Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/F4DFF910CB0311EC817AED0BC4F9AE02.roa
File:                     F4DFF910CB0311EC817AED0BC4F9AE02.roa (raw, json)
Hash identifier:          MhRNjHvfHkDdTF4mYIY2vad5f1WIFlSdZXcRlCQ+d58=
Subject key identifier:   C9:6B:6D:D8:2A:D1:28:E0:1A:07:32:D0:B7:B0:54:D6:5A:D6:5B:D4
Certificate issuer:       /CN=A9157BF7/serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629
Certificate serial:       06A7
Authority key identifier: 9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/F4DFF910CB0311EC817AED0BC4F9AE02.roa
Signing time:             Fri 20 Oct 2023 22:10:37 +0000
ROA not before:           Fri 20 Oct 2023 22:10:37 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     149042
IP address blocks:        103.155.120.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl
                          rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 21:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1703 (0x6a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157BF7/serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629
        Validity
            Not Before: Oct 20 22:10:37 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=6532fadd-9293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:15:d6:74:91:ac:94:6c:ce:fa:3d:ff:96:a2:
                    52:da:c4:6c:9b:5a:44:2c:03:bb:d2:2b:54:c9:23:
                    9b:2c:35:45:c8:36:d4:c2:63:0e:b4:7a:c6:4e:97:
                    71:59:bb:e3:84:ad:99:04:2b:88:12:c0:8b:02:00:
                    b8:b9:f0:81:44:bf:e6:b1:3c:cd:bb:9e:62:3e:bb:
                    e3:72:fa:9f:88:e0:d9:da:72:74:84:2f:44:f0:ca:
                    25:3b:e7:9f:5a:a9:15:43:4b:17:10:ff:e0:31:c2:
                    16:9d:4d:d9:76:90:10:24:9e:c3:06:93:25:ef:3d:
                    b7:13:03:b1:fa:b7:f0:44:23:8e:36:96:1b:25:4e:
                    cf:a1:98:6d:8e:d5:d9:f7:6b:8c:f5:6c:a8:c4:c5:
                    b5:fa:79:18:19:cb:ce:3d:00:e5:cd:66:c5:6c:8a:
                    e1:e5:d3:7c:01:cf:06:5f:8c:37:8a:4d:d5:81:56:
                    71:45:a2:b6:d5:ce:e5:42:e2:29:90:1b:d5:9d:2a:
                    53:58:b6:44:ce:88:0e:c4:8d:a3:0f:4e:5f:59:3a:
                    7e:fe:fc:6f:4a:4f:ef:da:3f:f7:c8:88:5f:0b:bc:
                    21:b4:c5:36:d5:b3:03:84:cb:d2:b7:8b:4a:65:6a:
                    4b:c3:0d:08:12:9b:0e:67:c5:77:67:ad:d9:34:99:
                    90:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6B:6D:D8:2A:D1:28:E0:1A:07:32:D0:B7:B0:54:D6:5A:D6:5B:D4
            X509v3 Authority Key Identifier:
                keyid:9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/F4DFF910CB0311EC817AED0BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:7d:70:a0:31:cb:71:4c:7c:5a:73:78:a7:1e:b6:b2:91:eb:
         d1:3b:41:4c:61:98:48:ae:7d:b5:c0:8f:99:e9:8d:67:88:a9:
         ac:7e:7a:e3:8b:a9:8a:fb:c0:5a:5e:a7:e2:9f:8f:c4:e3:79:
         c5:8f:87:ca:6a:3c:3e:10:98:97:69:07:6b:15:03:38:01:c0:
         dd:f4:88:92:11:0f:0b:6a:58:21:c8:b2:4e:61:58:0c:36:52:
         cf:fb:39:96:7c:e0:f9:39:88:a2:92:5b:8a:b5:7a:60:c2:a4:
         56:64:e2:03:ac:76:36:f4:5f:16:12:0d:27:9a:ab:df:07:be:
         58:e5:c8:f0:99:03:3f:8f:cf:7a:2f:ca:bc:07:2c:1e:98:db:
         e2:fa:ee:cf:22:66:09:6b:b5:99:73:37:4b:6e:38:95:36:56:
         7e:b1:28:30:e7:d3:f3:b2:bf:ec:a8:4f:05:ff:a3:fc:30:09:
         a9:36:a2:6f:5d:f5:7b:a8:4f:b1:29:bb:1f:1b:5f:02:e1:d4:
         4a:2a:dd:92:5b:19:60:6a:b7:74:4b:1e:e7:36:19:1d:e6:f5:
         ee:91:f6:ed:e7:a5:13:0b:97:ec:9e:5d:0d:96:8e:d2:fb:01:
         31:b3:a4:6b:87:aa:f3:32:da:1e:8e:23:c3:c8:1f:c0:27:85:
         4d:4b:50:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:14:42 2024 by rpki-client on console-ams.rpki-client.org