Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/70F8E50039AF11EE8486453DC4F9AE02.roa
File:                     70F8E50039AF11EE8486453DC4F9AE02.roa (raw, json)
Hash identifier:          P1PXKxb5YOY8BpDSu1o3skcs/Ukvr/AZNNjHU7y8sT8=
Subject key identifier:   B2:93:04:A1:7A:23:82:83:20:8E:A1:DF:23:02:4D:4E:22:4D:E5:3C
Certificate issuer:       /CN=A91655EF/serialNumber=074E16CCA080D545FEF4F2D8ADCB909F0ECB20A2
Certificate serial:       10A1
Authority key identifier: 07:4E:16:CC:A0:80:D5:45:FE:F4:F2:D8:AD:CB:90:9F:0E:CB:20:A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/70F8E50039AF11EE8486453DC4F9AE02.roa
Signing time:             Sat 16 Dec 2023 18:05:36 +0000
ROA not before:           Sat 16 Dec 2023 18:05:36 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     139009
IP address blocks:        103.126.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.crl
                          rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:15:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4257 (0x10a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91655EF/serialNumber=074E16CCA080D545FEF4F2D8ADCB909F0ECB20A2
        Validity
            Not Before: Dec 16 18:05:36 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=657de6f0-5086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d2:01:62:07:15:da:d4:97:c9:e9:91:e8:67:
                    a3:11:17:52:10:bb:b7:e8:18:d1:8e:97:ab:29:6c:
                    48:60:dd:68:93:4e:65:a2:e7:8b:d5:7e:31:ac:2b:
                    fe:81:a7:a6:62:4d:22:7a:69:bb:77:fe:60:97:57:
                    56:b8:f3:03:6a:1a:f9:1d:1b:38:b7:a0:56:4e:35:
                    95:4b:4a:c0:91:37:73:4d:be:be:dc:21:1a:e1:31:
                    93:f6:35:98:6a:43:61:0a:da:ad:a2:51:ef:e8:91:
                    37:a9:fd:06:b5:49:ac:a3:15:66:82:07:fe:f7:ab:
                    dc:09:57:64:82:b8:d6:25:c5:4b:d6:63:80:d2:45:
                    81:91:c0:f4:64:30:fe:21:1f:e0:9d:72:ee:c2:b9:
                    b8:7d:d9:46:9a:7f:95:e4:28:c0:f4:35:b1:5b:9e:
                    49:fc:bb:c1:14:6b:86:1c:29:5b:b3:36:3d:29:48:
                    69:a5:a4:0d:2c:4b:57:17:58:2f:c0:69:60:f3:6d:
                    95:45:ba:25:21:1d:b8:2a:54:1e:c5:1d:d3:05:7d:
                    18:6c:ed:35:7c:ee:19:24:46:f2:10:09:78:c7:1b:
                    84:1e:93:2d:09:a4:14:c8:dc:4e:a2:cd:ca:5e:ca:
                    ba:98:dd:d7:20:4a:60:b2:f9:ba:a5:49:ff:77:96:
                    fb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:93:04:A1:7A:23:82:83:20:8E:A1:DF:23:02:4D:4E:22:4D:E5:3C
            X509v3 Authority Key Identifier:
                keyid:07:4E:16:CC:A0:80:D5:45:FE:F4:F2:D8:AD:CB:90:9F:0E:CB:20:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/70F8E50039AF11EE8486453DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:9e:fd:8a:9e:f7:b3:e3:88:07:9a:6f:72:4a:a4:98:7a:c7:
         a5:60:f7:90:4d:09:95:6a:26:fe:3c:5d:53:0c:52:cb:c4:e4:
         c7:97:00:fa:69:b9:10:a3:82:55:10:b9:9e:75:07:0a:59:3e:
         85:4a:05:44:00:aa:f3:d3:29:00:a2:50:37:83:11:00:de:fc:
         7d:73:ba:8a:b6:28:04:e2:0a:4f:cb:57:12:4e:78:5b:61:05:
         02:49:68:b9:b4:5f:c0:ef:d8:b6:b5:3f:cb:b4:b0:f5:22:5f:
         d7:07:72:a9:db:70:f8:27:49:01:43:2e:0e:fb:59:6b:75:35:
         4e:17:28:b2:6e:0b:b5:6e:2c:c9:d6:ca:ac:2c:82:80:c9:71:
         cc:9b:4a:f0:8b:c2:1b:e7:bb:a1:58:67:27:1c:64:09:2e:be:
         0b:dc:53:e4:b0:b3:65:a0:90:24:ac:22:4b:a0:ea:8f:e6:73:
         fd:3e:28:f4:41:98:4f:c9:35:66:84:02:55:52:94:58:32:b0:
         af:63:77:86:bb:2a:f5:e1:db:3a:dc:3b:fe:f0:9f:bb:ae:a1:
         06:42:70:f5:49:69:7f:d5:1b:91:01:5e:fc:28:a1:b6:da:e8:
         fd:dc:a7:5c:03:66:22:e6:6b:eb:80:75:07:9f:c3:03:0e:28:
         76:1a:eb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:59 2024 by rpki-client on console-fra.rpki-client.org