Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/93A5581E549211EFB6D69465C4F9AE02.roa
File:                     93A5581E549211EFB6D69465C4F9AE02.roa (raw, json)
Hash identifier:          /XKYDQbxV7RTuAFLQ60S0WHAEqIIW0Ex8kIJdQHSD/g=
Subject key identifier:   EC:AD:5D:94:1C:68:09:D2:08:ED:83:D3:8E:27:E8:53:A1:51:32:C5
Certificate issuer:       /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0
Certificate serial:       0369
Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/93A5581E549211EFB6D69465C4F9AE02.roa
Signing time:             Fri 11 Oct 2024 01:04:49 +0000
ROA not before:           Fri 11 Oct 2024 01:04:49 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     7474
IP address blocks:        203.16.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl
                          rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 873 (0x369)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0
        Validity
            Not Before: Oct 11 01:04:49 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=670879b1-81df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fc:f3:5b:d6:9c:e4:c4:08:17:a7:e0:fd:b9:
                    08:80:8c:90:04:88:f8:28:93:82:c9:f0:ea:a8:fe:
                    17:63:d3:2b:d5:a3:b1:b8:be:38:2d:41:e9:34:07:
                    6d:aa:5b:14:ae:f7:c7:99:c2:55:fd:1e:ab:63:92:
                    be:a3:52:52:32:07:d0:f6:64:03:2c:68:72:b0:56:
                    20:7f:f5:92:ec:f9:4f:11:63:dc:04:a8:56:e6:d6:
                    ad:57:64:5f:10:af:f8:6a:27:cf:ea:80:f6:03:fc:
                    f4:50:ea:85:bf:57:bc:fd:a2:1b:33:3d:f8:69:73:
                    5f:ce:2f:5c:6a:15:19:ec:b0:ae:9b:24:43:30:e4:
                    7e:f7:7c:d0:de:14:f5:69:4d:f2:7f:47:8c:44:66:
                    0b:dd:e7:a1:58:28:9b:f4:a2:ea:0e:b5:c5:10:cf:
                    fe:ff:1f:75:6a:ec:ae:64:b2:b3:07:84:31:cf:26:
                    6d:42:70:78:fb:e5:63:3f:2c:db:4a:c6:5a:ee:55:
                    ce:d5:ad:3f:82:c9:e4:2e:f0:b9:63:a1:dd:b2:65:
                    de:52:29:11:df:98:0b:66:96:9f:2f:f0:9b:ce:44:
                    36:11:82:eb:37:f7:6b:b9:f0:b8:7d:7e:28:a3:8e:
                    b2:b8:21:f8:67:d9:0f:42:ff:28:e4:03:44:16:56:
                    3f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AD:5D:94:1C:68:09:D2:08:ED:83:D3:8E:27:E8:53:A1:51:32:C5
            X509v3 Authority Key Identifier:
                keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/93A5581E549211EFB6D69465C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.16.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:8c:d2:f9:de:3e:d3:44:e6:8a:14:31:43:b7:3f:74:68:bd:
         c2:17:50:eb:1b:ba:3f:6b:9e:cc:07:c8:ca:5f:0a:a0:fb:b1:
         1e:d6:c1:1f:0c:02:22:08:27:95:b6:6a:dd:28:4c:19:7d:2f:
         7a:36:da:19:41:74:1e:06:b4:e9:e1:d7:36:40:91:e7:a5:89:
         4d:cb:a1:18:27:a5:10:c7:1e:1e:33:bc:32:8b:64:04:ee:97:
         90:e4:76:ab:8c:26:36:4d:6c:1b:87:dc:4c:51:1c:b2:ca:83:
         80:40:44:2a:a0:44:4d:78:2f:3f:2e:3e:6a:ec:8a:90:3f:3c:
         1c:0b:b1:c6:06:ad:aa:ac:8f:c2:30:82:a9:df:eb:e4:7d:b1:
         6c:24:95:d1:6b:2b:22:fa:87:40:83:f9:1d:b6:64:a7:28:f3:
         81:d4:3f:2a:cc:a4:75:6f:19:ac:17:2d:89:ea:49:c8:20:b1:
         34:83:f1:2d:eb:98:80:cc:15:8b:38:71:53:ea:87:67:c9:e1:
         49:90:3b:94:28:af:91:78:5b:77:fa:27:c1:74:a0:00:95:3a:
         62:ea:c1:09:92:30:7f:59:8d:b4:07:21:f6:aa:ac:0c:1c:8b:
         cd:8f:5d:6f:a6:48:f4:9c:24:eb:2b:03:39:de:b8:6f:21:17:
         26:03:8c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:54 2024 by rpki-client on console-fra.rpki-client.org