Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/2BA0624C078511ED87041524C4F9AE02.roa
File:                     2BA0624C078511ED87041524C4F9AE02.roa (raw, json)
Hash identifier:          1RZU0spXmvxzBxOJllCgbla9KxLkGAPl5bLUojUqNcc=
Subject key identifier:   DD:D6:84:6C:65:23:3E:80:8A:80:16:4E:54:D3:AC:DB:D8:93:88:57
Certificate issuer:       /CN=A9166E2B/serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B
Certificate serial:       0B93
Authority key identifier: 01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/2BA0624C078511ED87041524C4F9AE02.roa
Signing time:             Wed 10 Jul 2024 19:37:06 +0000
ROA not before:           Wed 10 Jul 2024 19:37:06 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     140229
IP address blocks:        103.115.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl
                          rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2963 (0xb93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166E2B/serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B
        Validity
            Not Before: Jul 10 19:37:06 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=668ee2e1-df3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8c:dd:9e:45:d8:f2:89:b6:1a:a7:21:f2:c6:
                    ea:6d:da:49:ae:63:9e:ed:a1:d2:5c:ae:a5:12:3c:
                    3d:2a:97:1b:40:f8:01:17:9c:88:52:75:f0:40:68:
                    7d:a5:10:8a:b0:0f:10:54:55:42:75:e6:5f:63:3e:
                    cb:73:da:b4:c1:27:8c:20:43:88:c2:7c:64:1b:05:
                    31:8d:60:dc:01:97:fb:61:40:05:10:2a:41:b3:be:
                    bd:1d:b4:d3:b1:92:32:3c:d5:c8:80:f0:02:b7:d6:
                    16:88:e1:de:3e:f7:48:f5:39:5a:e7:8e:b3:e5:88:
                    42:8a:5a:72:e7:9b:53:85:9b:3b:f1:b3:27:90:c9:
                    95:0f:4e:f3:b9:ca:5e:44:cd:51:36:40:e6:ee:15:
                    06:ec:1e:b3:79:84:17:de:f9:15:85:d5:b0:bb:e5:
                    cf:dc:c7:f0:2c:fd:8a:9c:7b:cb:cd:a4:38:fa:4e:
                    b0:23:c7:de:61:49:c8:f6:bf:f4:d3:58:c1:e1:04:
                    22:6a:db:d2:2c:47:52:d5:30:87:92:52:37:ee:6d:
                    9f:e0:73:c9:ea:18:99:b7:2a:4e:cd:00:d4:aa:a1:
                    07:ee:ec:af:61:05:95:fd:7b:3e:1b:26:81:76:02:
                    a8:02:07:2e:03:df:15:8d:a5:f4:64:d4:c9:3c:4a:
                    69:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D6:84:6C:65:23:3E:80:8A:80:16:4E:54:D3:AC:DB:D8:93:88:57
            X509v3 Authority Key Identifier:
                keyid:01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/2BA0624C078511ED87041524C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:49:d2:cb:aa:fd:3f:1e:c5:ce:5d:b0:cc:6b:f5:0a:69:ee:
         89:1b:a4:72:67:67:af:12:72:6c:69:a3:5d:69:26:47:90:96:
         26:0d:6b:c1:ca:d0:91:20:e4:56:1b:2c:78:7e:da:2c:41:c3:
         5e:41:8c:38:a1:8b:9f:9e:01:5b:b1:54:30:c1:55:bc:0c:32:
         a5:a5:28:5a:38:94:e8:78:9e:d6:fb:f7:8c:d6:f8:f4:79:93:
         8d:d2:c9:91:ce:3e:62:41:88:10:8d:5d:c4:e5:09:4d:02:d4:
         b7:87:23:b0:b1:ea:27:0e:23:01:58:50:a1:f8:c5:9b:57:7c:
         22:15:1d:21:2a:5a:87:52:3c:70:56:ba:21:ac:c3:8d:6d:cb:
         d7:8b:ea:ec:87:cd:0b:ef:71:24:f1:aa:f5:a4:58:42:5b:51:
         41:68:b0:f2:4b:79:0e:31:83:64:10:c0:b3:20:d9:5b:9b:ca:
         df:47:1d:65:49:52:9c:67:ad:1b:5f:31:c2:87:f8:ba:60:0e:
         3a:5d:96:46:52:7d:2f:84:33:e4:6b:35:8e:1f:9d:bc:2a:72:
         f0:d5:4e:fb:72:36:88:be:d1:06:f2:7a:14:50:e2:04:3d:ca:
         c3:f4:e1:2d:72:cd:9b:c3:da:26:74:3d:8a:68:17:f5:d2:b9:
         de:c9:90:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:59 2024 by rpki-client on console-fra.rpki-client.org