Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/94EA7370050111EA9BDD372BC4F9AE02.roa
File:                     94EA7370050111EA9BDD372BC4F9AE02.roa (raw, json)
Hash identifier:          +1u0IgA0Wz54K7p0snw6xhCKFuGQKYMbw5LuhhxFO1k=
Subject key identifier:   FA:F2:B8:35:02:44:DE:B0:2D:F4:AD:6F:B5:E5:D9:F1:A7:1D:BE:93
Certificate issuer:       /CN=A9152E29/serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135
Certificate serial:       0B0A
Authority key identifier: 67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/94EA7370050111EA9BDD372BC4F9AE02.roa
Signing time:             Fri 22 Sep 2023 19:16:41 +0000
ROA not before:           Fri 22 Sep 2023 19:16:41 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     7474
IP address blocks:        103.77.128.0/24 maxlen: 24
                          202.129.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl
                          rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 May 2024 19:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2826 (0xb0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152E29/serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135
        Validity
            Not Before: Sep 22 19:16:41 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=650de819-be73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7d:88:02:c4:c4:12:5f:b6:91:dd:3c:30:d9:
                    2b:fb:30:30:42:ff:ab:b2:43:c4:55:39:f0:73:c8:
                    5e:22:5c:ea:c5:ca:ab:25:f3:23:a7:56:4f:f0:fa:
                    56:5d:3b:83:03:43:87:61:4b:15:e5:f1:fd:9d:80:
                    06:eb:64:1b:f2:ba:92:67:7d:6c:67:ad:98:86:3c:
                    64:2f:c4:5c:be:bd:86:8d:ce:d3:2c:9f:4e:d4:ef:
                    38:cc:c2:54:fd:ce:a6:34:f4:e8:e9:c8:83:f0:bf:
                    69:a2:7d:76:70:36:d5:ff:69:25:68:2c:7c:bb:5d:
                    b4:17:04:77:37:c9:58:c9:21:10:fd:e2:71:df:9d:
                    ee:16:71:7d:36:be:22:d9:d3:1d:fd:7b:b6:5d:8b:
                    4f:61:56:35:d1:b7:ee:34:21:30:04:67:2e:9b:fa:
                    4d:51:e9:a2:2f:4a:e4:1d:64:42:75:c6:16:e0:34:
                    30:2e:ad:10:bc:df:5f:47:df:92:dc:c4:a4:89:99:
                    13:4c:71:22:b6:b0:e6:aa:e5:b9:96:68:ba:f7:a4:
                    a9:8c:2d:c1:1a:ed:91:90:e3:dd:3a:ce:d3:f6:2c:
                    c4:4b:52:f7:ac:60:ab:07:7f:6f:b1:3b:91:8e:e8:
                    1b:ca:c9:f7:2f:a4:39:45:dc:a2:ba:d7:46:16:30:
                    6c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F2:B8:35:02:44:DE:B0:2D:F4:AD:6F:B5:E5:D9:F1:A7:1D:BE:93
            X509v3 Authority Key Identifier:
                keyid:67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/94EA7370050111EA9BDD372BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.128.0/24
                  202.129.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:fe:12:dd:f2:3a:2d:fe:ef:c1:53:71:ad:88:34:08:8e:36:
         5b:45:31:33:20:af:1f:c5:27:4c:41:78:56:f9:2c:50:e2:a0:
         0a:43:b5:fa:3e:02:f6:34:00:a2:76:57:5f:4f:74:12:26:0f:
         89:8f:c4:63:c4:62:b3:b3:b1:36:a0:b8:59:14:17:dd:9c:c0:
         92:c8:87:10:d7:63:30:49:82:08:98:54:5e:09:d4:df:92:73:
         fe:21:4c:e8:79:f5:71:19:59:d1:df:44:ee:98:a1:d0:a7:15:
         4d:78:1e:c8:0f:95:eb:52:b4:7c:5c:df:32:f2:95:f8:72:4b:
         9d:ed:c4:f7:20:2c:fe:0d:0a:91:da:1e:bd:44:34:14:85:5c:
         02:e0:4a:fc:e0:7f:6f:1f:9c:9c:01:e5:a9:91:4e:ac:e0:6f:
         db:98:37:1e:61:a2:72:ca:ef:e1:75:0f:9d:b2:5d:65:41:08:
         be:a0:5a:42:e8:4b:f8:6b:21:6f:e8:61:2a:05:b8:e9:53:d1:
         f5:8a:f5:c3:ee:f6:26:11:5b:fa:f1:3c:5e:37:ef:db:22:c2:
         33:cc:6c:a5:fa:03:b2:bd:f3:49:b4:50:45:d4:5d:4d:17:bf:
         82:c0:bb:79:fe:8f:dc:ba:bc:7f:29:e1:6c:41:a6:8c:f1:20:
         59:d2:e3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 20:48:02 2024 by rpki-client on console-fra.rpki-client.org