Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/900F6E92211E11ECAEED8632C4F9AE02.roa
File:                     900F6E92211E11ECAEED8632C4F9AE02.roa (raw, json)
Hash identifier:          z1wNhwt8Q03xCqDTkxRfznfEIbwzB0j4wuUvA09MAJ8=
Subject key identifier:   07:5B:F9:D4:9C:A4:34:80:59:1B:76:F5:5A:5C:E5:6F:46:20:D5:5B
Certificate issuer:       /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Certificate serial:       03D1
Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/900F6E92211E11ECAEED8632C4F9AE02.roa
Signing time:             Sat 11 Nov 2023 01:33:13 +0000
ROA not before:           Sat 11 Nov 2023 01:33:13 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     55720
IP address blocks:        103.75.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl
                          rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Apr 2024 02:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 977 (0x3d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
        Validity
            Not Before: Nov 11 01:33:13 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=654ed9d9-e46e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ce:69:39:de:d6:a3:29:be:7a:82:e2:5f:f7:
                    d8:15:b1:a8:ad:5d:44:47:0d:8c:ad:4c:fd:d4:bf:
                    f0:94:3c:73:a8:6c:27:39:05:c4:fc:c4:35:c4:f0:
                    88:d9:5b:ca:04:8c:28:7f:2e:5d:bf:43:51:67:93:
                    8d:0b:fc:59:21:b7:53:33:1b:66:a4:a4:1e:de:aa:
                    b5:0f:42:f7:87:fb:04:38:5a:f9:18:ba:7b:99:41:
                    c8:cd:9b:fd:14:3c:b0:a2:26:a1:f5:84:1a:b1:50:
                    4d:5e:33:85:e3:24:76:08:73:ee:25:2d:68:06:6f:
                    46:3a:78:00:c4:59:49:c7:d2:c7:21:72:51:99:9f:
                    d7:1b:f5:6a:d7:a9:88:64:a1:22:50:67:68:df:b9:
                    18:16:13:b6:1f:e0:0a:cc:0a:0b:50:12:9d:1f:47:
                    be:be:0e:ef:52:dd:0a:c8:89:3d:fb:59:2e:dc:ec:
                    f6:52:96:b5:4f:69:3d:4f:4f:aa:52:35:87:8a:2f:
                    65:f8:48:55:6d:1f:a7:ed:74:0e:2d:58:58:ec:00:
                    43:7d:8b:1c:1f:8f:28:3d:f4:e2:0d:8e:97:83:d2:
                    9d:33:77:40:bf:1a:d8:51:a7:55:89:d3:f5:b3:5e:
                    35:f3:ec:25:86:13:b2:7e:57:51:df:a6:8b:72:f0:
                    74:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5B:F9:D4:9C:A4:34:80:59:1B:76:F5:5A:5C:E5:6F:46:20:D5:5B
            X509v3 Authority Key Identifier:
                keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/900F6E92211E11ECAEED8632C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:7a:26:47:80:69:83:4a:c4:b4:a3:55:05:08:01:91:5d:16:
         dd:63:43:51:46:78:15:b0:f2:58:65:5a:bd:c0:b4:8e:5e:24:
         82:c5:b1:a6:26:7a:66:f2:93:6f:c4:1d:83:0f:17:4a:55:c5:
         8c:f4:4d:c5:18:a1:2f:b7:8e:ef:c8:aa:33:36:d3:17:8d:e4:
         93:cd:34:d8:a5:45:0f:ec:48:ea:e4:78:6d:f7:2e:c5:6d:78:
         bb:fc:62:02:c6:a2:8c:30:36:8b:4e:ba:0f:c1:c3:f7:ad:9d:
         c0:bc:cb:c2:5f:e4:e5:5a:34:c9:b0:ef:1d:35:c2:f2:f6:d1:
         02:99:f9:ba:00:f6:b0:e3:90:a1:be:a6:63:01:ce:1c:12:15:
         25:95:15:a4:31:99:52:b5:50:08:c3:ce:6d:fa:c8:df:4a:42:
         fb:24:29:f5:5f:da:d4:66:a2:5b:5b:35:12:6b:ff:5f:b2:32:
         2c:fa:e4:99:60:35:96:a7:2e:61:ac:c6:fa:83:53:c8:5b:ce:
         d1:25:c2:1a:be:31:f0:3d:b7:a3:8b:b6:e1:d8:88:3a:a3:34:
         99:b9:ac:9d:5a:68:8e:fb:61:87:80:f5:60:54:e2:bb:b4:0d:
         f3:3e:7b:fa:65:35:25:3d:82:2b:fa:c7:ea:41:10:8b:5b:99:
         07:dd:eb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 03:24:19 2024 by rpki-client on console-ams.rpki-client.org