Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/55C580C2108411EDB5AE6333C4F9AE02.roa
File:                     55C580C2108411EDB5AE6333C4F9AE02.roa (raw, json)
Hash identifier:          MerLsBV6jv2qjNEO4O4NBuQAWQkGnVBjk/HecMpMbfg=
Subject key identifier:   BA:F2:CD:B9:89:D5:51:EB:6C:61:74:A2:67:CF:17:76:FF:63:53:83
Certificate issuer:       /CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E
Certificate serial:       01CC
Authority key identifier: 42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/55C580C2108411EDB5AE6333C4F9AE02.roa
Signing time:             Wed 03 Jul 2024 03:44:58 +0000
ROA not before:           Wed 03 Jul 2024 03:44:58 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     133929
IP address blocks:        103.169.96.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl
                          rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460 (0x1cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E
        Validity
            Not Before: Jul  3 03:44:58 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=6684c93a-8f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fa:92:a4:9d:7d:06:df:7b:fc:d0:15:af:1a:
                    8c:76:2c:fe:bc:19:25:d0:cb:a1:a6:35:db:30:a9:
                    16:9a:2b:0e:35:d7:c0:bd:f4:a6:3b:b1:64:0f:d6:
                    c3:65:c8:8a:f6:f5:3f:44:29:e0:65:41:f2:fc:59:
                    e7:89:d0:c0:1e:b3:70:cc:a8:66:13:dd:33:ce:e8:
                    9f:10:9b:bc:30:e0:8f:09:05:0e:f1:85:0f:c0:f1:
                    79:38:23:0e:04:26:23:b7:fa:49:36:c8:a4:39:79:
                    97:b5:62:92:dd:40:70:5c:83:a5:62:b6:55:17:64:
                    cd:68:53:21:c1:5a:bb:cd:4a:43:75:15:44:7e:86:
                    73:1f:d6:fe:bd:90:9e:d3:44:a3:f6:2b:d6:e2:6a:
                    86:d4:cc:a7:13:bc:53:e5:37:37:ae:ce:1a:99:c9:
                    a7:11:36:5e:09:ec:3d:bc:b3:9e:af:00:60:68:04:
                    8c:25:d5:b8:01:9f:2f:01:1c:f4:25:91:35:b8:a9:
                    89:09:1c:62:17:3e:f8:75:59:a6:be:6f:14:ee:ed:
                    c0:81:f7:82:34:e6:86:eb:59:8b:34:d5:17:e6:8e:
                    37:7f:d9:5e:1e:8e:c4:bb:be:71:84:d2:22:17:3d:
                    c9:ce:fa:39:3e:17:c4:1f:8f:e5:9b:2a:c3:e1:2b:
                    cd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F2:CD:B9:89:D5:51:EB:6C:61:74:A2:67:CF:17:76:FF:63:53:83
            X509v3 Authority Key Identifier:
                keyid:42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/55C580C2108411EDB5AE6333C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:3d:e2:91:cb:c1:8d:a8:18:03:aa:7b:b0:56:90:d0:16:37:
         00:40:93:fa:b0:bf:ea:c5:2f:4d:53:21:21:2c:80:f7:4b:d1:
         1f:cc:8f:3e:56:70:61:f7:92:74:66:07:9d:b3:09:4e:54:9b:
         b6:1a:08:b4:57:8b:63:ed:a2:8f:ea:9f:4e:46:17:82:ba:d5:
         ee:8f:2b:2a:b1:06:a3:3c:35:80:fb:e7:8f:c7:69:39:e8:b5:
         68:06:de:ed:da:40:b4:fd:c4:1b:dc:5a:15:ef:b7:35:4f:bd:
         96:80:b7:c7:28:bc:ab:c3:f7:03:d5:f3:94:fb:17:b8:f5:88:
         5b:03:ae:0c:6d:b8:0f:d7:9a:e5:fa:4f:b9:47:fb:0a:91:54:
         dd:25:40:f5:14:14:22:ae:7d:77:a4:73:51:fe:90:46:e6:60:
         a0:16:26:50:3d:10:88:18:1d:c3:13:57:9a:ca:27:4d:65:d8:
         94:56:1c:40:2a:67:90:b5:d5:3d:1f:b7:7f:32:e3:ca:04:8b:
         0c:68:b7:06:ff:8b:08:e5:04:9b:c9:67:bf:96:b8:27:f3:bd:
         e4:a3:dd:f5:b8:16:50:a6:b3:dc:b2:f1:76:b7:59:25:8a:bd:
         31:43:54:18:93:73:1a:14:a3:59:5a:41:2d:15:ff:8b:c9:21:
         2f:2c:d9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:37 2024 by rpki-client on console-ams.rpki-client.org