Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/65B35A86577011EC8F00A65AC4F9AE02.roa
File:                     65B35A86577011EC8F00A65AC4F9AE02.roa (raw, json)
Hash identifier:          +KeTCKuOfeRgu5RimCaRxKh/0Sa4v6tZDxtG+Krp5ho=
Subject key identifier:   A4:6B:0F:36:85:DD:3E:1B:E0:37:D0:8C:C9:6E:4E:69:2A:55:7C:E0
Certificate issuer:       /CN=A9146304/serialNumber=4614259427464874BE7DEB7BF421272CB23DA188
Certificate serial:       101F
Authority key identifier: 46:14:25:94:27:46:48:74:BE:7D:EB:7B:F4:21:27:2C:B2:3D:A1:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/65B35A86577011EC8F00A65AC4F9AE02.roa
Signing time:             Fri 12 Jul 2024 18:25:32 +0000
ROA not before:           Fri 12 Jul 2024 18:25:32 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     56311
IP address blocks:        103.168.70.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.crl
                          rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4127 (0x101f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146304/serialNumber=4614259427464874BE7DEB7BF421272CB23DA188
        Validity
            Not Before: Jul 12 18:25:32 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=6691751c-0f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b1:99:97:46:b0:d8:a5:5b:15:58:b2:c3:fe:
                    c4:20:dd:a1:90:0f:0e:1f:ea:b8:57:6c:2e:48:48:
                    b6:1c:b7:47:fe:75:f1:f9:5f:dc:c0:6e:18:d9:41:
                    e7:61:57:9f:0d:7c:09:ed:eb:09:de:38:8f:eb:38:
                    52:4c:c4:5f:69:ca:2d:b2:d7:b8:49:df:f6:80:ed:
                    73:27:90:14:76:e0:e6:be:26:23:68:c0:56:17:99:
                    fd:5c:b3:22:b5:1e:87:0d:71:e6:72:8a:59:53:b7:
                    ca:96:3b:e2:d0:07:e8:70:9a:1a:94:42:2a:f1:b4:
                    bd:07:65:bf:fe:6f:40:41:44:fa:88:49:fc:cb:47:
                    45:e0:37:b8:48:de:2c:0c:44:07:ad:b7:9c:3d:42:
                    eb:a7:30:c5:b0:ac:b2:84:8c:61:92:43:dc:6e:92:
                    9f:b4:9b:73:78:7e:96:ed:7f:84:27:75:1e:22:47:
                    35:db:1f:39:38:a9:03:d5:e9:f4:f7:c7:97:6a:1d:
                    54:c8:cf:ef:d0:73:9f:69:02:7f:8a:5d:77:88:6b:
                    30:c8:91:02:51:9a:8f:fa:ad:75:fd:e9:c0:7a:e5:
                    d2:f8:21:da:71:0e:aa:fb:cb:5c:69:84:4f:f0:39:
                    48:d6:f5:5d:f1:96:26:85:b6:72:e9:62:56:91:77:
                    52:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6B:0F:36:85:DD:3E:1B:E0:37:D0:8C:C9:6E:4E:69:2A:55:7C:E0
            X509v3 Authority Key Identifier:
                keyid:46:14:25:94:27:46:48:74:BE:7D:EB:7B:F4:21:27:2C:B2:3D:A1:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/65B35A86577011EC8F00A65AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:6f:91:ae:89:b6:f2:6d:a2:21:39:60:ac:58:6d:ff:f1:c7:
         bf:72:77:e8:1b:50:95:ec:ec:97:89:fb:fb:b4:c4:e2:4b:b2:
         e4:2e:0e:8e:73:04:aa:7b:12:ab:2d:25:89:85:14:7b:70:da:
         f1:45:02:4a:f6:6f:48:2b:4d:16:02:1e:57:37:fe:48:c3:ad:
         e7:c8:70:07:b4:78:97:43:56:5e:20:3d:96:91:bd:34:03:7e:
         dd:47:f6:25:18:ab:91:bb:7e:e6:df:9c:a8:35:f4:dd:50:f0:
         f2:eb:5c:36:69:b8:13:62:aa:24:63:60:21:82:a8:a6:cf:5e:
         41:e0:0e:6a:1a:25:33:cd:ea:04:1f:3e:b4:7c:1e:1e:d8:d1:
         de:e5:9a:38:3b:21:bf:04:7f:05:82:16:c2:10:00:39:6a:a5:
         33:d8:0d:ec:d7:ce:d6:95:87:b9:7d:52:2c:c7:49:9c:41:4f:
         54:0f:c8:82:86:a2:f7:1c:ab:85:69:1c:fa:5f:74:ce:e2:28:
         65:68:41:9b:25:50:b6:6f:f8:c4:0e:ef:75:42:e5:59:10:87:
         fa:2a:9b:a4:93:f6:3c:89:27:89:7a:70:f9:7f:ed:d6:40:4b:
         c6:b9:cd:b4:f5:9f:00:f2:96:a2:64:39:ae:04:d5:e3:6e:68:
         7d:53:3f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:57 2024 by rpki-client on console-fra.rpki-client.org