Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/28D1785891E311EBA138E330C4F9AE02.roa
File:                     28D1785891E311EBA138E330C4F9AE02.roa (raw, json)
Hash identifier:          ZXRE/wzu5lKhs8MxseA6/JZbA6gFP0KL6bGQMwyeb1Y=
Subject key identifier:   C9:EB:66:56:85:BA:93:7D:00:9C:32:84:5E:4A:73:B8:1D:1D:62:A4
Certificate issuer:       /CN=A9154340/serialNumber=53F6F79253BCDB8B1D17182CE4F19D39FD499DF5
Certificate serial:       0569
Authority key identifier: 53:F6:F7:92:53:BC:DB:8B:1D:17:18:2C:E4:F1:9D:39:FD:49:9D:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/28D1785891E311EBA138E330C4F9AE02.roa
Signing time:             Fri 05 Apr 2024 01:03:53 +0000
ROA not before:           Fri 05 Apr 2024 01:03:53 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     142002
IP address blocks:        103.164.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.crl
                          rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1385 (0x569)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154340/serialNumber=53F6F79253BCDB8B1D17182CE4F19D39FD499DF5
        Validity
            Not Before: Apr  5 01:03:53 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=660f4df9-b170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9b:8b:21:5c:f8:cb:46:94:60:7b:0d:01:04:
                    91:05:db:fc:4f:b8:e0:3e:1f:72:0f:c9:25:b7:58:
                    90:fa:29:d9:05:b7:7f:5c:a3:80:19:c7:6b:09:1f:
                    f2:93:c0:98:0f:d6:e3:bd:ff:97:8f:d4:ac:01:6f:
                    77:78:e5:6d:61:c8:30:9d:af:89:cb:38:3a:89:b9:
                    52:6d:0d:44:72:4e:94:19:d1:58:25:3c:68:17:43:
                    ea:ae:c1:e8:a0:ff:5a:b7:02:ed:5e:fc:fe:21:f5:
                    77:6a:04:5f:53:53:88:f5:7d:28:a5:2e:46:12:b1:
                    2c:4c:8e:98:87:57:33:e6:d3:7e:73:6a:dc:44:00:
                    8d:78:0a:e6:1f:b2:0e:58:36:aa:a9:9e:50:b8:c7:
                    22:51:07:44:86:b5:39:6f:b0:b1:86:d2:4b:68:67:
                    76:9f:c3:d4:b7:f7:84:f9:81:aa:83:01:67:62:36:
                    fb:e7:fa:c1:23:f4:83:5b:31:e4:0f:e0:dd:08:66:
                    42:a3:81:91:22:24:79:9f:e8:6b:5e:14:4f:9a:cc:
                    46:3b:6d:6b:8c:dc:53:81:48:a6:a7:df:11:f7:62:
                    8e:79:65:09:47:27:a3:3a:a5:ff:d5:f7:e8:5d:13:
                    d4:2a:79:70:a2:55:89:b7:bb:ea:3f:8a:7a:69:58:
                    b1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:EB:66:56:85:BA:93:7D:00:9C:32:84:5E:4A:73:B8:1D:1D:62:A4
            X509v3 Authority Key Identifier:
                keyid:53:F6:F7:92:53:BC:DB:8B:1D:17:18:2C:E4:F1:9D:39:FD:49:9D:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/28D1785891E311EBA138E330C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:6a:f1:ed:8a:b2:b3:64:03:54:db:79:8f:3f:ce:01:0c:d1:
         c3:12:29:29:6e:9d:78:2b:b7:b0:98:8a:97:1d:80:96:96:c0:
         3b:69:42:4c:b7:40:85:55:60:a8:08:12:62:4d:4a:34:62:1a:
         33:85:37:8b:82:47:9f:0c:bc:53:e1:4d:eb:e7:5f:13:43:c5:
         68:67:ff:c7:30:97:9a:c9:14:e5:9f:7b:d3:de:a8:f3:1c:9b:
         a6:f3:b0:07:ee:15:89:01:33:6f:b4:e4:db:74:b7:62:97:19:
         a0:7d:80:d4:6a:fb:03:4f:c8:a5:9e:18:81:ee:8a:27:c4:30:
         90:43:18:76:bc:28:b5:7a:67:68:9f:28:6d:92:d9:4a:f6:0c:
         2c:54:01:f4:70:1b:c8:37:dc:56:54:ef:c1:56:e2:3d:e7:f1:
         bd:ee:09:49:22:f0:49:a6:a0:4c:fe:40:2c:32:8b:7b:b5:18:
         99:eb:f4:69:ec:98:83:f3:92:21:e4:d3:bb:75:02:0e:45:0d:
         99:fc:9f:01:2a:55:19:2f:db:4f:f3:6b:33:f9:1a:da:f3:0b:
         4a:c8:52:fc:e0:49:a1:b0:00:b0:c9:6e:b9:10:25:4b:f5:3b:
         22:37:df:a4:a0:00:5f:b4:eb:d2:4a:34:e0:53:5a:04:32:ec:
         62:3d:b3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:39 2024 by rpki-client on console-ams.rpki-client.org