Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/8045C26A3B3E11EC94B9CE0BC4F9AE02.roa
File:                     8045C26A3B3E11EC94B9CE0BC4F9AE02.roa (raw, json)
Hash identifier:          I/1YYRZufm+Qc/8Hh8/4oZUCrPLEFvhM/LrJmE0hiuA=
Subject key identifier:   96:2A:8F:B4:F9:80:F8:36:E6:5A:D6:27:D6:A6:16:55:57:F1:F2:7A
Certificate issuer:       /CN=A9166E2B/serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B
Certificate serial:       0B92
Authority key identifier: 01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/8045C26A3B3E11EC94B9CE0BC4F9AE02.roa
Signing time:             Wed 10 Jul 2024 19:37:03 +0000
ROA not before:           Wed 10 Jul 2024 19:37:03 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     139294
IP address blocks:        103.115.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl
                          rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2962 (0xb92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166E2B/serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B
        Validity
            Not Before: Jul 10 19:37:03 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=668ee2df-145c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0d:66:a3:d2:e1:b5:2e:05:98:82:29:fc:01:
                    a2:3e:7d:95:29:38:c8:0b:17:b5:06:61:68:10:c7:
                    03:3f:54:c2:d0:a2:be:03:26:0e:97:d5:76:98:02:
                    5f:bf:97:02:41:00:81:1f:25:22:45:47:6c:e2:c7:
                    e9:64:47:f9:53:e7:a1:c7:dd:7c:bb:85:ba:8e:f7:
                    5a:69:3b:1a:aa:5a:1d:34:16:62:2b:39:68:d4:7a:
                    ef:da:74:88:86:43:db:b0:2d:de:7c:12:20:ae:82:
                    88:31:bb:53:82:91:2e:2b:0d:92:be:2b:86:47:32:
                    70:0f:09:63:bf:95:7f:fe:c4:b8:fb:23:72:68:cc:
                    dc:e3:e7:0e:32:9e:7e:d9:33:ec:1b:bf:ab:17:34:
                    83:7a:03:ad:0c:ef:89:c1:e1:e1:5a:cf:26:a5:27:
                    3d:9f:05:5a:bf:85:f1:c1:ae:ca:08:de:5f:97:8c:
                    a6:7f:fe:49:18:72:8b:07:e9:5c:31:54:b2:43:6b:
                    80:5b:c5:90:69:aa:f4:ce:65:77:56:46:96:0c:34:
                    8f:45:03:4a:8c:84:43:8e:dc:d7:96:76:60:00:e3:
                    eb:4e:c2:43:c6:4c:49:5a:87:b4:e0:7e:95:1d:8e:
                    26:be:83:09:c3:0e:26:06:59:10:b4:73:42:c0:07:
                    0e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2A:8F:B4:F9:80:F8:36:E6:5A:D6:27:D6:A6:16:55:57:F1:F2:7A
            X509v3 Authority Key Identifier:
                keyid:01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/8045C26A3B3E11EC94B9CE0BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:31:4c:a9:96:11:39:85:f0:ad:f5:02:c1:ba:88:b8:39:b9:
         11:db:18:88:30:7b:33:88:aa:d5:c9:a2:3a:c8:39:80:c1:ad:
         0a:92:3e:2a:1f:a9:58:6c:97:34:72:06:56:49:3d:78:7d:b7:
         e7:d6:bf:f5:69:ab:4e:04:d0:42:39:df:41:d2:1e:01:d5:5c:
         e7:97:68:a4:8f:3d:79:5d:3d:8f:29:6d:26:37:4a:05:29:56:
         36:83:4c:40:54:45:83:22:75:fb:3a:1a:0b:16:e8:4a:62:1c:
         0c:9a:33:29:d3:be:89:8e:66:23:a6:bc:5e:95:47:96:60:a4:
         d1:78:da:84:7a:f5:01:4c:eb:24:a1:41:1b:52:05:78:78:f9:
         aa:56:20:c2:97:30:77:c2:f1:fc:aa:fd:48:d7:13:54:2f:2e:
         49:c4:d1:6c:74:51:7e:17:bd:9b:50:2c:e7:cf:3e:f9:e6:76:
         22:af:38:44:51:2e:54:fc:bf:1e:e5:ad:f2:31:a9:5c:32:e1:
         1b:c8:2d:6a:57:7e:ff:0e:be:43:77:5b:24:7f:5d:af:86:28:
         3a:fb:a7:6c:57:16:c8:24:ed:4a:d6:b1:04:9a:e2:f1:c8:a6:
         01:45:e3:eb:21:c8:7a:b5:7c:84:e4:4f:17:2b:84:1e:44:14:
         77:ab:14:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:59 2024 by rpki-client on console-fra.rpki-client.org