Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/6B78FC0C892511EFA94C8B24C4F9AE02.roa
File:                     6B78FC0C892511EFA94C8B24C4F9AE02.roa (raw, json)
Hash identifier:          dQLpDX6rMIQKREIwebPWLjdviqSFAY8GEyyG9D//O7k=
Subject key identifier:   82:7B:43:D0:BD:9E:0F:D3:EC:45:ED:74:00:0A:F7:35:4B:3C:9D:5E
Certificate issuer:       /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
Certificate serial:       195C
Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/6B78FC0C892511EFA94C8B24C4F9AE02.roa
Signing time:             Sun 13 Oct 2024 05:38:48 +0000
ROA not before:           Sun 13 Oct 2024 05:38:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     32787
IP address blocks:        203.97.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl
                          rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 16:27:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6492 (0x195c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
        Validity
            Not Before: Oct 13 05:38:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=670b5ce8-3745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ce:12:1e:30:54:a2:95:81:83:20:86:39:97:
                    43:df:1b:a3:19:1b:80:a1:2d:e6:3e:ad:7e:39:09:
                    95:79:fd:e1:2b:b9:8d:b5:b0:ec:8f:76:31:d6:c2:
                    42:62:78:c2:5b:f4:ed:b3:d9:84:93:2d:1a:2c:3e:
                    02:38:2d:b1:b7:17:63:df:2d:66:e5:16:55:61:69:
                    9d:af:74:7a:ef:c6:82:01:80:9e:80:de:45:ac:ed:
                    66:59:d0:94:8e:61:5a:54:a1:4d:b2:c7:ba:03:ec:
                    8d:a3:b5:b1:f5:cb:ac:c0:99:33:1f:6d:73:76:07:
                    ab:e9:8a:f8:63:c0:12:4a:f9:f6:5d:6d:db:e0:76:
                    c9:a1:5f:69:34:d2:64:ef:51:d7:40:01:9e:6e:86:
                    78:1c:7d:47:b4:61:5f:1a:1f:32:26:10:d6:a3:9c:
                    bf:54:cd:0c:5e:dc:9c:ea:c3:a8:e8:28:44:49:e4:
                    80:cd:a2:5e:09:90:60:e9:a6:11:6e:0a:73:fc:fe:
                    cc:7d:eb:bf:e3:15:71:52:76:75:18:f6:68:1a:ef:
                    61:60:fd:84:88:8f:cd:4a:04:fb:30:4b:8a:da:d6:
                    ab:78:d3:a5:6d:87:a1:6d:95:75:c0:27:51:32:1a:
                    79:35:a8:c6:ba:0c:d0:bb:46:fb:e6:69:96:5d:8a:
                    96:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7B:43:D0:BD:9E:0F:D3:EC:45:ED:74:00:0A:F7:35:4B:3C:9D:5E
            X509v3 Authority Key Identifier:
                keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/6B78FC0C892511EFA94C8B24C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.97.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:21:ab:83:92:d2:20:ff:eb:c5:1b:1f:90:4e:ba:a1:87:01:
         3e:89:cd:6f:e1:ea:35:57:be:b5:16:db:0d:3c:68:42:cf:aa:
         a2:f7:03:3b:2b:cd:1c:a9:71:5e:cc:11:ea:85:86:e1:1c:f7:
         e2:1b:e9:af:2b:46:ae:dc:ef:ca:34:1a:c9:05:11:65:77:b8:
         96:d2:23:0e:a8:53:72:88:da:7a:b6:a5:17:9b:19:d4:56:fc:
         c5:0c:98:34:c7:3c:eb:0d:99:c3:f8:28:5c:24:37:29:13:0b:
         e2:4f:31:47:36:6c:40:ef:5f:7b:a7:9c:90:ec:b9:8d:6f:09:
         91:99:80:b4:92:48:ba:a1:ee:c9:bb:f1:38:5b:38:c4:17:9b:
         bf:3f:f3:77:53:24:37:ef:fe:26:1d:1f:ad:93:6a:31:26:39:
         fe:65:df:83:98:9d:8b:44:50:43:a9:ec:cf:96:09:5b:9f:09:
         c2:26:0f:6f:d5:55:a6:aa:c5:9b:06:14:8c:37:ef:97:d1:52:
         e8:54:68:a7:7d:72:40:ae:c7:8d:31:c5:6d:1b:fa:db:77:35:
         a5:84:58:8c:78:f8:fe:36:ed:26:65:39:32:dc:00:44:a4:7b:
         b7:be:3b:00:e8:ea:38:a4:23:5d:29:00:dd:ea:ed:bf:f1:1a:
         56:a5:73:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:05:17 2024 by rpki-client on console-ams.rpki-client.org