Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/A6EF086637E411EC9BA3E20AC4F9AE02.roa
File:                     A6EF086637E411EC9BA3E20AC4F9AE02.roa (raw, json)
Hash identifier:          K2Zxx9ME49vXDeg1Ffdf+j0UFdQqBnMUQi0IozP8thk=
Subject key identifier:   DD:BE:C9:2B:B4:93:8F:31:6C:31:37:7A:4F:C5:05:9C:12:D4:BB:72
Certificate issuer:       /CN=A9169E9B/serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB
Certificate serial:       0B3C
Authority key identifier: 97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/A6EF086637E411EC9BA3E20AC4F9AE02.roa
Signing time:             Mon 14 Oct 2024 19:27:58 +0000
ROA not before:           Mon 14 Oct 2024 19:27:58 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     63969
IP address blocks:        103.129.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl
                          rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 18:42:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2876 (0xb3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169E9B/serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB
        Validity
            Not Before: Oct 14 19:27:58 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=670d70be-8363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:de:16:03:96:f3:86:09:a9:bb:1f:88:89:d1:
                    59:aa:d7:d3:60:eb:70:84:61:56:62:bf:5e:82:b1:
                    72:de:e1:9a:05:28:a9:f8:17:db:b4:20:b3:10:12:
                    c1:db:bd:07:47:62:70:5b:2d:a3:ca:f2:68:d7:42:
                    56:af:48:d5:fe:6b:82:97:6a:66:5c:9f:6e:a8:cd:
                    75:e4:15:71:8d:ed:2b:1f:41:3b:07:af:73:ac:9d:
                    d6:3b:43:7b:e0:dc:7c:70:e2:58:27:5d:82:7c:e8:
                    c8:68:08:61:a4:98:11:39:9c:f4:ec:6a:d9:f5:f2:
                    e0:a5:fb:06:f1:22:ef:04:05:02:d6:c8:ad:a3:8b:
                    2e:40:de:d8:8d:a5:91:34:2d:01:86:58:a5:5a:a0:
                    b9:b8:d4:b3:73:12:00:8c:be:f8:2e:7f:89:08:ef:
                    5b:9d:f2:1d:7d:b6:8f:6e:0a:38:13:31:04:94:aa:
                    82:92:c2:52:13:da:66:10:1b:bc:24:67:e1:16:6d:
                    ea:21:63:8e:c3:b3:e1:39:a5:89:aa:c9:03:b7:46:
                    21:89:86:25:05:2a:b9:fa:17:52:db:42:20:4d:95:
                    a4:e3:56:74:57:e6:e4:6c:90:e7:f4:52:37:68:67:
                    26:75:9e:43:05:f0:ef:9b:b2:ca:61:3e:78:e1:05:
                    7b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:BE:C9:2B:B4:93:8F:31:6C:31:37:7A:4F:C5:05:9C:12:D4:BB:72
            X509v3 Authority Key Identifier:
                keyid:97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/A6EF086637E411EC9BA3E20AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:ee:d4:c3:37:7a:cb:d8:39:96:84:a0:10:33:8e:30:39:c4:
         2b:3b:40:28:3e:10:8b:2d:b1:2d:22:e8:cd:8e:fd:73:7c:fa:
         5b:4d:70:6b:aa:98:ef:a8:b2:d8:70:d5:44:38:96:18:82:8e:
         6a:4a:87:a9:40:2d:1e:d7:30:31:83:f1:c9:01:ac:0a:22:6d:
         f9:12:f6:e8:e9:56:f6:f4:34:52:e6:fc:0e:b2:ed:c6:b5:a7:
         2f:77:ff:3d:1f:22:6d:15:43:14:eb:44:9b:0e:00:80:be:1d:
         59:b5:2b:af:ff:51:ef:7e:41:48:b8:75:da:d1:95:af:ec:19:
         83:1e:35:01:05:4e:d7:7d:c2:03:11:aa:d6:2a:61:3f:48:d9:
         f2:94:4a:8d:f8:12:98:4e:0e:13:64:35:72:48:65:fd:ea:07:
         a2:df:a8:0c:69:ea:18:b3:cb:37:f3:b5:05:78:0c:c5:ed:97:
         57:dc:36:d6:8b:e9:97:94:be:ed:4c:14:3c:6b:f5:a9:5e:0b:
         81:d1:34:6f:77:8c:10:ea:98:1c:b4:92:ae:cd:d3:59:c1:07:
         b7:17:0b:d2:82:fa:0d:1b:c3:a6:6c:7c:c0:c7:e0:5c:ba:62:
         df:e3:ba:4e:c5:00:32:cf:94:74:a4:0e:00:00:3f:bd:64:e6:
         6e:78:61:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:07:24 2024 by rpki-client on console-fra.rpki-client.org