Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/FDB4B8B4E85211EE83F9ED4BC4F9AE02.roa
File:                     FDB4B8B4E85211EE83F9ED4BC4F9AE02.roa (raw, json)
Hash identifier:          SCTf0mwZLUHqFVPegVRVJr7Eh8lVpCyL1GKCV+U6N7c=
Subject key identifier:   BC:F5:C8:45:21:13:64:E4:A1:DD:26:68:20:5B:7B:72:D3:84:0C:02
Certificate issuer:       /CN=A9150CF3/serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD
Certificate serial:       7F
Authority key identifier: B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/FDB4B8B4E85211EE83F9ED4BC4F9AE02.roa
Signing time:             Thu 25 Jul 2024 03:45:13 +0000
ROA not before:           Thu 25 Jul 2024 03:45:13 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     63473
IP address blocks:        103.69.128.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl
                          rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150CF3/serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD
        Validity
            Not Before: Jul 25 03:45:13 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=66a1ca49-de15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3c:89:c4:d0:b1:86:ea:3f:94:d9:da:d0:b4:
                    bc:6c:3a:63:ec:17:89:5f:0f:59:a3:60:13:cb:67:
                    f1:e4:b5:79:84:c7:1a:11:41:aa:2e:d3:37:5a:a9:
                    86:54:20:81:34:92:7e:dd:f5:9e:2f:b3:30:32:af:
                    95:e7:9e:d7:45:54:97:6a:1f:8a:31:eb:60:82:f5:
                    0e:02:80:00:d7:de:b8:ac:66:44:4f:e7:24:7a:b4:
                    f9:43:66:f7:1c:8a:1e:87:e6:eb:48:f5:b3:79:d7:
                    18:79:73:a6:09:72:a0:e8:f3:86:86:f2:2a:d4:62:
                    1a:2d:02:22:cc:11:23:4f:cf:38:53:e9:c7:57:c2:
                    c5:2b:4a:f5:b1:4a:8a:8f:ad:98:cf:d7:7e:36:fb:
                    7e:f7:45:42:a8:a9:bd:4c:10:1f:74:ab:71:49:fe:
                    dc:22:f3:21:f6:a5:22:b1:1e:fd:cd:6a:d2:1a:c1:
                    16:b9:30:68:f3:73:5e:6e:66:a1:e3:ab:1a:9b:ba:
                    c9:30:b9:e4:54:7f:93:44:5b:24:21:76:98:be:87:
                    61:a4:a0:cc:18:69:81:9e:51:1f:bb:38:d8:20:ab:
                    ba:05:a3:a4:8f:37:cc:f7:31:ac:64:51:07:13:1a:
                    c8:3d:e8:01:50:b6:df:72:e4:ef:5c:84:39:02:57:
                    2c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F5:C8:45:21:13:64:E4:A1:DD:26:68:20:5B:7B:72:D3:84:0C:02
            X509v3 Authority Key Identifier:
                keyid:B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/FDB4B8B4E85211EE83F9ED4BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:9e:cf:92:dc:c1:f2:62:18:14:eb:a8:d3:0f:0e:df:40:3c:
         fe:50:a3:3c:97:62:b3:bf:3e:41:99:86:08:a1:e0:69:5f:24:
         3a:a4:39:22:c6:7f:a9:f6:4d:04:5e:43:1f:82:c7:fb:e6:07:
         fd:ee:13:4e:ce:99:40:b3:39:5f:23:47:4d:73:b8:80:86:03:
         77:a0:e8:4e:9d:af:5d:aa:b6:ad:28:09:83:ad:c7:37:09:f3:
         56:d3:2c:c4:e1:6d:75:d2:db:9f:4d:39:c4:a6:40:61:7a:5e:
         c4:51:08:d8:b8:03:df:f9:09:cb:10:7f:34:c5:f7:a2:4a:d0:
         1a:d3:64:f6:d3:9f:25:48:fd:26:9f:96:38:47:fa:82:df:4d:
         95:b2:ee:af:7b:2a:e8:e9:02:38:01:5e:94:8a:b7:98:cf:bf:
         79:91:eb:67:b1:a1:10:1b:41:f6:73:ee:4a:0e:80:45:0d:bd:
         56:27:43:01:bc:80:24:9e:96:99:37:2d:60:40:90:4c:10:e9:
         81:08:57:b0:60:f2:d4:d9:51:9b:ad:32:3d:5f:8c:61:ab:df:
         a7:18:9b:81:54:7b:32:17:9d:bf:2b:0d:1a:3d:7c:94:1e:7e:
         eb:e9:b5:70:6a:66:9c:9b:a9:60:f6:31:2f:59:34:15:42:24:
         ae:55:b1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:37 2024 by rpki-client on console-ams.rpki-client.org