Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/30904BA8329711EE8EC1E923C4F9AE02.roa
File:                     30904BA8329711EE8EC1E923C4F9AE02.roa (raw, json)
Hash identifier:          UPjqVtuQblWZkgAF8WsFu+HAyCYW+0LeEDLWrsUwBMw=
Subject key identifier:   F9:8F:B7:48:08:26:EF:D4:74:18:37:4C:4A:DD:80:E3:22:34:82:A3
Certificate issuer:       /CN=A9161613/serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
Certificate serial:       04DC
Authority key identifier: 09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/30904BA8329711EE8EC1E923C4F9AE02.roa
Signing time:             Sat 27 Jan 2024 01:03:38 +0000
ROA not before:           Sat 27 Jan 2024 01:03:38 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     394869
IP address blocks:        112.199.92.0/24 maxlen: 24
                          115.84.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl
                          rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 00:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1244 (0x4dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161613/serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
        Validity
            Not Before: Jan 27 01:03:38 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65b4566a-d8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1c:76:9b:f5:7d:7c:d0:55:3e:d0:fd:4c:e8:
                    7b:be:0f:59:4f:38:d3:f3:5e:2a:d4:b6:03:b1:03:
                    3c:26:1f:d2:d7:b3:a4:e6:4e:5b:c4:e3:82:79:fe:
                    d7:59:f9:53:cb:a2:49:b6:2d:a5:56:fa:84:06:69:
                    c4:3f:e3:47:8e:2e:ca:0b:e6:e0:86:f7:b9:2b:7c:
                    e1:1e:8c:84:0c:bf:27:86:a8:4a:b9:d1:d0:91:c0:
                    6e:e9:c0:03:f7:82:21:c0:76:8e:ef:06:b5:ab:a2:
                    1f:7c:2a:de:e4:18:65:49:a1:5a:24:8d:c3:6c:90:
                    7d:95:71:f0:4e:af:0f:f3:09:05:bd:ab:c7:ef:3e:
                    5a:da:54:2e:d6:a7:06:8e:05:4d:c2:1f:53:0b:3f:
                    b5:65:be:1e:1d:08:48:bf:82:0b:04:0d:28:76:ec:
                    de:ec:25:ce:74:ed:18:d1:a1:e5:25:17:7b:d9:ec:
                    f6:f2:fb:51:71:33:fd:c7:35:b1:56:e3:86:7c:47:
                    1a:e2:d9:09:71:ea:5a:64:7e:11:47:c8:40:a8:58:
                    20:d0:00:31:7e:6c:6b:ee:cf:5d:26:89:c1:81:95:
                    65:a5:29:ad:a8:a0:13:5f:33:5c:7f:2c:03:a0:5c:
                    27:d5:3b:57:9d:9d:e2:9d:a2:b9:ec:bf:6d:35:96:
                    e6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8F:B7:48:08:26:EF:D4:74:18:37:4C:4A:DD:80:E3:22:34:82:A3
            X509v3 Authority Key Identifier:
                keyid:09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/30904BA8329711EE8EC1E923C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.199.92.0/24
                  115.84.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:ed:a0:5c:eb:e1:8a:43:4f:5d:15:89:62:f9:9e:0b:82:fe:
         36:a8:62:ae:e7:a0:62:16:50:a2:d7:0a:cb:cf:cd:29:f7:75:
         d4:62:fb:5c:f0:27:cb:77:55:5e:af:22:7f:46:db:b5:9f:d2:
         cd:7a:7a:99:6f:bb:1d:61:0c:40:97:a3:3a:e7:93:7e:bc:9e:
         19:2f:46:a9:a8:27:8c:f6:6c:08:6b:46:7e:08:34:7f:cd:eb:
         86:df:ed:9b:ac:93:bc:6b:69:49:ca:7c:de:b2:a3:e5:e8:e8:
         e2:aa:47:a2:6c:ef:c8:68:43:89:b7:31:db:20:3e:54:a2:cc:
         21:78:cc:a5:eb:d4:54:2a:9f:af:94:65:ea:80:3b:14:ee:d9:
         0d:35:95:6b:8f:db:c1:b8:ba:9b:18:53:19:65:79:01:4f:39:
         e1:20:55:88:d9:b9:e3:5c:d5:0e:ac:bb:a7:bd:9c:92:96:4c:
         54:5c:b4:d8:a8:f8:ac:a1:00:07:a2:1a:3c:5d:bf:ea:19:c7:
         99:54:dd:f5:7d:59:fe:07:d6:e8:3b:0c:03:cc:cc:d2:d9:79:
         00:e1:77:98:6e:c5:d6:db:a1:35:8e:23:4c:5f:0d:eb:7e:b9:
         87:34:2b:e0:4a:cb:12:bc:60:05:9c:e3:22:34:5e:77:7b:43:
         77:5c:14:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:38:39 2024 by rpki-client on console-fra.rpki-client.org