Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/A3E51274B9E111EEB496CF2DC4F9AE02.roa
File:                     A3E51274B9E111EEB496CF2DC4F9AE02.roa (raw, json)
Hash identifier:          q7FeQcZImOdcD2ZSuIAhoqsXJZPshx2oFb1f4ekH5Js=
Subject key identifier:   FD:7E:3F:DF:9E:F8:9F:3E:01:77:48:3F:81:23:51:A9:10:6D:7F:E4
Certificate issuer:       /CN=A9150CF3/serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD
Certificate serial:       1A
Authority key identifier: B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/A3E51274B9E111EEB496CF2DC4F9AE02.roa
Signing time:             Tue 23 Jan 2024 11:22:06 +0000
ROA not before:           Tue 23 Jan 2024 11:22:06 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     43969
IP address blocks:        103.69.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl
                          rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Mar 2024 13:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150CF3/serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD
        Validity
            Not Before: Jan 23 11:22:06 2024 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65afa15e-799f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:93:2b:bf:c3:bf:dc:6b:09:90:82:c0:6d:60:
                    ad:ef:26:71:89:11:a7:d1:14:87:f0:95:4a:48:e7:
                    86:02:ca:a4:9a:4f:50:be:75:75:1f:1a:86:d1:78:
                    c0:51:e6:7c:60:93:bd:9a:e3:9f:47:ac:3a:d7:d7:
                    77:63:3f:63:c9:e6:1c:2b:18:a7:4a:b8:05:b6:ac:
                    e1:cf:fa:21:76:2f:f1:5d:cd:f9:28:da:79:c4:1a:
                    7d:61:40:0a:bc:a4:aa:10:b4:8c:15:76:aa:7d:b5:
                    d7:35:bb:0a:ae:8f:0b:24:51:21:79:0f:55:91:da:
                    8b:0d:df:8c:6d:f2:06:38:e3:e6:b9:e0:0a:70:38:
                    3c:d5:cc:e9:c1:0d:8e:de:28:3c:51:86:85:94:e8:
                    79:db:c7:7e:79:38:7e:29:8b:1a:9b:5d:62:0d:b7:
                    21:a5:5d:97:ef:26:5c:2c:49:18:05:a5:77:03:ac:
                    c9:c3:0b:ed:f3:95:1a:21:e0:bd:55:e0:0b:39:2a:
                    8d:ca:52:96:01:3d:ef:c9:2f:27:10:70:5c:74:15:
                    63:1f:ee:1e:87:f4:b1:97:7f:8a:28:23:4b:4a:ee:
                    a0:23:26:9c:ec:5c:7c:12:80:81:f7:14:c7:c5:b4:
                    bc:77:00:21:69:6e:67:bd:87:66:a8:1e:e1:e7:4a:
                    4c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:7E:3F:DF:9E:F8:9F:3E:01:77:48:3F:81:23:51:A9:10:6D:7F:E4
            X509v3 Authority Key Identifier:
                keyid:B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/A3E51274B9E111EEB496CF2DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:7f:7d:a5:70:fe:b8:be:f4:44:ed:33:7a:bb:01:0c:e1:02:
         2c:e5:33:e0:47:a2:ea:e5:63:ad:04:58:72:80:a6:21:6d:57:
         c2:9e:ca:4c:6e:28:fd:b8:21:37:ef:d2:dc:d5:60:22:2d:5d:
         e3:d8:69:53:37:13:ad:d9:f4:13:a3:6a:cb:1e:38:f5:dc:9e:
         ba:f1:5f:d7:af:36:90:2a:47:2b:06:e6:b8:c6:97:88:35:8c:
         f4:00:df:62:94:92:5b:a9:8d:49:ed:ee:f9:03:45:df:ae:af:
         71:fc:03:dc:6f:f5:47:9d:d3:f6:fb:5d:13:4e:ed:0a:72:26:
         fd:ae:09:84:0d:a1:e2:71:e7:23:cb:02:95:af:75:bf:da:6d:
         a9:ba:e2:67:36:6b:c6:39:56:b1:1f:f1:6c:bd:70:69:e8:bb:
         c3:e6:12:ba:a4:d1:38:b1:37:dc:a7:56:70:c2:18:c2:0f:d6:
         17:f3:7c:66:86:55:72:bc:d2:a9:77:84:4f:c6:62:3c:26:45:
         bc:f7:fa:bd:f9:47:6b:23:d8:ef:00:48:ef:c6:38:87:98:42:
         65:a7:f9:a4:8f:f4:54:11:f1:73:ca:39:23:30:a4:b0:78:ec:
         eb:d0:5e:d4:66:69:0c:b3:00:a3:bc:ab:88:dc:1d:ca:ac:bc:
         fb:61:51:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 16:04:34 2024 by rpki-client on console-fra.rpki-client.org