Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/A64A2A9437E411EC9BA3E20AC4F9AE02.roa
File:                     A64A2A9437E411EC9BA3E20AC4F9AE02.roa (raw, json)
Hash identifier:          W6nL3EukqFE9RFLXXry6g4CH+1Dbd14zPnwD38PnUxM=
Subject key identifier:   93:C1:B4:4C:83:88:9C:E0:AA:78:37:BE:C8:DF:17:2C:81:4F:E1:60
Certificate issuer:       /CN=A9169E9B/serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB
Certificate serial:       0B3B
Authority key identifier: 97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/A64A2A9437E411EC9BA3E20AC4F9AE02.roa
Signing time:             Mon 14 Oct 2024 19:27:57 +0000
ROA not before:           Mon 14 Oct 2024 19:27:57 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     58715
IP address blocks:        103.129.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl
                          rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:57:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2875 (0xb3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169E9B/serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB
        Validity
            Not Before: Oct 14 19:27:57 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=670d70bd-440b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1e:54:8e:02:1f:98:a0:49:86:25:4d:69:88:
                    ae:b6:81:5a:e7:44:d7:bc:65:1d:98:4d:c7:42:13:
                    d3:86:1a:8f:25:1e:f5:c5:27:cc:38:5c:5c:57:a2:
                    88:c4:73:33:78:64:36:9c:81:34:1a:93:fe:f9:07:
                    ef:39:42:27:d6:f5:bf:6f:a7:ea:97:fd:7f:02:18:
                    c3:92:f4:73:16:76:48:fb:86:34:20:19:a3:e2:fa:
                    d4:13:d7:d0:0e:c9:7e:6b:de:ba:48:ff:45:5a:56:
                    c5:7c:23:e0:a5:aa:92:a5:23:87:5f:cd:3f:70:45:
                    ae:61:e4:79:d8:71:e9:7a:31:8c:ed:bc:99:2b:b7:
                    9d:5e:12:1d:1d:19:00:2f:2d:10:52:fe:c4:04:e3:
                    f8:6f:21:a0:1d:39:9b:cf:d1:2e:e1:b9:2d:30:46:
                    ca:f6:27:d0:c0:9c:31:ac:bb:8c:f6:39:c3:a7:9a:
                    d5:a5:7a:c1:04:d3:82:c9:a3:1e:24:dc:ec:0a:c1:
                    eb:a7:ab:3b:f8:99:a7:cb:35:c7:96:13:ba:ad:d6:
                    0f:65:02:50:0e:c4:3b:3c:f4:ce:7f:cb:0e:8e:e5:
                    ff:18:53:ab:3f:11:28:56:6c:69:98:c9:74:1d:97:
                    0a:79:5b:c0:3c:75:08:ad:ac:12:28:e7:ce:b0:51:
                    b5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C1:B4:4C:83:88:9C:E0:AA:78:37:BE:C8:DF:17:2C:81:4F:E1:60
            X509v3 Authority Key Identifier:
                keyid:97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/A64A2A9437E411EC9BA3E20AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:e7:08:2a:af:3b:37:56:af:a6:0e:b8:6e:10:d8:62:b1:f9:
         ed:55:8f:da:36:2e:01:bc:5a:bf:91:cf:ef:0c:ee:a6:c6:c1:
         b5:1c:5b:7b:05:3d:c6:b7:f3:c3:11:6b:23:80:17:32:c7:91:
         e6:36:05:a9:25:7b:f6:e7:6d:94:35:68:28:32:fd:ea:a4:80:
         7a:a3:e1:d9:51:58:c6:f6:c8:57:b6:17:e3:a4:5a:ae:30:f7:
         04:f5:29:82:4e:9f:5f:93:d3:98:80:aa:32:a0:a0:ec:d9:d8:
         24:c9:0a:e9:1d:54:4e:80:33:c7:dc:8d:6f:ed:25:03:5c:b3:
         c5:88:f7:36:6f:ef:18:d1:8b:f9:f0:93:b1:3c:a8:a6:be:9e:
         8d:de:50:02:09:e4:21:c8:b5:68:b0:8e:47:02:0d:39:fa:c4:
         65:93:f8:8a:63:e3:48:89:6d:a0:70:fe:1c:e3:a8:54:5e:af:
         b0:2a:ac:a8:9d:de:da:fc:50:65:a6:43:a7:f5:90:7a:5a:f7:
         f4:05:40:81:f9:61:cc:b2:cc:dc:73:98:93:c7:ad:93:1a:d7:
         52:bd:99:68:a6:15:5c:5f:b4:3c:a8:c8:da:d8:13:2d:d1:2a:
         f4:c2:ed:5d:cd:72:c4:b5:22:f5:7f:71:6b:22:f4:0f:81:b8:
         47:77:50:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:29 2024 by rpki-client on console-ams.rpki-client.org