Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/3FEB4A2EBD8C11EDA150C338C4F9AE02.roa
File:                     3FEB4A2EBD8C11EDA150C338C4F9AE02.roa (raw, json)
Hash identifier:          nXIaKuUBJG5iCj/tPzK1KC24tDJ2glAmEW+mAsZE8j4=
Subject key identifier:   8F:09:28:ED:8D:44:29:FF:2B:BA:5C:2F:0B:1B:D4:CB:3D:5D:27:48
Certificate issuer:       /CN=A9167427/serialNumber=AD9515DF95BFD4F8EDFF5D8CBD2AB4B9BD84F8A4
Certificate serial:       CD
Authority key identifier: AD:95:15:DF:95:BF:D4:F8:ED:FF:5D:8C:BD:2A:B4:B9:BD:84:F8:A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rZUV35W_1Pjt_12MvSq0ub2E-KQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/3FEB4A2EBD8C11EDA150C338C4F9AE02.roa
Signing time:             Fri 29 Mar 2024 05:58:16 +0000
ROA not before:           Fri 29 Mar 2024 05:58:16 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     18001
IP address blocks:        103.96.226.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.crl
                          rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rZUV35W_1Pjt_12MvSq0ub2E-KQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:37:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167427/serialNumber=AD9515DF95BFD4F8EDFF5D8CBD2AB4B9BD84F8A4
        Validity
            Not Before: Mar 29 05:58:16 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=66065878-fdcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:de:17:dd:46:fb:8a:c3:f4:42:63:43:08:a0:
                    df:b5:da:44:d8:04:2a:4b:df:de:00:25:a6:69:eb:
                    5e:0e:39:77:d6:8e:07:21:eb:f3:61:ee:03:fe:1f:
                    5d:0d:8d:28:df:b5:c3:bc:ac:0f:bb:a3:b9:e9:da:
                    ac:2e:59:cf:1d:8a:e5:fd:35:af:8e:2b:03:76:7a:
                    a8:b2:50:de:e5:0d:8d:c3:bd:ec:93:5f:58:5b:c8:
                    53:10:b0:90:54:3e:9d:fd:0d:65:f6:0f:c8:66:cd:
                    3f:89:06:75:7e:d4:13:49:c1:cf:ee:02:e7:17:f3:
                    fd:ca:92:a1:a8:67:da:e1:f7:29:f7:f4:9b:be:fa:
                    a5:d1:13:28:6f:d2:30:c2:69:38:ef:0f:4f:60:eb:
                    53:3f:51:d9:39:f6:24:a7:b5:64:dc:23:49:b9:ba:
                    d9:2e:f6:f2:da:9d:46:cb:53:27:8b:0e:e6:67:64:
                    06:c9:69:87:14:9b:3c:60:ed:59:bd:6a:01:2c:76:
                    f6:fe:9d:e5:a4:80:3c:aa:15:1d:7f:ff:5a:42:83:
                    f9:88:19:d9:45:af:8d:66:77:8a:4e:47:71:f2:77:
                    3d:8a:7c:ef:be:6b:4c:05:98:b3:fc:0a:d7:64:ae:
                    9d:5b:29:4c:38:37:b6:e1:e7:d9:88:44:bd:a9:d9:
                    37:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:09:28:ED:8D:44:29:FF:2B:BA:5C:2F:0B:1B:D4:CB:3D:5D:27:48
            X509v3 Authority Key Identifier:
                keyid:AD:95:15:DF:95:BF:D4:F8:ED:FF:5D:8C:BD:2A:B4:B9:BD:84:F8:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rZUV35W_1Pjt_12MvSq0ub2E-KQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/3FEB4A2EBD8C11EDA150C338C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:47:6e:b5:71:b2:ea:3c:9c:0e:ee:f2:89:44:fa:2d:da:b3:
         0e:fd:43:15:62:90:af:ca:3a:3a:3a:ed:5b:b6:11:f2:fa:21:
         9e:b8:2f:68:4b:1c:d2:e0:d6:a0:bf:ab:ee:ec:7c:e9:67:74:
         1e:cc:cf:b3:cc:cc:15:70:46:e9:ed:d6:aa:97:8a:19:66:ac:
         3f:91:ea:3a:80:55:09:88:41:dc:94:89:52:8e:3b:46:02:73:
         7e:d2:d1:a0:04:5a:88:8b:f9:db:cb:fc:10:df:97:29:81:94:
         5e:68:ab:97:23:fa:44:fe:e1:be:6d:1e:60:3c:88:66:f8:78:
         8e:cb:a4:0e:df:f5:c7:a4:64:4f:93:38:28:ed:69:27:01:26:
         35:41:cc:80:33:5a:9e:3b:2d:80:66:04:78:e4:f0:32:bc:bf:
         91:16:aa:2a:22:df:c7:ac:9b:f8:64:9a:c7:f1:a7:7b:59:69:
         e9:0c:84:6c:d2:e6:16:8b:b2:fb:77:fb:8c:39:78:1e:2f:c8:
         31:b2:8a:09:81:f9:5a:5f:ed:70:f9:4e:72:ea:23:7a:03:e7:
         03:e0:c7:d3:fb:02:94:e9:f8:9d:eb:93:1d:80:84:37:59:21:
         63:7c:4d:0c:55:93:3b:cd:8f:be:4b:aa:db:0b:d7:f8:49:db:
         75:f4:4a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:50 2024 by rpki-client on console-fra.rpki-client.org