Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/1E69B82CAD5311EBA93CEB69C4F9AE02.roa
File:                     1E69B82CAD5311EBA93CEB69C4F9AE02.roa (raw, json)
Hash identifier:          BiwvJd+dCFyWKlGsVpLMc1ZbpjUFsliw37pP+lj/D+c=
Subject key identifier:   A6:A9:C4:EF:5B:A2:77:DE:38:84:8C:D9:BB:29:D2:3E:90:FE:03:80
Certificate issuer:       /CN=A9157BF7/serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629
Certificate serial:       075D
Authority key identifier: 9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/1E69B82CAD5311EBA93CEB69C4F9AE02.roa
Signing time:             Mon 30 Sep 2024 21:40:42 +0000
ROA not before:           Mon 30 Sep 2024 21:40:41 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     135386
IP address blocks:        103.155.120.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl
                          rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1885 (0x75d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157BF7/serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629
        Validity
            Not Before: Sep 30 21:40:41 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66fb1ad9-5a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d0:0e:c2:a5:14:3a:26:50:ef:80:61:ac:c9:
                    d7:9c:27:8e:7c:6a:8d:10:14:fc:c7:08:e5:87:b6:
                    29:3f:13:1a:12:78:09:5e:70:21:b4:8b:91:35:d8:
                    80:e5:5d:b9:ea:b1:23:70:61:52:5f:04:cc:74:91:
                    b1:7e:62:a4:50:bb:53:91:6e:4b:02:38:85:f6:0d:
                    27:e8:39:05:b9:7f:47:f0:d8:19:f5:a4:b9:17:00:
                    cc:10:e7:38:4b:9e:d8:f9:e5:6a:59:22:ed:2d:e1:
                    13:22:2b:ca:a7:8d:83:9e:06:d1:ed:71:be:6d:2d:
                    34:44:4b:51:3d:c1:a5:5f:ff:2c:94:bb:b9:53:41:
                    8c:14:6b:87:36:c3:ab:df:1d:99:66:6a:f0:93:37:
                    09:21:d4:d9:fa:80:76:6a:00:31:0f:14:aa:64:5e:
                    c8:60:a9:56:db:3c:39:dd:93:fe:2a:a3:83:fc:2a:
                    eb:cd:99:70:39:fa:e2:9b:5c:d6:dd:7d:50:02:6a:
                    92:02:38:eb:8b:f1:47:9d:bf:5d:95:da:3e:7f:fd:
                    2b:ea:c1:72:63:87:b2:89:1b:ec:8b:c4:2b:48:cf:
                    8c:3d:b2:fc:61:19:3a:c0:5c:77:b9:63:a4:de:92:
                    4e:ec:53:03:c3:31:9c:b6:86:29:89:69:70:5b:07:
                    53:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A9:C4:EF:5B:A2:77:DE:38:84:8C:D9:BB:29:D2:3E:90:FE:03:80
            X509v3 Authority Key Identifier:
                keyid:9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/1E69B82CAD5311EBA93CEB69C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:dc:b9:b0:9c:07:dc:bc:5b:f9:58:27:af:d4:e4:ef:63:91:
         87:df:36:6d:15:a6:53:d6:95:77:ff:c7:e3:ed:8d:63:95:e2:
         b1:1d:ce:50:f8:b6:31:b8:c5:b5:bc:ca:9d:9d:0c:75:6c:88:
         cb:22:9b:93:fb:c1:c2:52:ca:b4:81:48:b2:b9:17:22:a7:83:
         ad:b4:39:08:32:08:99:22:88:e1:a6:14:38:99:31:05:52:95:
         f0:65:9d:d4:fd:45:01:72:a7:17:d6:8a:87:7b:c9:6f:48:96:
         e9:eb:c9:2d:0b:89:d4:90:c9:b5:43:79:93:b1:84:34:9c:1d:
         59:85:d0:e8:bf:ad:12:5e:c1:45:1a:68:40:61:00:cb:72:1b:
         86:f9:13:e9:fe:75:f5:01:2d:96:c6:0d:13:37:97:a1:31:99:
         f0:17:77:c0:de:ba:99:55:90:90:74:df:a1:a0:20:41:b8:85:
         3a:63:6d:9a:2b:07:f2:d5:ea:02:e9:23:d1:22:f9:2b:60:c9:
         7b:3b:1c:f8:e5:9a:c3:15:54:62:b0:a0:7e:b5:d1:9d:6b:2f:
         15:c3:f7:b0:24:b5:43:82:d4:48:5c:c3:6b:66:43:81:d9:9e:
         e3:82:bd:92:db:e7:e8:60:e4:91:ea:87:9c:35:23:79:45:4f:
         2d:62:ef:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:52:39 2024 by rpki-client on console-fra.rpki-client.org