024 01:14:24 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     63902
IP address blocks:        103.231.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
                          rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1593 (0x639)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
        Validity
            Not Before: Sep  3 01:14:24 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66d662ef-1987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:70:a9:ad:5c:69:66:d8:4c:d3:f7:b0:12:55:
                    5c:a7:be:c7:86:dd:13:52:19:81:1a:20:cb:af:00:
                    56:de:77:70:8e:04:09:a3:21:58:73:51:52:d2:93:
                    63:dc:dc:24:83:42:4b:a8:93:f8:f6:2c:0b:bf:cc:
                    b2:73:3a:92:62:8b:aa:c4:53:d1:0c:78:c3:b8:26:
                    cf:77:ab:43:64:6c:42:57:79:91:55:b8:7c:92:a0:
                    ac:07:a0:7f:8d:b9:b7:ec:33:58:7c:20:ce:d9:54:
                    0f:af:6f:7b:2b:94:fc:79:9d:e0:c7:6e:69:e8:f7:
                    bd:34:2d:2c:02:61:e0:0c:3c:f7:29:50:f6:e9:50:
                    f9:c8:29:a7:66:14:6d:11:02:7c:07:37:60:37:d0:
                    78:a4:b9:39:9f:f8:e4:8c:5b:17:14:c4:6d:c3:f8:
                    5c:6e:33:84:6f:d2:dc:26:23:9d:b0:c8:cc:10:c5:
                    c8:3b:05:cf:9e:d9:97:21:78:11:88:d2:69:17:b5:
                    93:ca:f9:59:29:e9:15:68:a6:79:b7:54:70:e5:bf:
                    94:84:78:4e:1f:93:74:2a:0f:38:86:64:62:ca:4e:
                    2c:99:d3:05:91:07:e0:5f:f9:05:2f:94:cb:e7:4c:
                    ca:c9:2d:85:d5:5f:c2:9e:c7:02:a3:3a:4c:39:52:
                    5a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:30:35:38:AD:A0:CB:DA:59:EE:5C:EF:4E:D6:55:58:65:FB:F9:1C
            X509v3 Authority Key Identifier:
                keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/3F3E4D0426F711EE81AD9A45C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:9c:e7:5a:b0:a3:82:bd:72:2e:cd:34:70:d4:13:83:5a:d0:
         ba:88:5a:03:52:48:2f:28:64:1a:78:4b:e9:fb:b6:be:74:9a:
         51:c6:81:8c:e8:23:59:58:e5:3c:00:64:0e:cc:14:e7:6f:f7:
         59:5a:33:43:c2:d0:ef:4f:a4:cc:2f:df:95:fa:9c:9c:df:c2:
         76:d7:12:b1:a0:36:b4:99:34:cf:8c:af:2e:b5:b8:84:21:8c:
         ec:c5:f8:bf:4a:4c:cf:72:4a:45:e6:e1:64:1b:a0:eb:32:dd:
         3d:a8:4c:27:77:bf:94:5c:68:07:a3:1f:c8:ca:c0:85:be:fa:
         f8:17:f6:7d:14:22:7c:d5:15:63:8b:e2:b3:8d:05:60:9b:d5:
         f9:fb:b2:a5:de:53:20:b2:f7:1b:08:3c:d5:1f:00:55:aa:ff:
         2a:19:7c:e6:3b:3f:54:94:a8:d2:4f:79:a6:23:c4:75:eb:1a:
         cf:e5:73:87:f4:eb:ee:77:db:b2:20:51:bb:6a:06:64:b8:dc:
         a8:a8:06:ad:cc:9c:f5:fc:75:4b:1d:97:e5:36:ae:11:54:5a:
         ac:a8:43:6a:8f:2c:b4:70:1c:c7:59:06:6c:de:4e:78:1a:dd:
         90:68:f8:b7:74:0d:69:71:b5:ed:9b:4f:45:5b:00:dc:f4:a5:
         69:3f:26:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:56 2024 by rpki-client on console-ams.rpki-client.org