Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/9E4B680ED91A11EB8639B184C4F9AE02.roa
File:                     9E4B680ED91A11EB8639B184C4F9AE02.roa (raw, json)
Hash identifier:          3LfLNjF5K+B7j//JGPed0a8oEZAI+af7Vdm9h5Hkv3s=
Subject key identifier:   30:E8:D4:94:4D:41:A7:DA:19:3C:37:E2:03:2C:69:D3:48:C1:8A:F2
Certificate issuer:       /CN=A916732F/serialNumber=1FB4C3C5796F14B39DF51EFBA9DADAFD5CEBD09B
Certificate serial:       0489
Authority key identifier: 1F:B4:C3:C5:79:6F:14:B3:9D:F5:1E:FB:A9:DA:DA:FD:5C:EB:D0:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7TDxXlvFLOd9R77qdra_Vzr0Js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/9E4B680ED91A11EB8639B184C4F9AE02.roa
Signing time:             Tue 09 Jan 2024 01:22:47 +0000
ROA not before:           Tue 09 Jan 2024 01:22:47 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     140068
IP address blocks:        103.161.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.crl
                          rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7TDxXlvFLOd9R77qdra_Vzr0Js.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 01:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1161 (0x489)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916732F/serialNumber=1FB4C3C5796F14B39DF51EFBA9DADAFD5CEBD09B
        Validity
            Not Before: Jan  9 01:22:47 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=659c9fe7-cab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:00:f7:fa:25:b8:c7:f5:3c:13:85:c8:67:a3:
                    1d:fc:d8:20:e3:98:08:13:22:05:06:fc:7e:9c:82:
                    64:bd:5e:fd:3c:e6:96:6b:3b:1f:97:4b:72:1b:de:
                    ab:2d:94:f4:b1:21:b6:f9:8d:bf:b6:e2:47:bf:33:
                    d3:85:da:69:35:89:d8:75:55:76:66:75:09:60:bf:
                    ed:91:db:b8:8f:d8:91:63:66:1b:41:55:59:ba:09:
                    d2:c4:0d:7c:95:34:21:78:29:5c:64:d2:cb:0c:46:
                    ba:21:08:e4:75:ff:0b:5f:75:ba:9e:9c:a7:a1:68:
                    ee:f4:6f:9e:60:85:21:96:bd:0e:7b:61:42:3d:d2:
                    c6:d5:53:29:9c:68:f5:af:87:e2:3f:9b:66:26:ed:
                    92:39:10:4b:b0:3b:19:c3:ff:1a:25:14:b3:05:f2:
                    e4:8b:00:85:aa:a3:71:f3:57:66:c6:af:40:ab:69:
                    f4:57:8a:e0:c2:4e:9f:ec:bb:27:ac:40:2f:f2:fa:
                    ba:c1:18:7f:40:71:4d:8c:29:bd:62:8a:66:94:d6:
                    e0:c6:c6:a8:67:bd:a0:98:9f:96:be:bc:d3:fd:22:
                    51:c2:a4:8e:66:3d:67:04:50:72:1f:cf:c0:6f:54:
                    01:16:fd:29:18:b7:cd:4a:4c:5b:19:4a:8a:03:93:
                    11:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E8:D4:94:4D:41:A7:DA:19:3C:37:E2:03:2C:69:D3:48:C1:8A:F2
            X509v3 Authority Key Identifier:
                keyid:1F:B4:C3:C5:79:6F:14:B3:9D:F5:1E:FB:A9:DA:DA:FD:5C:EB:D0:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7TDxXlvFLOd9R77qdra_Vzr0Js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/9E4B680ED91A11EB8639B184C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:b0:79:b0:7b:ed:33:16:5c:e9:6d:b2:6d:73:ea:57:cf:8a:
         af:5a:2f:9d:d3:42:7f:a3:53:c0:42:14:74:41:33:3d:66:da:
         68:9d:6e:a2:c8:d4:ea:46:38:f8:95:8f:bd:47:e2:99:27:1e:
         f4:57:d4:1e:78:6f:56:78:05:56:ec:82:91:fd:d3:9d:e2:78:
         9f:9b:fd:dc:58:fe:fa:19:28:13:54:a8:84:66:49:5b:bd:dd:
         57:64:6c:2a:b1:d3:2a:12:77:81:da:f6:e2:d0:9c:13:2a:16:
         0a:57:86:69:33:fc:2b:27:81:8f:32:2f:71:99:8a:9e:d1:9a:
         35:6f:e2:37:81:65:36:df:d7:c8:d5:88:7f:e3:07:fa:ba:01:
         ca:cc:3a:aa:ec:9a:ab:aa:63:c1:5d:a5:7c:f6:d3:e6:1b:5d:
         b3:dc:9c:2e:80:39:d3:5b:4b:bd:67:3b:19:a4:8f:00:fd:79:
         c1:fe:37:dc:38:cb:96:e4:10:8a:1d:82:5f:da:b7:a0:0a:b6:
         ef:d3:1b:93:59:2f:47:e8:f1:eb:e9:e6:3f:e7:e1:06:5f:52:
         b6:87:61:d7:0a:fc:54:fe:ca:21:90:e6:9e:c4:4f:17:40:3c:
         c9:22:c6:71:d8:2e:7b:a0:70:49:4f:de:a5:f7:b1:01:45:c7:
         a9:4d:8d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:59:08 2024 by rpki-client on console-ams.rpki-client.org