Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/13017BF24E3E11EF891FC80CC4F9AE02.roa
File:                     13017BF24E3E11EF891FC80CC4F9AE02.roa (raw, json)
Hash identifier:          olHoFEtaQKnrtF7UpHKHIWRHTcbhgL9S9/h5NvCNmhI=
Subject key identifier:   04:F6:24:F2:D3:83:89:31:2D:8D:28:9E:42:31:68:F0:91:E7:1D:F0
Certificate issuer:       /CN=A9147609/serialNumber=02E28F9D460511137B21478823A7B48339565212
Certificate serial:       03
Authority key identifier: 02:E2:8F:9D:46:05:11:13:7B:21:47:88:23:A7:B4:83:39:56:52:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuKPnUYFERN7IUeII6e0gzlWUhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/13017BF24E3E11EF891FC80CC4F9AE02.roa
Signing time:             Tue 30 Jul 2024 06:36:38 +0000
ROA not before:           Tue 30 Jul 2024 06:36:38 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     150334
IP address blocks:        103.114.11.0/24 maxlen: 24
                          2405:4440:b000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.crl
                          rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuKPnUYFERN7IUeII6e0gzlWUhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 Nov 2024 05:36:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147609/serialNumber=02E28F9D460511137B21478823A7B48339565212
        Validity
            Not Before: Jul 30 06:36:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66a889f6-96a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:74:6f:40:df:7b:8d:fa:ac:a6:67:6b:cc:2e:
                    db:ee:ec:22:eb:a5:da:e6:b5:b2:24:f5:80:db:99:
                    c6:59:ac:07:79:e8:18:45:24:a5:14:a8:03:ce:3f:
                    f9:80:3b:55:72:7b:df:64:7f:8b:24:70:af:70:9b:
                    6e:41:9a:08:30:8c:97:d8:ed:80:9b:a5:3c:16:bf:
                    79:08:cb:3f:2e:30:fc:cf:d2:a4:4f:66:4a:c6:d5:
                    bf:b6:70:f7:59:fd:13:1f:09:f4:2c:9e:af:5b:f5:
                    3b:54:93:6b:0b:fc:b1:4d:e1:7c:64:ce:8c:df:9a:
                    4f:6e:59:78:05:e8:48:02:fa:35:06:01:d1:37:0b:
                    4e:12:5f:74:9f:ad:80:6f:e6:ad:57:bc:9b:9d:23:
                    9d:f5:e3:f0:7b:85:19:14:0b:14:6d:f6:62:de:a4:
                    10:5b:05:19:d9:f0:93:66:76:d7:47:71:cc:57:31:
                    37:e9:4d:a0:62:ab:a1:be:be:7d:48:42:a8:11:fc:
                    26:96:a6:23:c3:8f:3b:72:4b:ab:9c:5e:27:3e:9f:
                    48:c9:1a:89:45:62:e8:9c:f0:13:49:51:f9:a9:6b:
                    42:11:6b:c9:22:a7:a8:2b:43:9c:b6:0f:75:dc:87:
                    97:2b:92:4c:eb:0e:60:75:cc:5c:11:87:68:dc:13:
                    89:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F6:24:F2:D3:83:89:31:2D:8D:28:9E:42:31:68:F0:91:E7:1D:F0
            X509v3 Authority Key Identifier:
                keyid:02:E2:8F:9D:46:05:11:13:7B:21:47:88:23:A7:B4:83:39:56:52:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuKPnUYFERN7IUeII6e0gzlWUhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/13017BF24E3E11EF891FC80CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.11.0/24
                IPv6:
                  2405:4440:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         36:5e:e7:cd:cc:6f:50:ec:b8:1d:9a:99:8b:e7:fc:36:02:f4:
         80:f7:e2:59:cb:14:32:af:60:63:c1:12:7f:52:20:f5:57:85:
         b4:7c:1f:43:1a:3f:09:e7:87:0e:55:1b:e1:e8:ca:4d:5a:4f:
         17:50:7f:dd:50:be:35:dc:9d:d1:0c:2d:4d:02:b4:64:d7:7a:
         0e:ba:eb:11:64:b9:9a:4b:44:3c:7c:55:9c:f7:36:6e:cb:ff:
         47:79:86:bd:2a:96:a5:07:a3:7b:55:38:f3:0f:f9:e1:a0:ce:
         b2:44:a4:ed:b2:ba:a1:8f:07:2c:6d:77:5f:a9:4f:e5:86:7c:
         d2:bc:02:45:a2:60:52:71:2f:f8:e8:9e:83:c1:5b:47:f6:97:
         ad:17:35:21:ff:8b:5b:ac:52:ce:65:86:b6:bf:fc:f1:dd:ee:
         65:47:23:6f:05:5d:cb:bd:67:c3:0c:f7:ec:1f:32:c1:7d:0b:
         d5:17:dc:0a:39:2e:99:6b:f6:6e:f0:6b:58:1d:cf:a4:eb:92:
         58:92:a2:25:84:2b:e3:3e:e1:8e:75:97:1e:18:1d:fe:81:d5:
         58:8a:b5:09:7d:bb:dc:a2:ae:34:22:fa:5e:cf:b2:76:98:78:
         f8:e6:81:d8:ee:6c:22:29:3f:65:e3:9e:84:df:f9:e8:47:67:
         91:0f:34:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 06:49:34 2024 by rpki-client on console-ams.rpki-client.org