Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/F4DFF910CB0311EC817AED0BC4F9AE02.roa
File:                     F4DFF910CB0311EC817AED0BC4F9AE02.roa (raw, json)
Hash identifier:          3EaaIhegA520f9Jq9jn6VCkgAQsJfc5446BLnaSLsuo=
Subject key identifier:   8B:48:5E:7A:E8:D9:BC:5C:07:C1:DB:23:66:77:41:FC:5B:82:7E:61
Certificate issuer:       /CN=A9157BF7/serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629
Certificate serial:       0761
Authority key identifier: 9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/F4DFF910CB0311EC817AED0BC4F9AE02.roa
Signing time:             Mon 30 Sep 2024 21:40:45 +0000
ROA not before:           Mon 30 Sep 2024 21:40:45 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     149042
IP address blocks:        103.155.120.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl
                          rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 17:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1889 (0x761)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157BF7/serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629
        Validity
            Not Before: Sep 30 21:40:45 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66fb1adc-c58b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e7:30:69:bb:1b:23:23:97:b6:b2:13:c5:15:
                    e7:ce:b6:68:e2:2a:ca:f9:83:1e:36:df:46:a6:fd:
                    66:aa:4a:07:c4:5d:e1:9d:89:fa:62:2b:db:13:f6:
                    8d:a2:1b:23:e8:f8:9e:0f:2c:5c:a8:de:93:a5:dd:
                    bc:32:3e:12:c0:29:6e:61:bf:37:a5:b7:7f:fa:70:
                    a4:78:54:6b:84:2c:3d:8b:fb:b6:99:89:61:76:53:
                    3d:95:9b:8c:52:26:e6:5e:93:b9:30:bb:c9:ea:44:
                    57:a9:05:9b:3e:df:4d:cc:15:9a:c8:e5:f4:2e:6a:
                    9b:61:e4:28:64:5a:ba:f4:99:0e:59:43:e0:ee:1f:
                    50:fd:44:48:71:38:93:fa:62:db:7c:ea:13:97:40:
                    ae:1c:a4:54:98:69:4a:f7:05:84:aa:b3:97:d3:f0:
                    37:54:84:af:5b:c4:f1:78:c1:f7:be:fb:3d:6f:4a:
                    6d:46:ca:98:68:02:af:50:a1:e5:01:b0:c0:e4:2e:
                    17:55:2c:48:da:0a:64:9d:49:d4:a2:3c:c2:6b:d2:
                    cf:3b:20:97:c3:1e:4a:86:a7:af:1c:a9:e1:35:be:
                    8f:e6:07:3e:db:b9:8a:e3:4a:64:53:96:af:b2:bf:
                    be:e7:80:94:d2:75:21:01:b1:f0:ea:eb:1b:9f:db:
                    78:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:48:5E:7A:E8:D9:BC:5C:07:C1:DB:23:66:77:41:FC:5B:82:7E:61
            X509v3 Authority Key Identifier:
                keyid:9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/F4DFF910CB0311EC817AED0BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:97:8b:69:1e:da:bf:51:f8:e9:f5:14:53:92:cc:52:21:d3:
         fc:17:86:1b:db:2e:31:0a:50:bb:f4:c5:ec:68:34:b1:51:99:
         7f:06:c1:bd:bf:82:ac:72:c2:7e:b3:e6:23:b2:46:18:da:66:
         d2:3b:ce:03:cc:4b:d0:af:6f:e2:18:75:8f:10:82:3f:44:f8:
         0e:47:2e:b4:84:25:d2:c7:58:ed:a9:67:7d:1e:7a:e2:10:d8:
         ea:1f:98:d7:a3:ce:58:37:86:05:2b:9a:0d:ca:60:b0:5c:65:
         d2:49:2d:82:05:56:60:a2:8d:cf:db:fe:9a:82:dd:a1:09:73:
         1b:b5:a9:6b:59:e7:11:a3:e1:74:6e:1d:c6:7d:29:c4:9e:9a:
         3b:55:82:b3:28:2a:bb:6a:1e:4f:17:bd:02:29:9d:8e:bb:f8:
         6b:98:04:c5:ce:7c:e5:02:37:40:c0:ec:35:ee:e1:1b:e1:8e:
         b0:a3:97:f7:54:01:54:d3:0d:c1:8d:a9:78:07:86:cb:13:08:
         8c:fb:32:cc:7f:4a:67:82:da:56:6f:3a:05:c2:87:c3:ad:3e:
         b3:16:03:19:2b:6f:ff:f3:42:01:8c:bc:f6:70:48:0b:8c:2c:
         59:58:64:cc:fc:c0:e9:e9:1a:f2:2a:03:c1:1c:0f:49:e1:28:
         49:b4:e3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:11:58 2024 by rpki-client on console-fra.rpki-client.org