Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/EF216A18A8E111EFA334B016C4F9AE02.roa
File:                     EF216A18A8E111EFA334B016C4F9AE02.roa (raw, json)
Hash identifier:          Flk71He97dfGazx59BWliW3X+nP8emfpsZtwhcWiBRY=
Subject key identifier:   DF:AC:DB:0B:C5:D3:45:3B:AA:6A:9F:4E:55:68:15:DC:B8:4C:DB:02
Certificate issuer:       /CN=A9144C70/serialNumber=0289E1E082B6DA1ABA5552840C0CAB02C2A3B74E
Certificate serial:       07
Authority key identifier: 02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/EF216A18A8E111EFA334B016C4F9AE02.roa
Signing time:             Fri 22 Nov 2024 14:56:20 +0000
ROA not before:           Fri 22 Nov 2024 14:56:20 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     137964
IP address blocks:        103.183.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.crl
                          rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 00:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144C70/serialNumber=0289E1E082B6DA1ABA5552840C0CAB02C2A3B74E
        Validity
            Not Before: Nov 22 14:56:20 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=67409b94-e58c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1f:d8:4d:bb:83:76:d8:e6:f0:67:f4:1c:99:
                    65:86:89:21:66:4c:2b:49:b0:4a:76:27:9a:3e:3a:
                    5f:d9:63:c0:aa:b0:eb:08:62:ec:b4:b0:cd:f7:c5:
                    38:f4:6c:dd:f2:8b:d1:9b:0f:3d:2e:01:19:35:2f:
                    44:d1:fa:42:6b:b0:16:52:7d:13:5a:60:ff:0c:62:
                    a2:88:aa:5d:e4:fe:b0:7a:9b:d2:af:77:34:b8:04:
                    74:cd:4e:f3:78:f6:93:3d:cd:73:69:ed:96:b1:07:
                    9c:c0:24:50:35:a4:80:ec:64:f6:3b:2a:05:da:56:
                    fe:03:6c:79:0d:73:f5:cb:5e:00:04:e6:e4:ce:54:
                    d0:a1:1f:e3:c1:d8:86:d8:47:74:28:2b:15:23:ab:
                    77:a8:d4:c3:f0:97:89:5b:2d:1e:3c:0b:c8:0d:0c:
                    01:16:24:f2:7a:4a:66:9d:42:e8:08:a2:43:00:bc:
                    a9:ee:b0:c7:f1:47:35:8a:f0:92:22:a1:d4:69:ab:
                    ef:5b:c3:ac:37:c6:ba:f9:06:ae:ad:75:95:a3:5d:
                    a0:ea:97:2f:90:2e:91:21:b6:40:f4:61:77:ca:fa:
                    c0:60:79:21:bd:19:3d:c2:16:80:fd:28:c6:39:ec:
                    9f:5d:5c:37:88:00:21:77:03:e8:3c:1e:c6:05:9d:
                    b5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AC:DB:0B:C5:D3:45:3B:AA:6A:9F:4E:55:68:15:DC:B8:4C:DB:02
            X509v3 Authority Key Identifier:
                keyid:02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/EF216A18A8E111EFA334B016C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:e9:58:cd:45:f2:05:c5:55:c4:4a:0b:2c:b8:c2:38:5d:72:
         fb:a4:98:6a:d3:11:e6:a9:87:de:c7:a8:73:00:70:a2:0f:89:
         79:30:05:73:c3:42:da:c1:68:22:b7:d7:88:0b:96:96:26:31:
         1f:9a:46:95:c6:6f:8c:d1:f5:35:f7:59:31:c6:06:b4:c5:33:
         b9:b1:f8:4a:b9:45:67:a8:78:a2:13:41:aa:99:63:3f:c9:1b:
         6a:f9:87:21:e0:77:9d:e5:ab:76:66:1e:26:ee:fb:83:32:fb:
         be:43:6a:c1:1d:7b:fc:bd:ca:1a:af:b3:bf:65:61:6f:64:e9:
         79:5f:19:8c:a0:a5:c7:d1:52:75:c9:c1:73:eb:01:60:14:eb:
         b0:e9:ab:86:7d:33:c8:10:94:de:3d:44:72:dc:eb:07:57:00:
         46:01:ab:49:f8:1b:03:39:72:a3:78:07:aa:15:db:ba:1b:ba:
         18:0a:5c:62:55:c3:8b:cb:91:35:ff:c4:d7:cf:01:d3:34:b0:
         3e:d4:fc:3e:bb:55:69:47:6e:86:8f:1d:e8:a4:e2:11:fc:45:
         62:2f:11:ba:09:be:19:c1:46:e4:c3:07:74:f5:7e:d1:f2:da:
         03:f6:66:87:0d:61:2f:cf:f9:d4:9c:8f:88:b7:75:d6:9f:69:
         9d:f9:7b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:38 2024 by rpki-client on console-ams.rpki-client.org